Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
File:                     dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft (raw, json)
Hash identifier:          udtj4Os+75qZ6ZNuEHZ6goFUrwE91Wra9LmUoquSREw=
Subject key identifier:   36:E3:2F:3F:D7:13:4C:71:81:15:4F:CC:F9:1E:81:31:55:AF:11:ED
Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
Certificate issuer:       /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Certificate serial:       01A11FAE3F15D9D38D44C2A7BEA5483E270C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
Manifest number:          1A96
Signing time:             Fri 09 Oct 2026 08:01:15 +0000
Manifest this update:     Fri 09 Oct 2026 08:01:15 +0000
Manifest next update:     Sat 10 Oct 2026 08:01:15 +0000
Files and hashes:         1: dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl (hash: 4cRfoJZ7UngG6+2k3XmO+S2Pu2xb5GiCGSSNHq8zjfo=)
                          2: hPEOUrTaqxkP0HraBv5tFWum52o.roa (hash: a68ZRNdry4Fa8CMUTj7dyBiReCufFH2K20dWi6+LdmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1f:ae:3f:15:d9:d3:8d:44:c2:a7:be:a5:48:3e:27:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
        Validity
            Not Before: Oct  9 08:01:15 2026 GMT
            Not After : Oct 10 08:01:15 2026 GMT
        Subject: CN=36e32f3fd7134c7181154fccf91e813155af11ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bb:73:38:83:8c:68:c4:f2:81:f8:9c:32:ae:
                    ae:43:59:85:fd:c5:7f:b1:f5:24:27:83:a5:0c:79:
                    48:4e:7c:ec:9d:86:d5:06:9f:69:b7:d3:85:34:4d:
                    43:f7:d2:c3:fc:59:41:26:8e:06:3b:20:69:bd:1f:
                    65:27:8f:f7:be:3f:19:47:67:e4:82:25:75:4d:dc:
                    33:58:ef:0c:c6:46:32:43:b6:18:df:ce:90:50:9b:
                    9a:1d:9d:0d:14:7f:26:42:b7:d4:51:12:6a:fc:eb:
                    93:f2:eb:8f:29:5a:bf:ae:76:12:78:ed:42:42:d5:
                    f6:be:14:af:c4:3d:c2:3a:f4:ac:20:9d:48:8f:bd:
                    3d:1f:99:b5:b6:0a:74:ea:01:94:3b:73:35:64:40:
                    ca:8e:b2:6b:b8:b7:59:fa:36:6b:65:16:f0:39:af:
                    99:5d:76:27:da:35:63:5e:6e:2a:ec:a5:97:0e:ce:
                    8f:79:bc:b9:61:db:b0:9f:91:87:e9:7e:ce:cc:fe:
                    95:a3:ab:08:19:c4:cb:7c:9f:06:15:74:04:84:b1:
                    8b:2b:cd:ef:c4:06:d5:e3:f9:36:84:df:53:ee:34:
                    99:5e:64:e9:83:4d:a3:46:46:be:16:31:2b:21:3f:
                    25:be:3b:44:2e:89:c0:da:ca:18:5c:a2:84:e0:4b:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E3:2F:3F:D7:13:4C:71:81:15:4F:CC:F9:1E:81:31:55:AF:11:ED
            X509v3 Authority Key Identifier:
                keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ee:a7:28:ad:f7:76:73:a0:7a:b7:09:a1:8c:d4:73:c1:86:
         cf:38:a2:a1:9b:4e:81:df:e4:f8:06:29:dd:a4:52:94:22:8a:
         71:41:f0:47:15:82:76:00:64:33:d5:f2:f2:c8:61:cb:cb:be:
         a9:04:1e:cf:fe:bf:c2:53:39:6d:34:ff:f7:66:83:38:12:b8:
         37:c8:fb:1c:79:ee:2a:9b:03:27:8a:d1:b2:dc:d7:1d:7e:6d:
         69:f9:82:5c:d5:27:dc:4d:38:c2:c7:1f:09:98:b0:02:99:52:
         55:8c:88:52:32:5d:bb:2a:95:1d:9e:d0:bc:5d:4b:62:47:45:
         00:15:f9:5a:f0:05:39:da:be:f8:89:0a:df:f1:7e:fd:62:83:
         46:dc:6b:c1:20:00:54:01:04:55:c4:70:78:35:e6:9e:52:46:
         65:4e:42:dc:67:a3:33:00:46:a5:30:4b:5b:22:2f:e2:ef:6f:
         7e:fe:80:14:45:90:da:70:66:2a:40:5e:b5:cd:51:11:8e:a1:
         89:f2:99:36:01:49:16:11:db:8a:21:62:e5:57:34:5a:62:49:
         86:2d:9d:e2:54:9d:f9:94:19:50:5a:b0:b9:92:95:6d:df:10:
         b2:e3:35:f9:b3:48:1c:2f:04:1c:84:34:a4:fe:60:01:8a:ce:
         f1:13:d6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 19:09:53 2026 by rpki-client