Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
File:                     rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft (raw, json)
Hash identifier:          9LWEHVnGr7pHrbHSFMM9VhHH2vnQ6VZ9xOK3xjr9cAU=
Subject key identifier:   34:C5:1C:1A:12:EE:F4:CA:97:C8:10:72:2E:0C:CF:8C:A6:DB:3B:30
Authority key identifier: AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
Certificate issuer:       /CN=ac08da139b56f998be24665db14ad1e156768fc3
Certificate serial:       01A0DD2A3ACC9415F2538D85AC08A55647F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
Manifest number:          0760
Signing time:             Sat 26 Sep 2026 10:02:07 +0000
Manifest this update:     Sat 26 Sep 2026 10:02:07 +0000
Manifest next update:     Sun 27 Sep 2026 10:02:07 +0000
Files and hashes:         1: LMFtBS2aexBP5idp4kn9Cblsyrg.roa (hash: SFFRBNG1AmZ+gynl5+RE9vwnB25aOjb/67Op7mUiN24=)
                          2: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl (hash: xTCtvI7M8MtZ1DFPkc7RaCUkhMmAeFt8FoTe9JwvoB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:2a:3a:cc:94:15:f2:53:8d:85:ac:08:a5:56:47:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac08da139b56f998be24665db14ad1e156768fc3
        Validity
            Not Before: Sep 26 10:02:07 2026 GMT
            Not After : Sep 27 10:02:07 2026 GMT
        Subject: CN=34c51c1a12eef4ca97c810722e0ccf8ca6db3b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9f:65:c7:a0:ac:70:2f:db:60:08:0e:20:2e:
                    46:89:76:58:dc:1e:39:28:99:22:31:7b:3e:44:a5:
                    3c:52:6b:b3:13:a2:04:95:3d:81:ba:d2:7e:04:31:
                    65:a4:74:3c:70:0a:5a:09:1f:65:a5:f8:f0:ff:f6:
                    ac:1a:21:30:3b:12:a9:d6:a1:59:84:c3:6c:f0:30:
                    8a:86:de:ea:54:0e:22:1e:5c:2a:a3:e8:e9:2a:a9:
                    f2:7a:0c:f5:3d:f9:9e:67:35:d6:90:a2:44:51:da:
                    e8:3c:ba:91:2b:a4:0b:fd:12:66:eb:00:13:12:21:
                    38:8b:e2:82:5a:c8:28:6e:5d:a6:5e:34:b5:b0:42:
                    04:0f:7f:98:2b:15:95:ae:bc:8c:76:29:30:3c:28:
                    5b:3a:ed:98:80:55:fd:cc:78:fe:91:fb:e0:c0:a3:
                    52:54:83:24:83:7b:a2:d7:de:81:11:25:d0:e0:99:
                    33:d1:d2:19:f2:48:4e:a7:11:a4:0c:02:64:1f:bb:
                    66:98:d2:37:86:ee:7a:f1:cb:42:64:45:e0:6b:36:
                    be:47:36:c6:35:2b:48:f5:42:3b:9c:98:82:e8:18:
                    b4:08:72:6d:39:68:fd:50:b6:0b:bc:a0:7c:83:f8:
                    cd:fb:4d:ce:6b:47:c5:e3:60:df:1a:30:bd:fa:6a:
                    7e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C5:1C:1A:12:EE:F4:CA:97:C8:10:72:2E:0C:CF:8C:A6:DB:3B:30
            X509v3 Authority Key Identifier:
                keyid:AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:2b:2a:d3:cd:c6:fd:2c:a1:72:77:b2:5e:ad:1a:2d:f5:a3:
         08:46:f4:46:63:f7:98:d6:49:3f:9c:25:01:e6:02:0f:32:4c:
         5b:6c:4c:4e:3c:a0:34:bf:03:9d:78:3b:8f:cc:88:0c:8f:be:
         98:fb:a4:aa:57:61:05:3e:ab:6d:cb:79:a4:fb:f1:ed:75:d9:
         1b:dc:ee:a6:8d:00:72:ca:3d:29:32:80:5c:33:8f:96:0c:58:
         c5:82:64:c1:6d:4b:b6:88:7c:86:dc:bc:0a:20:04:fe:1a:bd:
         39:e1:20:4c:d3:92:43:3d:2f:5e:2c:27:9d:66:f6:fa:ef:17:
         b9:29:fe:95:f4:b3:ea:db:a7:2c:10:10:07:94:fe:bf:c7:23:
         c2:e5:08:c6:31:d3:e1:30:c6:82:02:d4:3e:88:ee:c1:9e:63:
         a5:b0:07:ff:04:f9:75:2c:75:46:0d:fa:88:07:49:dc:88:ad:
         49:70:aa:bb:7f:ab:56:a5:a1:78:2a:8b:65:d0:50:1d:75:15:
         02:f2:76:72:e6:c9:e9:3f:d5:17:0a:fe:b2:ce:e9:dc:c8:b4:
         12:9a:a6:f6:4f:ae:bd:b6:11:ad:16:cb:d3:76:14:38:29:50:
         b6:66:81:40:94:68:b5:6c:1f:b1:a5:b3:22:76:94:76:f4:a8:
         f1:23:11:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:43:16 2026 by rpki-client