Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/0zc9HcYUjLJwlQh2q6_XQB1DMrA.mft
File:                     0zc9HcYUjLJwlQh2q6_XQB1DMrA.mft (raw, json)
Hash identifier:          Ao2OIDDpXfYSSHGjGJD2SHW7XHNIOIgJnCLZ1JYT7Jg=
Subject key identifier:   A6:75:F8:F9:3B:D6:63:20:13:63:05:21:57:56:94:4C:FA:24:05:DE
Authority key identifier: D3:37:3D:1D:C6:14:8C:B2:70:95:08:76:AB:AF:D7:40:1D:43:32:B0
Certificate issuer:       /CN=d3373d1dc6148cb270950876abafd7401d4332b0
Certificate serial:       01A0DF17BB3A473535BC28975828FC7391C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0zc9HcYUjLJwlQh2q6_XQB1DMrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/0zc9HcYUjLJwlQh2q6_XQB1DMrA.mft
Manifest number:          EE
Signing time:             Sat 26 Sep 2026 19:01:09 +0000
Manifest this update:     Sat 26 Sep 2026 19:01:09 +0000
Manifest next update:     Sun 27 Sep 2026 19:01:09 +0000
Files and hashes:         1: 0zc9HcYUjLJwlQh2q6_XQB1DMrA.crl (hash: mUH06lyujm0DWYQAHjIfpR6y3HL80LpKph0bMU/vamA=)
                          2: WfDkBo6-ByY2M_9lVfhhbvJ8pG8.roa (hash: JE6Ay7MaZYnar46SXXtpFkglHNLfLDb6FMY0RRt+DYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/0zc9HcYUjLJwlQh2q6_XQB1DMrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/0zc9HcYUjLJwlQh2q6_XQB1DMrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0zc9HcYUjLJwlQh2q6_XQB1DMrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:17:bb:3a:47:35:35:bc:28:97:58:28:fc:73:91:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3373d1dc6148cb270950876abafd7401d4332b0
        Validity
            Not Before: Sep 26 19:01:09 2026 GMT
            Not After : Sep 27 19:01:09 2026 GMT
        Subject: CN=a675f8f93bd66320136305215756944cfa2405de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:96:4a:40:c5:a2:f5:cc:f8:08:c4:22:a0:c8:
                    cf:22:1a:e1:79:e0:bb:07:98:ad:53:32:14:47:56:
                    71:ff:b7:28:89:3f:c4:6f:c9:3d:6d:da:1d:30:91:
                    b9:8e:fd:c3:f0:1e:18:9c:aa:a5:02:99:d7:5d:15:
                    f9:e0:26:b4:84:c5:f8:b0:6a:bd:58:67:f9:e4:7f:
                    a3:6d:69:9d:6a:39:e0:71:fc:70:48:fc:d5:4d:9e:
                    53:51:3e:10:4e:cb:71:c7:93:c5:ae:75:14:92:65:
                    66:a5:db:8b:f9:e5:55:e2:bf:19:fd:a2:f6:26:64:
                    ec:0b:81:14:9c:f6:54:8f:3b:af:97:83:c2:0d:a2:
                    91:49:1e:ce:8f:13:10:73:06:f5:ef:01:39:cf:c2:
                    ab:19:8f:13:d9:4f:94:b8:26:ea:d2:8c:27:8b:f4:
                    6d:7e:8a:8c:bf:31:0c:ed:f9:eb:7c:61:86:dc:52:
                    db:fa:eb:2e:e6:bd:8e:69:b8:11:ae:d6:b8:f6:a8:
                    7f:f5:70:60:b5:84:d2:a6:55:ed:d4:40:2b:ea:78:
                    56:7c:ac:eb:a7:22:2c:ec:6c:cf:82:c1:a5:bb:ae:
                    19:50:15:8a:99:47:27:70:3b:21:20:0b:b1:d9:c3:
                    88:6c:b7:05:3e:95:e6:db:13:cb:4f:6e:d3:76:90:
                    d3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:75:F8:F9:3B:D6:63:20:13:63:05:21:57:56:94:4C:FA:24:05:DE
            X509v3 Authority Key Identifier:
                keyid:D3:37:3D:1D:C6:14:8C:B2:70:95:08:76:AB:AF:D7:40:1D:43:32:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zc9HcYUjLJwlQh2q6_XQB1DMrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/0zc9HcYUjLJwlQh2q6_XQB1DMrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/0zc9HcYUjLJwlQh2q6_XQB1DMrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:88:d3:f2:d4:88:7b:af:a5:84:ff:ff:6d:09:95:d2:9f:a0:
         8f:9e:d3:9a:0d:fe:d3:ee:be:38:4a:1a:83:2e:6a:0e:9f:ed:
         e6:e2:0f:2c:ab:e5:f6:dc:5e:a8:6d:a8:17:fb:57:57:2b:c5:
         29:21:6d:2f:68:13:23:31:4b:89:e3:46:8e:3e:03:fb:15:d0:
         6d:4a:c7:70:95:89:89:22:b9:0c:bc:18:36:c3:13:45:6d:5d:
         50:2f:16:87:dd:9d:fb:08:ee:4b:61:ce:26:8e:75:0e:53:8c:
         0b:7e:e3:25:18:aa:e3:72:9d:3d:c0:51:1e:77:e8:e0:75:0d:
         e0:2b:51:a1:19:2e:96:d2:4c:53:e8:bc:ff:21:c1:67:4c:ca:
         2f:d7:00:30:d6:ca:93:61:2d:98:80:87:9d:72:54:1e:26:13:
         d1:59:15:50:9b:db:49:6f:5f:62:c0:96:ed:7e:db:ba:95:ec:
         d3:6b:68:1f:35:3a:b8:14:e8:39:37:7d:7a:ab:85:96:95:74:
         fd:12:3b:4f:7d:5d:f4:7c:5f:19:1f:74:93:ea:b2:01:de:3d:
         bb:cc:f3:cb:f6:40:3a:13:c9:f5:fa:dd:3b:ab:f0:b3:3e:a3:
         b4:1c:96:ff:0d:75:b4:2e:c5:1c:d8:17:7f:fc:7f:3d:68:b1:
         8b:21:6c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:16:07 2026 by rpki-client