Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
File:                     24tcHuy6hgz_8XR5ZtdjyagvbZo.mft (raw, json)
Hash identifier:          ezKTOg9WR5gO6C00Jr/3o5Mn1LmV3lnblBY+VsvSFhM=
Subject key identifier:   88:08:37:60:F3:95:1F:B6:AD:B9:5C:C2:21:3D:C0:F1:9E:9F:A0:B8
Authority key identifier: DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
Certificate issuer:       /CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Certificate serial:       01A0D9BB621C0658481373913F4F31F5D5F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
Manifest number:          1A6C
Signing time:             Fri 25 Sep 2026 18:02:11 +0000
Manifest this update:     Fri 25 Sep 2026 18:02:11 +0000
Manifest next update:     Sat 26 Sep 2026 18:02:11 +0000
Files and hashes:         1: 24tcHuy6hgz_8XR5ZtdjyagvbZo.crl (hash: YbIm70NOV30zQcbsbOYaNr29b7Sx80UV3ElR1fsnaR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:bb:62:1c:06:58:48:13:73:91:3f:4f:31:f5:d5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
        Validity
            Not Before: Sep 25 18:02:11 2026 GMT
            Not After : Sep 26 18:02:11 2026 GMT
        Subject: CN=88083760f3951fb6adb95cc2213dc0f19e9fa0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:d9:f5:f3:17:1b:c7:a2:72:a8:26:37:88:
                    da:b2:16:a8:73:bb:ce:5f:85:2f:0f:1b:29:29:42:
                    73:c6:6b:4f:de:60:52:24:4e:81:b8:19:53:41:72:
                    c0:52:17:c7:66:97:47:e4:e6:e4:dd:9a:4e:0f:c7:
                    3e:11:80:f0:5c:5f:77:54:48:f6:e1:40:3d:c8:39:
                    34:dd:04:5c:10:ad:1b:f7:3d:87:f7:53:46:d6:78:
                    43:d2:56:7c:fc:f2:7c:a9:fb:16:78:fe:be:25:56:
                    d5:e9:e0:15:27:11:eb:cf:91:87:f1:f7:97:d6:37:
                    55:a8:3d:fd:fc:02:32:93:72:c9:d9:23:4d:bc:c2:
                    85:8a:61:b6:03:2f:f3:d4:e4:01:e6:2e:a9:af:56:
                    0b:2f:14:2a:ff:b8:03:29:34:0a:ed:8f:9d:03:a3:
                    e5:25:67:4f:32:ac:45:da:07:5e:05:63:9e:c1:54:
                    b6:c9:92:8b:5d:44:84:2d:d7:82:04:f5:58:e9:b8:
                    49:26:42:9a:8d:57:99:62:09:36:22:15:96:cb:1c:
                    00:80:2d:69:a4:c5:48:88:52:d8:c8:49:71:f2:a9:
                    fd:20:87:41:b7:89:02:46:eb:a7:e3:9d:45:87:9b:
                    b0:15:31:d1:34:09:82:2a:ad:3b:9b:ae:0d:5d:69:
                    40:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:08:37:60:F3:95:1F:B6:AD:B9:5C:C2:21:3D:C0:F1:9E:9F:A0:B8
            X509v3 Authority Key Identifier:
                keyid:DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:62:b1:c4:f8:a2:cc:3e:ab:77:08:7e:41:a2:e2:a8:e8:a2:
         49:dd:c3:e6:d2:39:9d:90:a3:c7:53:71:b6:02:87:97:7a:90:
         08:f5:f0:a6:ac:22:97:cd:4f:9d:c3:44:42:ff:1d:f7:1e:27:
         0c:6a:be:9c:ff:10:da:9a:a8:67:93:7c:ea:9b:f9:9f:33:da:
         51:8d:75:ea:43:3a:32:33:f2:3c:36:bc:76:77:3f:42:ff:72:
         17:6c:d6:e8:46:9c:5f:58:c3:9b:e3:80:97:61:8a:32:e6:e7:
         45:eb:70:66:ac:f1:ed:d1:7b:b3:a1:bf:93:89:28:3f:8d:c4:
         82:46:3e:77:09:c4:31:2f:c4:f4:43:9d:a0:fe:bb:ce:04:1a:
         69:32:01:58:7e:db:d6:ba:da:a2:25:48:d5:e9:8e:1e:5c:a2:
         95:ef:67:76:b5:ad:15:b4:ba:4f:ed:d5:99:5e:f1:32:77:5b:
         4c:e7:6a:c5:b5:3e:fc:87:2e:0c:30:40:3c:4b:be:48:6b:ab:
         af:4c:08:e5:77:20:b9:a1:ca:20:e2:f7:a9:66:73:5b:f3:10:
         79:36:03:f6:07:94:7f:b0:18:a9:27:00:45:24:5b:1d:5e:70:
         bd:50:75:fd:06:4f:20:5a:ef:40:f6:e0:e5:2a:f7:6b:80:9d:
         66:b7:b6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:49:22 2026 by rpki-client