Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
File:                     0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft (raw, json)
Hash identifier:          BQlD+PrNsCKIg4YuE/izHg+f0V8Lehh8leCqVK/R8Ns=
Subject key identifier:   EA:64:73:2E:15:BE:D2:C8:C7:D3:70:36:19:B1:02:47:28:D5:03:CA
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Certificate issuer:       /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial:       01A0D0B7219FE0DBDD51828EE90750F3EC24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
Manifest number:          1A6D
Signing time:             Thu 24 Sep 2026 00:00:57 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:57 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:57 +0000
Files and hashes:         1: 0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl (hash: KZkkMXL0aU9YQzyQqAF5tCGote5WnLVDajNBwhuS4tY=)
                          2: 3v7_pd6AxduDKiF3xKgJGqymEqk.roa (hash: g+W/JVcPBEoaHA81/G0plL5WOD+5LjCl2XGzLzB5NuI=)
                          3: O6eW5NgA4SYtR0QdMpos9kGVbx8.roa (hash: vNWr6WjAQo4/b29D3hI5zGTafpoZZFqPo9hkvS1ZF+M=)
                          4: rVuwmGnwYv_V6whaEGlCtt_t-jU.roa (hash: eOWfhOukOgYiBn4QdoGi9zhMMnx1blKy6/IzloDdoFI=)
                          5: sz2hM6b0kWi5lGSZOx8xQWLEDac.roa (hash: WNOAe/3pRo5H7hWt2dUEHtw/6Zr0ujDafm8V0QNv03k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 00:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b7:21:9f:e0:db:dd:51:82:8e:e9:07:50:f3:ec:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
        Validity
            Not Before: Sep 24 00:00:57 2026 GMT
            Not After : Sep 25 00:00:57 2026 GMT
        Subject: CN=ea64732e15bed2c8c7d3703619b1024728d503ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:eb:ea:84:4c:7a:74:90:95:d2:1c:36:b1:58:
                    b6:d9:cd:3c:fd:e8:42:6a:1a:88:6f:12:78:a9:c4:
                    3b:46:d9:b7:fc:cc:a9:d9:ec:4b:25:43:a9:6f:2b:
                    9a:bd:91:c0:9f:0b:63:8f:41:06:b5:08:79:15:70:
                    a5:e9:05:9b:7b:14:0e:1e:c0:d5:09:a3:6e:92:8f:
                    c4:d9:6c:9f:15:e8:d8:b4:4c:57:d1:ec:ee:15:c8:
                    f0:1b:2e:f5:1e:f1:98:ed:5d:82:96:78:24:02:e1:
                    eb:c8:75:a8:05:7b:67:8f:7e:56:f9:10:f0:5a:67:
                    bf:39:e2:3b:97:a2:59:31:c5:43:34:53:f8:87:6a:
                    cf:5d:1a:51:52:46:48:8c:de:e3:28:4b:21:46:f9:
                    89:6e:1a:08:77:6d:79:44:7b:72:34:c0:a9:f3:6c:
                    93:5a:a5:01:8a:49:fe:0b:d3:2f:6f:96:ac:81:16:
                    63:3c:f6:4b:b7:b5:b5:7c:11:f7:fa:31:18:fb:49:
                    c0:21:a0:25:ab:76:6e:4f:c6:db:e6:16:e8:b1:11:
                    f4:7a:ec:11:57:11:97:d9:d7:12:3a:a3:a3:7f:84:
                    69:47:58:a9:6f:d5:49:ba:a2:99:fa:25:c9:be:5e:
                    da:87:eb:9e:21:e0:53:37:15:1c:94:c8:b0:33:92:
                    35:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:64:73:2E:15:BE:D2:C8:C7:D3:70:36:19:B1:02:47:28:D5:03:CA
            X509v3 Authority Key Identifier:
                keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:0c:bc:7c:43:60:b7:85:ff:ae:35:1a:34:5d:23:47:08:48:
         f6:e7:ed:5e:ad:73:fa:06:3f:8a:26:c3:94:e6:4e:df:32:ee:
         02:a4:81:8b:3e:67:57:fd:29:82:b8:96:6c:11:b9:ba:60:e7:
         09:a8:54:2b:1a:a6:f4:6d:cf:3a:d8:8e:3b:64:7f:11:b1:7a:
         b9:a5:61:1e:92:ff:61:cb:e8:f8:67:36:b4:54:08:82:ab:77:
         49:c2:4f:2a:6f:89:7d:4f:8d:38:33:ec:b0:48:d3:c2:6b:be:
         9c:06:f8:f2:e4:63:86:24:a0:bc:67:6c:ab:ee:b2:22:37:b8:
         3b:64:c3:b8:40:f7:80:e7:35:8b:c7:11:04:48:ac:ab:ac:ce:
         3f:fe:72:2b:47:c0:23:5d:3b:5e:82:86:c5:ed:2f:1d:38:10:
         21:06:21:ae:98:f3:18:a9:57:79:1e:87:fb:45:da:b9:8c:50:
         62:52:7e:72:21:81:9a:ae:62:28:8c:ea:d7:0d:b2:0b:01:dc:
         64:29:ae:ff:bc:21:6e:db:ad:c2:e8:1f:68:70:d1:e7:97:87:
         7c:6b:03:8b:0b:c7:4a:18:62:c4:a4:d9:08:66:22:ff:fa:60:
         77:e6:60:58:74:42:31:b5:31:f2:d3:94:f5:84:9b:f2:48:2a:
         b8:ab:33:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:53:48 2026 by rpki-client