Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
File:                     eIW8vdwL57G92jasnwzsQn8Tey4.mft (raw, json)
Hash identifier:          zU0tBkn31x7wjpmVFCyPbYHRJSj2DY+TAX0Gnyp1ixI=
Subject key identifier:   37:71:46:FB:CA:7F:02:C9:BE:D0:D6:02:52:A8:38:AE:7B:AF:DA:68
Authority key identifier: 78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E
Certificate issuer:       /CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e
Certificate serial:       01A0D3EFDD21159D7989B6AC24C89FE0AA66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
Manifest number:          0292
Signing time:             Thu 24 Sep 2026 15:01:47 +0000
Manifest this update:     Thu 24 Sep 2026 15:01:47 +0000
Manifest next update:     Fri 25 Sep 2026 15:01:47 +0000
Files and hashes:         1: eIW8vdwL57G92jasnwzsQn8Tey4.crl (hash: DU3nmw/uXl3QEtltCunF0dK11gI4spQZXvP7kP7gdo4=)
                          2: mG4EijAvnONRj78ap4took9k5k0.asa (hash: LCkjOsZJgCsTlelMgbV8nr5RF7I7nsemSo0VuD8o6KQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ef:dd:21:15:9d:79:89:b6:ac:24:c8:9f:e0:aa:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e
        Validity
            Not Before: Sep 24 15:01:47 2026 GMT
            Not After : Sep 25 15:01:47 2026 GMT
        Subject: CN=377146fbca7f02c9bed0d60252a838ae7bafda68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:14:89:ae:87:02:37:2e:05:06:52:dd:26:6e:
                    dc:b1:33:24:f8:41:41:f7:15:bf:be:49:96:79:00:
                    e5:40:9f:a3:c0:89:b8:1f:69:9b:b9:95:ad:1a:eb:
                    53:44:2d:5d:52:77:1f:bb:b0:84:a3:ec:5d:9e:84:
                    0a:33:85:93:47:e3:59:f5:de:84:b7:99:fe:b5:77:
                    dd:15:6b:23:ce:ec:59:c8:9f:36:78:04:bb:0a:cb:
                    d3:c7:57:98:03:4d:b0:a8:84:3a:4c:21:83:d3:e8:
                    9e:10:ff:5f:6b:b8:15:a9:dd:88:48:c1:3b:c4:51:
                    99:c3:b1:fa:3d:f9:1d:6e:69:64:0f:71:2d:65:30:
                    91:48:f5:de:86:ed:a7:f5:df:b4:b2:b0:51:4a:b4:
                    ed:29:32:a8:61:f7:7c:c2:87:2f:25:53:9f:74:49:
                    61:a5:ca:eb:9d:45:67:eb:7c:4e:8e:98:e4:c2:c2:
                    be:ec:75:fc:db:28:71:d7:bd:bd:45:56:7b:ed:92:
                    59:c9:fc:8f:1d:02:39:4a:34:2d:1e:da:0e:61:5f:
                    13:09:e6:b4:22:6f:2b:46:66:ba:fa:d9:56:49:65:
                    d1:35:df:17:c3:9c:7e:60:84:8f:16:ad:de:fd:7d:
                    3c:bf:5d:6c:0c:61:b9:73:a1:73:8b:e8:9e:6c:2a:
                    b4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:71:46:FB:CA:7F:02:C9:BE:D0:D6:02:52:A8:38:AE:7B:AF:DA:68
            X509v3 Authority Key Identifier:
                keyid:78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:42:da:2a:de:fb:20:56:81:bf:04:a3:3e:4f:19:49:49:7b:
         45:fa:64:b2:5a:16:85:ba:05:d6:99:76:f7:c6:27:cc:10:4f:
         08:19:e5:64:2a:53:51:c4:48:75:b6:23:ce:3c:4a:5e:bc:84:
         2c:12:b7:89:83:1d:8a:78:9b:63:39:82:00:44:8d:1f:ec:09:
         18:b8:28:93:63:34:b7:88:2c:57:22:af:31:e1:91:1b:0c:c0:
         26:2e:af:8e:16:2c:40:bb:73:55:63:da:fd:f7:67:5b:5f:46:
         f6:b8:4a:cc:96:fd:a9:87:2f:b8:d8:f0:c8:e2:4b:1e:bf:f0:
         8f:61:90:48:c4:a6:ab:b2:d5:5f:c6:4e:8e:01:3f:bc:78:1e:
         8b:9e:d6:39:44:f8:65:3f:8f:7e:9b:c9:f1:95:dd:bb:0a:ea:
         89:f1:f0:97:a0:f0:ca:b7:e6:74:9e:0e:f8:f7:06:55:26:eb:
         2a:30:7f:a8:a2:df:54:39:73:a0:b1:1e:4b:92:f8:d5:3a:05:
         c7:c4:17:d1:9a:4f:d7:a5:30:47:84:d5:eb:1a:4b:40:84:2f:
         1b:01:83:e9:9b:09:fc:47:0c:e8:68:be:eb:9b:00:c7:cc:e9:
         61:bc:db:be:3b:e5:9a:87:fd:3d:92:67:f3:a4:13:1f:53:90:
         bf:ed:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:33:36 2026 by rpki-client