Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/t1aR56bJRBXsg6PmrrRvCSC6Cvo.mft
File:                     t1aR56bJRBXsg6PmrrRvCSC6Cvo.mft (raw, json)
Hash identifier:          69Q5PadiwnoFJXy0Wq76jULFNwOSDEr/1CYpuqAdEms=
Subject key identifier:   77:41:AC:51:E2:7C:B3:96:3D:68:F6:3E:98:13:ED:22:8E:A9:3A:29
Authority key identifier: B7:56:91:E7:A6:C9:44:15:EC:83:A3:E6:AE:B4:6F:09:20:BA:0A:FA
Certificate issuer:       /CN=b75691e7a6c94415ec83a3e6aeb46f0920ba0afa
Certificate serial:       01A0DBAA123D587361246015D8FE0D9BCD11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1aR56bJRBXsg6PmrrRvCSC6Cvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/t1aR56bJRBXsg6PmrrRvCSC6Cvo.mft
Manifest number:          EB
Signing time:             Sat 26 Sep 2026 03:02:31 +0000
Manifest this update:     Sat 26 Sep 2026 03:02:31 +0000
Manifest next update:     Sun 27 Sep 2026 03:02:31 +0000
Files and hashes:         1: ZiDPogPrQOpuh0FPglTkQ8pXUz8.roa (hash: YCXIv4lJCwsQYTuVQhQQmTXD83p/Au5A6G0CssWCKHE=)
                          2: t1aR56bJRBXsg6PmrrRvCSC6Cvo.crl (hash: XBi2gm+65wCtJkz1DBQW7C4TcjnuaBcY2J7xk4MA8Fk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/t1aR56bJRBXsg6PmrrRvCSC6Cvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/t1aR56bJRBXsg6PmrrRvCSC6Cvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1aR56bJRBXsg6PmrrRvCSC6Cvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:aa:12:3d:58:73:61:24:60:15:d8:fe:0d:9b:cd:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75691e7a6c94415ec83a3e6aeb46f0920ba0afa
        Validity
            Not Before: Sep 26 03:02:31 2026 GMT
            Not After : Sep 27 03:02:31 2026 GMT
        Subject: CN=7741ac51e27cb3963d68f63e9813ed228ea93a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:20:f2:84:e4:6e:26:43:ec:8f:5d:c0:98:43:
                    e2:16:e2:91:9d:d8:9b:1e:15:cf:0b:f0:73:e9:d9:
                    ef:54:e3:6c:09:b8:25:e3:53:b3:64:fe:74:46:ef:
                    e3:5b:4b:c9:36:f7:39:bb:f6:5a:1a:8c:8e:ae:ea:
                    0b:4a:78:91:b5:4f:52:2d:10:e0:95:3e:9a:8a:f5:
                    76:2d:f4:21:80:83:3f:f8:23:7d:e3:1d:0b:01:86:
                    90:5b:0d:89:a4:6d:bc:5e:c8:5c:ca:4e:e6:8b:b6:
                    29:a5:f6:87:fd:cd:ec:10:7c:97:c9:d7:73:67:39:
                    6f:38:62:43:d0:0a:ff:f2:9e:40:f1:d0:08:6f:73:
                    53:b2:5d:8f:43:94:35:ab:ba:b5:c4:bd:84:c0:c7:
                    28:11:21:a2:7a:6f:bd:30:6d:7f:c6:d7:e7:8b:2e:
                    7b:51:50:9e:93:42:a7:b0:9e:f1:14:5c:d3:16:1a:
                    92:29:e6:03:23:86:45:69:a1:bf:78:3b:4c:2b:91:
                    40:43:37:86:61:d7:21:22:34:5b:22:84:fe:a2:c8:
                    6a:b8:1a:d7:8c:d2:6d:30:c6:b0:3f:f1:ee:f1:90:
                    fc:34:05:6e:18:70:da:3d:08:cf:97:b9:23:c4:22:
                    13:80:ff:75:c4:74:e0:c7:fb:ac:ba:d3:2d:18:aa:
                    29:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:41:AC:51:E2:7C:B3:96:3D:68:F6:3E:98:13:ED:22:8E:A9:3A:29
            X509v3 Authority Key Identifier:
                keyid:B7:56:91:E7:A6:C9:44:15:EC:83:A3:E6:AE:B4:6F:09:20:BA:0A:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1aR56bJRBXsg6PmrrRvCSC6Cvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/t1aR56bJRBXsg6PmrrRvCSC6Cvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/t1aR56bJRBXsg6PmrrRvCSC6Cvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2c:2f:36:9b:20:24:8f:76:cf:9b:14:47:d1:bb:bf:a9:51:
         06:31:3d:57:cd:5d:39:de:94:88:c9:11:34:5f:a0:e5:78:19:
         a3:aa:c0:0b:e9:c6:ec:66:c9:4f:61:f7:d8:1b:2d:36:5d:5e:
         3f:25:45:12:ec:23:d5:98:bf:e0:25:b4:7e:6d:33:4a:81:db:
         d5:f3:48:bd:ca:be:58:64:b2:43:24:06:b6:0c:12:37:ca:3e:
         16:62:40:d2:e6:f2:56:b9:79:68:ac:69:73:c3:3b:e4:fa:6c:
         cf:eb:62:09:79:7b:44:6d:00:cd:6b:23:50:4a:b8:7c:bd:6f:
         16:34:cd:92:62:ca:27:5a:5f:c2:90:b4:c8:5a:2f:5b:73:cd:
         1a:85:e1:e7:48:f9:0f:39:6b:d9:eb:60:09:db:8f:5b:02:0e:
         df:ef:a7:b5:9b:be:b8:11:30:3f:29:7a:6c:06:bf:a8:83:b5:
         92:04:1a:e2:68:7f:ee:24:b7:f1:41:29:f3:10:d3:8a:14:e2:
         d1:a2:6b:2b:97:d6:0c:bc:46:65:1e:f2:79:22:80:37:d7:02:
         1c:9e:f2:ad:7f:48:86:03:6a:17:4a:6d:40:03:a1:17:c3:e0:
         61:8d:a7:e2:91:11:23:0a:87:7a:08:a6:12:5a:a8:c9:2a:1a:
         da:07:66:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:31:34 2026 by rpki-client