Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
File:                     MTie9MqM5oHWuD4L5MiGo6dFYCg.mft (raw, json)
Hash identifier:          Yg5KDPdXDkHpBJgSNtsSPX8Z3CIaLzSnSWwnAVvXue8=
Subject key identifier:   ED:F3:58:CF:8A:78:09:D3:86:E2:79:C5:BA:A5:66:94:4E:D5:51:A7
Authority key identifier: 31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28
Certificate issuer:       /CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
Certificate serial:       01A0D0B6EBCA425DA9C0E5344CD691B0012C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
Manifest number:          03D3
Signing time:             Thu 24 Sep 2026 00:00:43 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:43 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:43 +0000
Files and hashes:         1: MTie9MqM5oHWuD4L5MiGo6dFYCg.crl (hash: 6pfilZJn9Z/fFhTVBTv+11Z3WoK9jEQW+wABRGLuDHI=)
                          2: dAvQklqaFgS7nuGcHDCAEFSzz7s.roa (hash: B5/JGeN0RNoqJRO7nGvJRd8pXhY+SDcSmh+pqHEkxm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 00:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b6:eb:ca:42:5d:a9:c0:e5:34:4c:d6:91:b0:01:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
        Validity
            Not Before: Sep 24 00:00:43 2026 GMT
            Not After : Sep 25 00:00:43 2026 GMT
        Subject: CN=edf358cf8a7809d386e279c5baa566944ed551a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6f:0a:43:fb:9b:b1:82:ea:69:4a:46:7e:0d:
                    cf:25:ea:41:28:36:21:09:e6:c1:99:bf:0f:00:35:
                    3a:29:51:c4:79:d8:dd:9b:3e:c7:c5:12:da:e3:7c:
                    08:13:2a:f1:40:07:f7:46:47:9c:a9:9c:a1:4a:52:
                    b1:d6:ac:1a:c5:0f:ff:90:ec:5a:63:77:95:9a:65:
                    8b:4f:36:17:33:a0:74:e8:a4:a6:bd:82:e7:46:a5:
                    8e:4b:22:05:b9:9d:70:3c:3b:43:6b:60:a0:ea:2b:
                    64:da:36:1c:5f:02:60:b6:ef:2f:f5:f7:f8:e2:17:
                    58:2c:88:98:0c:1f:cb:7c:4b:29:36:90:02:6f:78:
                    dc:e1:da:14:62:3e:da:8f:e3:e3:6a:b4:43:01:db:
                    6e:df:ec:75:31:29:c9:0f:9d:4e:9e:26:d7:1a:7a:
                    f8:74:e4:77:a9:04:b6:1a:a3:99:8a:ea:27:54:3c:
                    f9:8c:e0:83:dd:87:99:f9:80:a8:fd:ef:bc:57:4e:
                    f4:16:2e:df:32:dc:e5:90:0e:a4:93:f0:a1:1c:93:
                    b3:43:44:8e:40:07:bc:2c:69:12:8c:19:fa:e5:0a:
                    d1:e2:9a:3a:ee:9a:45:6d:44:36:2c:fd:b3:26:0f:
                    e5:42:f9:f9:df:b0:36:dc:f9:fc:f8:44:2c:b4:34:
                    77:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F3:58:CF:8A:78:09:D3:86:E2:79:C5:BA:A5:66:94:4E:D5:51:A7
            X509v3 Authority Key Identifier:
                keyid:31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f9:9c:bb:c1:a9:ee:ac:5f:f6:88:50:1c:a5:e9:51:f5:6c:
         fd:bc:60:6f:d3:3c:45:ca:73:3e:c1:ec:72:5f:4f:f8:46:ae:
         12:77:30:dd:e3:4f:3c:85:6b:9c:6c:02:90:58:fa:c4:64:7e:
         ec:f5:90:23:c7:d7:25:50:88:18:49:1e:8f:ae:05:be:de:47:
         13:3c:8e:d1:a9:d1:b9:78:14:e4:eb:32:e2:50:46:b6:f4:ee:
         a5:65:34:31:e5:d1:06:97:79:ae:84:ae:1b:95:15:41:ff:4d:
         3d:2d:11:7b:59:23:9d:af:d6:e3:ce:5f:1e:52:81:ee:e3:50:
         6e:58:1c:16:4e:44:d4:02:07:2b:a7:82:5c:22:63:89:81:cc:
         97:4d:9a:97:b1:08:ff:fb:d4:7d:93:f9:23:11:a7:f2:1c:07:
         f6:d5:b2:f8:fa:b9:3a:5b:3f:41:57:77:7f:02:4a:23:e4:56:
         08:0b:2d:0c:af:15:1d:34:b1:41:54:0e:61:5f:15:7b:88:31:
         38:53:63:32:31:5a:0e:2c:b7:69:b2:83:21:ab:99:aa:bd:40:
         32:6c:f5:8a:02:71:da:bc:79:28:39:bc:50:92:33:86:f5:31:
         f0:1e:03:02:40:9a:36:e1:43:02:9e:6e:39:d2:06:5e:14:ec:
         1f:83:8d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:04:26 2026 by rpki-client