Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.mft
File:                     CUvO1ntmV262mwYxmFRQE9YSvp8.mft (raw, json)
Hash identifier:          O21CeovYlkmww8cXD0maS7DJWZ+qVYrSg6civZ1Jpk4=
Subject key identifier:   F7:97:F3:38:25:85:7C:77:04:13:51:DA:74:E2:1C:F0:77:0F:71:40
Authority key identifier: 09:4B:CE:D6:7B:66:57:6E:B6:9B:06:31:98:54:50:13:D6:12:BE:9F
Certificate issuer:       /CN=094bced67b66576eb69b063198545013d612be9f
Certificate serial:       01A10737EF33483F52C7B5C70D8D48B20F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUvO1ntmV262mwYxmFRQE9YSvp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.mft
Manifest number:          0125
Signing time:             Sun 04 Oct 2026 14:01:08 +0000
Manifest this update:     Sun 04 Oct 2026 14:01:08 +0000
Manifest next update:     Mon 05 Oct 2026 14:01:08 +0000
Files and hashes:         1: CUvO1ntmV262mwYxmFRQE9YSvp8.crl (hash: PNrJtM71e5XqcE+0Y/AFYn7mvLMazRrnKlriVoe594A=)
                          2: ganKDfLJdP7vPbYxHCXqjVQXEN4.roa (hash: ABkWl8T8DuxKNXgQueib6qSpuf6zbYF/8XCKQm4RzlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CUvO1ntmV262mwYxmFRQE9YSvp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:37:ef:33:48:3f:52:c7:b5:c7:0d:8d:48:b2:0f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094bced67b66576eb69b063198545013d612be9f
        Validity
            Not Before: Oct  4 14:01:08 2026 GMT
            Not After : Oct  5 14:01:08 2026 GMT
        Subject: CN=f797f33825857c77041351da74e21cf0770f7140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:a6:23:ce:3f:d7:df:3c:1e:5d:07:3f:f9:
                    12:3b:3f:6e:2e:8e:7e:4a:6c:60:8a:b5:e0:ad:c2:
                    25:ec:13:57:37:8b:ca:3d:de:e1:45:1a:0f:18:1e:
                    b7:45:17:91:62:ff:ac:16:01:28:1f:8a:7c:82:25:
                    3c:a1:d8:1a:35:a9:2a:d4:88:12:42:0b:80:b7:60:
                    c8:30:23:10:d8:ee:44:0b:c1:23:02:54:e4:77:78:
                    fd:20:c2:33:36:75:da:df:89:fb:32:a3:70:5e:4f:
                    ca:3d:41:94:0a:94:e2:00:6b:2d:1c:46:f3:64:05:
                    a2:81:0c:81:d7:cb:87:91:a4:5d:3c:91:f4:ad:20:
                    25:b2:70:ec:82:8f:c9:01:30:22:bb:01:96:2e:68:
                    2a:08:39:1e:87:fa:dd:f7:17:97:3d:cf:da:20:6a:
                    76:2f:15:ad:4c:9e:ff:41:68:8c:88:e7:d4:45:dd:
                    aa:db:ee:18:9a:5a:b2:e9:34:98:6f:dc:20:e0:b6:
                    b4:70:63:e4:da:89:35:92:07:36:65:ff:e6:c2:68:
                    81:fe:72:0f:96:bc:55:54:61:04:24:b3:5b:8e:62:
                    b1:f7:39:f9:c8:82:d2:d5:ba:f7:ee:32:50:e4:fb:
                    49:aa:b9:88:b7:8e:ff:26:5a:0d:e6:fd:8a:67:e1:
                    4a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:97:F3:38:25:85:7C:77:04:13:51:DA:74:E2:1C:F0:77:0F:71:40
            X509v3 Authority Key Identifier:
                keyid:09:4B:CE:D6:7B:66:57:6E:B6:9B:06:31:98:54:50:13:D6:12:BE:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUvO1ntmV262mwYxmFRQE9YSvp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7f:67:37:ba:f7:77:3e:8b:ca:c7:f3:a4:90:8f:8e:60:52:
         57:9f:39:5c:63:49:24:17:99:06:ed:49:76:6e:b2:38:e1:ed:
         ec:01:ed:03:7e:8c:79:fc:40:71:ce:11:26:16:5d:e5:d6:94:
         8b:65:28:54:79:26:79:6c:45:08:2a:3c:ca:fd:27:df:6a:1e:
         8b:4e:62:e8:41:48:66:4c:4f:77:91:ec:46:d0:ce:ce:be:17:
         8d:2b:4a:73:e6:2f:7d:fe:66:1a:ee:e1:57:3b:c1:fc:ff:19:
         b4:4b:1c:b7:b9:b8:23:ea:7b:28:25:13:3a:20:80:ec:39:7b:
         7a:23:fa:a2:aa:51:de:fe:cf:a8:69:14:bd:c2:10:11:4d:36:
         d5:1c:64:6c:8c:c9:c9:56:56:f6:45:08:6c:b8:14:de:21:4e:
         71:2a:37:ce:f2:93:e9:4c:65:5e:3c:41:92:43:94:44:e5:0f:
         d1:0a:db:ea:1c:73:04:5d:9f:29:db:a1:df:56:cf:c6:fc:43:
         28:41:1d:cc:78:59:24:c7:3f:df:98:e5:89:bb:49:4b:6a:67:
         ed:e4:ce:dc:ed:59:af:f0:79:da:7b:fb:7b:79:24:eb:07:8c:
         83:ad:17:cf:39:27:10:cf:2d:d9:5c:32:37:d3:1f:91:15:1f:
         28:43:bf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:49:52 2026 by rpki-client