Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
File:                     0GLPgHpWt3Gl9CzBia8tYx61quw.mft (raw, json)
Hash identifier:          GwtLk4mD2gLItMZTi3uuZbUkERb4QlmiH3mqFfgpGU4=
Subject key identifier:   10:0C:9B:00:5D:2B:75:1C:CD:A5:53:27:91:F1:1F:30:1E:D2:AA:88
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Certificate issuer:       /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial:       01A0DC853C742748C13D7E559E871875E329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
Manifest number:          0644
Signing time:             Sat 26 Sep 2026 07:01:54 +0000
Manifest this update:     Sat 26 Sep 2026 07:01:54 +0000
Manifest next update:     Sun 27 Sep 2026 07:01:54 +0000
Files and hashes:         1: 0GLPgHpWt3Gl9CzBia8tYx61quw.crl (hash: 79LHfrX/TvQ+TW+26GQaOxzix3q+G2WBEHORgTlWCFY=)
                          2: Zs-xR6bz0aDcX2FXhq0rr62PmYs.roa (hash: FHW9PNrXaAk17yVaUaDRlPcw+vmMTTkc0xlRD3/qYHw=)
                          3: piJSswQfIqs3HoYsozf8wWJQu_Y.roa (hash: 1ovHBWqaD1eU80Df7k4Dvy2LhX6Hg1bDFw1LN2vMbtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 07:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:85:3c:74:27:48:c1:3d:7e:55:9e:87:18:75:e3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
        Validity
            Not Before: Sep 26 07:01:54 2026 GMT
            Not After : Sep 27 07:01:54 2026 GMT
        Subject: CN=100c9b005d2b751ccda5532791f11f301ed2aa88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:36:26:72:bc:88:e2:57:c4:32:72:94:ad:
                    94:25:95:c6:f4:69:b7:84:2b:1b:b2:cb:5f:9f:b5:
                    fb:e2:45:52:46:b8:74:21:0a:e5:f9:4a:df:2c:cb:
                    1e:76:7f:42:47:c4:03:04:f1:03:50:2b:51:0e:d1:
                    5a:ba:5e:37:9f:aa:95:5b:b1:9b:db:e6:61:05:0f:
                    1a:62:92:3a:81:76:50:52:8c:1b:e1:b7:90:0e:bc:
                    09:6c:54:53:14:f3:8b:a6:6f:f3:02:60:fb:c6:1b:
                    8e:24:be:c5:f8:5b:2e:73:dc:d5:a9:a5:4a:b2:5b:
                    f4:2f:28:42:e8:b9:8e:1f:36:a1:97:28:51:fb:97:
                    a1:50:30:c2:fe:ff:ff:32:20:ad:f7:8b:be:4c:60:
                    5e:2e:81:42:57:32:3c:47:9d:c8:94:4b:06:51:9f:
                    81:6e:92:ba:91:8b:aa:e4:39:aa:94:a4:8d:ee:0e:
                    45:15:55:cd:52:30:48:0e:23:46:a3:39:45:d8:65:
                    88:7a:82:b0:c9:68:80:b0:1e:8e:df:cf:90:be:27:
                    06:91:58:d0:a4:e3:ab:d3:a0:5f:15:07:e2:1e:3f:
                    82:27:b4:26:1a:f6:bf:6c:54:86:bb:07:ed:39:9d:
                    0c:34:ce:c0:fd:c5:77:f6:e7:10:9b:ca:b0:2b:54:
                    9e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0C:9B:00:5D:2B:75:1C:CD:A5:53:27:91:F1:1F:30:1E:D2:AA:88
            X509v3 Authority Key Identifier:
                keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:05:6c:55:04:75:24:ec:55:2b:91:de:ec:28:c7:7b:0c:11:
         13:1a:35:6a:4d:27:58:50:2e:1b:c1:45:f9:c1:be:e3:6b:de:
         0a:28:8e:36:c7:01:e9:01:97:ac:00:c7:7c:8b:ca:b7:40:35:
         bc:b5:0b:d6:fe:ba:2e:32:01:ca:ff:e2:43:a3:b1:b6:99:fb:
         5d:ac:ef:4b:c1:c3:e3:09:1c:06:bb:b9:f1:eb:7c:81:e0:33:
         b1:b1:d2:80:d0:ec:11:9c:c7:aa:63:54:6c:64:aa:a2:16:51:
         cd:4c:d1:ba:f0:47:37:cd:f1:11:01:b5:96:66:f2:af:10:3f:
         fb:f8:4a:64:d0:12:2e:4b:94:41:8d:b9:3f:a2:e7:f2:34:e2:
         48:7f:c4:47:58:cd:f0:d0:a7:aa:e6:c1:a7:0a:3d:ae:52:ee:
         ec:2f:af:a5:cf:97:cf:ea:17:50:ce:58:5a:52:9b:40:9c:8e:
         19:22:ee:eb:39:0d:d1:b7:51:9d:c4:a4:e3:ce:ad:3c:dc:ab:
         10:b5:91:f1:5e:f0:5c:b7:07:46:da:5a:cc:a5:34:89:16:f4:
         38:ff:d2:36:fd:38:57:b1:38:3d:70:34:20:84:56:dc:62:a6:
         ef:d7:2c:56:55:19:2c:41:e2:1e:60:fb:e3:b0:7f:e5:8c:bb:
         13:fe:f4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:21:19 2026 by rpki-client