Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
File:                     10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json)
Hash identifier:          bAlB/VnjBjRjBK9YaU4/uqcmoalT4iQld1+YQ4rwDeM=
Subject key identifier:   BC:20:08:B7:4F:8B:E7:2B:72:AC:B7:A6:5C:67:53:D7:F7:41:DB:88
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Certificate issuer:       /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial:       01A0CE5A9A79F654B1C6AD9075C59D266B4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
Manifest number:          1A6B
Signing time:             Wed 23 Sep 2026 13:00:39 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:39 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:39 +0000
Files and hashes:         1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: eAHUYqyatrBC4AtmMX9NwCMeFylXJWUrQ9eF3mlXO+g=)
                          2: OAbpOTnAOzglaKzJYR_dSWth0y0.roa (hash: p0BRSUqt0ibbeGiIUqDvTDnDIoyeLcX+EC1SME0H0Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:9a:79:f6:54:b1:c6:ad:90:75:c5:9d:26:6b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
        Validity
            Not Before: Sep 23 13:00:39 2026 GMT
            Not After : Sep 24 13:00:39 2026 GMT
        Subject: CN=bc2008b74f8be72b72acb7a65c6753d7f741db88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6c:85:93:8f:c9:71:b1:98:ee:c7:f9:fa:d7:
                    f5:d1:b7:1b:a5:c1:7c:49:db:63:44:27:dc:0d:a2:
                    5e:23:03:31:98:e8:2c:22:dc:ad:4f:53:bb:bc:3c:
                    5a:8c:fa:2b:87:5a:ac:55:43:f4:4c:8b:34:83:de:
                    6f:a5:fb:83:c9:f5:d5:d4:29:e3:c0:a0:5a:96:98:
                    ff:0b:da:bd:2b:10:0b:fc:ea:c5:99:f5:b5:06:6b:
                    a4:40:77:b7:40:4f:3f:f0:5c:00:ff:b6:c7:f9:1a:
                    75:42:16:0b:3b:c9:f1:3c:d2:c5:ea:f7:28:eb:c8:
                    88:f2:5c:78:6d:5d:e1:1c:fe:2c:ed:1a:6d:0a:47:
                    b5:e3:ce:0a:02:66:59:e4:a4:38:78:44:c3:56:9c:
                    00:c2:be:52:22:5f:13:c2:86:5d:95:44:f0:e4:63:
                    45:36:30:91:a3:c5:49:23:57:01:96:d8:12:f2:99:
                    16:a1:2d:87:15:53:23:86:f0:de:be:36:53:dd:8e:
                    c0:60:40:d4:29:97:b4:54:37:de:57:e1:9c:a8:b1:
                    d6:0f:13:2a:8c:96:f2:c8:cc:f2:42:48:c9:2d:fb:
                    88:0d:91:e8:bf:6f:48:43:3c:aa:d4:d7:fb:66:0f:
                    9d:f8:a0:aa:aa:a5:60:9d:7a:ee:97:34:72:f3:bb:
                    96:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:20:08:B7:4F:8B:E7:2B:72:AC:B7:A6:5C:67:53:D7:F7:41:DB:88
            X509v3 Authority Key Identifier:
                keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f9:7e:18:f9:c0:78:63:aa:1d:e4:4a:a8:3e:3d:ec:62:1a:
         3f:c4:2c:75:96:50:e5:79:26:aa:ca:4f:15:78:7a:f9:7c:49:
         5c:2b:bb:88:14:80:94:4b:53:cc:ac:af:9b:33:82:97:5b:9c:
         df:39:1a:15:5f:f0:e6:74:d2:e3:0c:77:16:c0:5b:4b:a4:7e:
         72:1c:40:80:d2:73:40:11:7e:db:de:9d:b6:b6:c2:c2:50:e7:
         f8:83:3a:de:9e:fd:89:a7:d8:6f:de:8d:4f:de:29:e8:e0:da:
         ff:9c:f5:66:f2:e8:fa:56:17:5f:24:9c:be:50:22:a4:b7:bd:
         d6:04:d6:37:19:89:fb:ce:5e:05:10:3c:61:70:30:af:4d:d6:
         96:f8:d9:cb:eb:c5:36:6d:ff:02:6a:9b:fd:aa:ee:50:90:e7:
         77:9f:d8:c1:eb:2a:5f:6e:21:65:bd:f3:41:9e:69:ea:b7:af:
         32:ac:6a:a0:7d:a8:1f:45:ab:48:5c:b4:c6:42:27:73:ed:20:
         7a:45:97:a3:3d:98:de:6c:4c:c8:c5:54:86:59:b6:c7:f9:c0:
         f4:e6:42:1c:5d:e5:e0:b1:a6:c3:09:76:95:ab:d6:c4:17:62:
         52:bf:55:c1:98:5d:c3:d4:9d:c3:f5:04:01:43:fe:b0:ff:70:
         d4:77:28:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:00:01 2026 by rpki-client