Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
File:                     CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft (raw, json)
Hash identifier:          YImZ6pvrIPgelxvPvVPykuIdiXfemnhtcj7NvwTW3W4=
Subject key identifier:   9A:14:B0:74:44:4F:D7:0F:12:0E:DF:25:4F:96:03:A8:47:89:D4:2B
Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
Certificate issuer:       /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Certificate serial:       01A0C8FD041A707683A5FFA0E7B94495971A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
Manifest number:          1A6A
Signing time:             Tue 22 Sep 2026 12:00:19 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:19 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:19 +0000
Files and hashes:         1: CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl (hash: A5mlto5zy4FZrIIhvGu9QisrmJkoawhGTxlMFnmUSlE=)
                          2: e1B2705bWqnmxFym6Lrtufuuh-c.roa (hash: hhYlxCpVJm2mMyzGqhpnxjIOnGS6n6nkCOmx8x2LUb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:04:1a:70:76:83:a5:ff:a0:e7:b9:44:95:97:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
        Validity
            Not Before: Sep 22 12:00:19 2026 GMT
            Not After : Sep 23 12:00:19 2026 GMT
        Subject: CN=9a14b074444fd70f120edf254f9603a84789d42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c1:aa:7b:d6:de:b5:1e:74:40:33:f9:dc:96:
                    17:5f:2e:07:ab:97:c2:d9:34:fa:4e:f9:d9:e7:7a:
                    7a:eb:ab:4f:bc:fe:4b:0e:7f:4c:0a:e9:35:06:67:
                    cf:01:f9:8a:9d:ff:34:b1:8c:00:5a:77:dd:6d:54:
                    6f:f3:26:64:a3:41:56:75:78:39:85:c7:b8:de:ee:
                    33:5e:c5:74:79:18:9d:72:6a:52:ce:e5:24:61:bb:
                    53:43:fb:2c:77:a4:a8:4a:1b:0e:92:a2:b1:b6:19:
                    9a:12:fe:51:5d:e3:fa:6a:7e:c5:3b:f5:34:87:47:
                    8b:cb:34:aa:bb:57:02:9d:de:2c:b7:22:7b:13:2e:
                    ec:9a:64:e2:bd:3b:bd:d7:46:bd:7f:ba:9c:2e:92:
                    ad:8f:b4:9c:d2:89:54:cf:32:f5:d6:fd:ba:ec:58:
                    75:fb:aa:14:74:42:71:5a:a7:dd:58:90:04:02:d1:
                    37:eb:5a:09:dc:e5:13:87:31:89:e3:bb:71:fc:1e:
                    a3:3b:01:61:e4:f6:8b:bb:b8:8e:fd:0a:b8:57:b3:
                    9a:6f:24:33:9c:35:1f:9a:79:93:d4:d2:69:95:da:
                    36:da:1d:59:d7:12:6b:e3:a5:8e:da:36:f3:c8:0c:
                    f8:a5:b8:e1:89:0d:22:dd:a7:f4:d7:a7:1b:29:6e:
                    f7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:14:B0:74:44:4F:D7:0F:12:0E:DF:25:4F:96:03:A8:47:89:D4:2B
            X509v3 Authority Key Identifier:
                keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e3:85:11:e6:f2:69:a2:01:e3:e4:93:cf:1e:ac:e0:32:68:
         29:64:85:7f:02:13:77:bb:3f:a0:f6:9c:a0:18:63:8c:6e:bf:
         38:70:0e:da:2b:6b:c0:7e:15:cf:b7:92:3d:54:1b:6e:f4:a5:
         c9:8c:ce:b0:58:2a:4c:a4:51:ce:b8:d8:ff:85:69:b9:8c:e2:
         f6:30:64:e6:dd:99:a8:5f:c1:5b:5c:19:05:68:1a:ed:1d:f7:
         78:3a:2d:0b:44:66:95:a4:a1:cf:78:87:fe:75:29:50:4c:b3:
         55:49:50:82:57:87:0d:68:34:c6:76:41:28:14:7b:ff:a1:0d:
         15:6a:f5:e7:95:be:cf:89:9c:2d:f5:ce:e5:c7:00:1c:14:2f:
         c5:00:94:30:65:95:e5:34:bb:1a:58:2c:03:b7:a8:08:19:5a:
         1a:7e:84:aa:52:19:da:81:ef:fc:74:c1:bd:4d:79:8a:d5:84:
         fa:5e:df:2f:36:b7:ab:f2:71:2b:39:c1:3c:30:96:39:37:c5:
         aa:57:c0:dd:69:b2:f5:29:59:72:e2:08:8b:ff:9d:a6:cd:50:
         af:fb:b3:c1:62:5c:1f:02:f7:a2:5a:8a:87:c2:06:fb:81:2b:
         c0:32:09:67:bf:49:1d:55:e5:7b:4d:dd:80:b2:d1:7f:7a:89:
         71:3f:6d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:12:57 2026 by rpki-client