Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.mft
File:                     CWUHv9kVIo3x0Hqn0GfURCzttFs.mft (raw, json)
Hash identifier:          hG8SCAoPkqx06k6JXFYgA5AiJUJ0qvulYgSfpiHTi/I=
Subject key identifier:   AB:02:B1:88:E5:FA:65:6E:47:35:76:F0:A6:AA:7B:CE:2F:D5:8D:18
Authority key identifier: 09:65:07:BF:D9:15:22:8D:F1:D0:7A:A7:D0:67:D4:44:2C:ED:B4:5B
Certificate issuer:       /CN=096507bfd915228df1d07aa7d067d4442cedb45b
Certificate serial:       01A0DF18B47004887162FE40360B67AE056E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWUHv9kVIo3x0Hqn0GfURCzttFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.mft
Manifest number:          EE
Signing time:             Sat 26 Sep 2026 19:02:13 +0000
Manifest this update:     Sat 26 Sep 2026 19:02:13 +0000
Manifest next update:     Sun 27 Sep 2026 19:02:13 +0000
Files and hashes:         1: CWUHv9kVIo3x0Hqn0GfURCzttFs.crl (hash: 9eFm+fwk85RVcRykGzThx+KSiKqCC/ZvRzQTS4WApLg=)
                          2: ztqWMk9aRM6Ky0IAoscpnekSXpA.roa (hash: bnmXKmu5kt8lvX6cZMu/9l/QC9fmTJ80CL2ADfdOE4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CWUHv9kVIo3x0Hqn0GfURCzttFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:18:b4:70:04:88:71:62:fe:40:36:0b:67:ae:05:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096507bfd915228df1d07aa7d067d4442cedb45b
        Validity
            Not Before: Sep 26 19:02:13 2026 GMT
            Not After : Sep 27 19:02:13 2026 GMT
        Subject: CN=ab02b188e5fa656e473576f0a6aa7bce2fd58d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:1d:06:56:ce:42:e9:c2:a7:5a:d3:cb:bc:
                    76:03:e4:ad:33:7d:3a:6e:3c:2c:b1:a1:48:72:d9:
                    e4:18:a9:80:7f:36:97:e2:4d:73:9e:38:ab:e8:fa:
                    05:eb:0d:8a:fd:c8:49:d0:ab:05:92:19:29:f8:b7:
                    14:e4:81:47:d9:fd:42:ac:f7:ee:f4:ae:55:8f:e3:
                    0e:b8:68:a4:f5:7c:44:92:10:57:ac:5f:d1:55:64:
                    72:ac:27:e7:ac:46:b1:9f:ab:58:ea:46:f5:89:fc:
                    dd:aa:9f:7c:5d:16:b3:74:8e:e4:ce:70:cd:42:71:
                    1a:8b:91:02:9a:e2:5f:f5:8a:22:1f:e2:a6:30:46:
                    18:cb:6b:0b:00:ba:77:d1:65:c1:f3:54:80:92:1a:
                    47:78:11:84:8a:a6:69:42:9a:16:8e:69:c8:6e:1a:
                    76:de:15:91:fd:92:b5:7a:01:8f:7c:01:26:0a:e3:
                    53:c0:7f:7f:17:e9:6e:4c:1e:7b:3f:44:5a:4b:84:
                    69:44:f2:68:27:37:82:2a:8f:07:1b:79:3c:0e:c1:
                    99:7c:cd:14:af:2b:70:96:a1:fc:64:be:52:99:fc:
                    f9:38:87:24:56:54:35:25:71:13:29:03:7e:00:ab:
                    2e:2a:c8:ed:44:53:f0:73:f9:df:3e:13:16:1b:fe:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:02:B1:88:E5:FA:65:6E:47:35:76:F0:A6:AA:7B:CE:2F:D5:8D:18
            X509v3 Authority Key Identifier:
                keyid:09:65:07:BF:D9:15:22:8D:F1:D0:7A:A7:D0:67:D4:44:2C:ED:B4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWUHv9kVIo3x0Hqn0GfURCzttFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ae:2b:69:1a:e2:6e:6f:84:c4:71:f5:81:d5:0b:c2:57:be:
         5b:ef:f1:c2:8e:ca:18:ed:88:be:a4:21:cb:25:fa:6b:5d:dc:
         3d:49:8a:1f:21:0e:93:f8:e6:bc:34:25:3d:72:db:03:56:dd:
         ef:9b:ca:bc:9c:f7:6d:ef:08:95:92:c0:6d:7f:11:72:ae:68:
         3a:f0:4f:5f:ee:02:42:95:50:f6:53:d8:84:59:da:f7:a5:a2:
         d5:1f:00:fe:24:9e:a4:68:62:37:71:a9:31:ad:44:22:c3:90:
         8d:40:cf:76:e7:ec:86:2f:cd:0c:17:9a:92:43:73:5c:38:5a:
         91:fb:14:8c:ae:7c:1f:28:04:aa:94:c6:45:12:06:62:18:32:
         51:05:96:e3:e9:60:5e:af:7d:73:b3:b0:22:2c:17:d2:8c:c0:
         c8:b0:3d:8d:27:f1:e7:89:2e:f0:9e:62:93:c1:45:1c:93:d6:
         02:8b:11:b9:19:80:44:4f:ac:0a:7b:a1:28:23:c4:62:a9:42:
         e5:f4:95:e3:f8:07:c2:90:98:e5:ec:b0:ee:38:2f:2f:5c:e6:
         6e:54:5f:a1:ff:f7:50:ba:93:70:87:2a:74:b4:f7:dd:5d:fd:
         51:43:e7:f6:0f:0b:cf:2b:58:87:9b:bf:27:3f:d1:3a:7c:8b:
         0b:35:49:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:18:06 2026 by rpki-client