Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
File:                     333WWWZzfOj2XkDvL-oc_6-xYrA.mft (raw, json)
Hash identifier:          M3IkgFTJfGpNouuVF/YZqLdVYSRrSuqcqSyP/Cppxm0=
Subject key identifier:   AF:C7:EB:3E:38:FB:AB:07:41:06:34:D9:EC:67:6B:0A:8E:9D:F4:C7
Authority key identifier: DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0
Certificate issuer:       /CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
Certificate serial:       01A0CEC8A3E25CD9727EA32661BFB7A0ECBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
Manifest number:          1A6E
Signing time:             Wed 23 Sep 2026 15:00:50 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:50 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:50 +0000
Files and hashes:         1: 333WWWZzfOj2XkDvL-oc_6-xYrA.crl (hash: 79uVi+yqzD7x5dQkHgjaR8k31H1phJHWE+YnBPxYwTk=)
                          2: WSRqZgm-1EQjpD2Z0iwnVHu9-KI.roa (hash: vaSwxp0zpLMK2TP7PC86d2QeKmyhSzZL++9S55/WavA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:a3:e2:5c:d9:72:7e:a3:26:61:bf:b7:a0:ec:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
        Validity
            Not Before: Sep 23 15:00:50 2026 GMT
            Not After : Sep 24 15:00:50 2026 GMT
        Subject: CN=afc7eb3e38fbab07410634d9ec676b0a8e9df4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f5:66:4b:51:11:62:51:2f:a5:78:9b:72:1c:
                    53:f5:2c:16:dc:74:99:27:7b:c2:e7:2e:a4:09:28:
                    06:f4:89:69:7e:0f:cb:62:a8:1e:29:9f:c6:58:39:
                    75:a4:51:35:14:8d:d9:f1:d9:3e:8a:a4:0e:4a:44:
                    19:81:9f:c6:ff:3e:e6:45:07:e9:8d:f5:a3:2f:63:
                    4f:15:50:b0:35:22:84:57:f8:3a:13:94:2f:5b:ba:
                    1e:75:95:2e:dc:57:d6:3d:44:a5:0d:5a:f6:7c:d0:
                    c0:1d:18:ae:54:93:86:c3:98:cd:48:cf:47:4c:ef:
                    e1:3f:19:51:ea:a1:21:dc:a8:b2:f5:15:3a:cb:4b:
                    bc:e5:10:fd:dd:0b:65:12:d3:46:31:8b:ba:7b:dd:
                    c5:34:64:ba:66:40:a9:50:ba:88:c3:9b:b5:85:51:
                    1b:e9:95:1c:31:6f:0f:45:85:32:20:43:f9:91:68:
                    f6:4f:a3:d2:a6:94:c1:80:2c:a8:9d:ca:49:cb:df:
                    67:39:5b:68:97:09:20:4c:93:6b:f1:b9:a4:23:3b:
                    cb:63:4f:82:22:26:83:fb:ea:58:9c:c1:ab:76:00:
                    0b:12:19:01:7a:b5:7b:f0:ec:f7:f6:da:8d:1f:63:
                    5d:1d:f3:38:f6:73:82:2d:67:d9:fb:a3:9e:fb:75:
                    4b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C7:EB:3E:38:FB:AB:07:41:06:34:D9:EC:67:6B:0A:8E:9D:F4:C7
            X509v3 Authority Key Identifier:
                keyid:DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:99:b9:d4:50:a7:85:44:0e:63:f6:7a:e4:3c:30:3a:3a:14:
         b5:84:7e:83:af:6f:c6:f3:69:44:b8:0d:83:33:85:52:f7:2f:
         c0:8e:3f:15:41:56:6b:1c:b5:e3:98:66:0a:3b:6a:76:8a:29:
         90:8c:20:7f:2c:09:56:17:ce:ab:79:cb:6d:55:3b:dd:17:c3:
         f5:6c:de:81:08:35:df:0f:e9:a0:48:ba:28:8f:86:e5:bf:8f:
         e3:0c:9d:fb:8a:c8:de:f8:b3:30:20:b8:9c:66:72:a1:f5:38:
         3e:75:1e:9d:fc:be:f3:74:05:9b:c6:98:03:70:b7:60:65:1d:
         09:a1:94:8c:08:dd:96:1a:03:47:50:a9:eb:bc:96:79:87:5e:
         52:f6:cb:d3:02:20:d7:c8:07:0b:d2:32:a5:5f:1a:74:09:f3:
         01:c7:58:8d:37:2e:08:57:28:d1:e9:41:8b:98:71:bb:e0:ea:
         5c:88:86:fa:da:b9:96:bd:98:fc:fe:43:20:4a:96:05:80:70:
         21:52:92:a0:11:92:2a:cc:b2:41:e3:b3:95:bf:fb:9a:c7:cf:
         92:45:4e:2d:87:a9:ce:8d:e0:2e:d1:ea:37:35:69:87:6a:aa:
         94:a2:10:96:41:af:7b:7b:b3:e1:25:1f:a5:cd:f0:47:d3:4e:
         65:7a:50:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:21:29 2026 by rpki-client