Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
File:                     98sUpB-NnmKNroj0dSgi_Hff7AI.mft (raw, json)
Hash identifier:          nsmdNbbru5XgfNjjwxH6Any22WMeLN046bXGhTBmDtc=
Subject key identifier:   63:76:2C:AE:B0:44:10:AF:37:D5:E1:AB:78:4A:44:AC:E9:83:2A:4B
Authority key identifier: F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02
Certificate issuer:       /CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
Certificate serial:       01A0CAB532D7D6F626050C38BA1EBFA8E917
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
Manifest number:          1A71
Signing time:             Tue 22 Sep 2026 20:01:07 +0000
Manifest this update:     Tue 22 Sep 2026 20:01:07 +0000
Manifest next update:     Wed 23 Sep 2026 20:01:07 +0000
Files and hashes:         1: 98sUpB-NnmKNroj0dSgi_Hff7AI.crl (hash: wr1I3DnKMTlmLWe+yDewxicoEVE8KvpdnU6hPYn+4tU=)
                          2: ICjxcQK82ea7Xb7en5rLnCcbVD8.roa (hash: zddIqD4bnTjl0bvdvHZDyK9AYwU//2NAO0jrHUcMa98=)
                          3: OwjPnlisGDUZdsOdhkm7WqfS97o.roa (hash: z+3nyFF5ATMpyCfr9E8+TN0uSx1GRXzgvEJpueI61iw=)
                          4: a2ZPbARvsluL7rNbVgdnXTvbqzQ.roa (hash: SgMukQsZHJnM/ZU5IlG04IiHUegCFFvgUA+3BlYtL6E=)
                          5: tg8sRY8C-CGe0j2_BQc-V9xv2NM.roa (hash: peV+2Yl1optmH9HpZPRl3Di4cbcQPUbyLxiY8B4DOuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:b5:32:d7:d6:f6:26:05:0c:38:ba:1e:bf:a8:e9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
        Validity
            Not Before: Sep 22 20:01:07 2026 GMT
            Not After : Sep 23 20:01:07 2026 GMT
        Subject: CN=63762caeb04410af37d5e1ab784a44ace9832a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:92:05:7e:42:f9:29:78:77:3c:71:bd:21:3c:
                    f5:f7:5a:6d:15:90:8b:4e:75:40:e6:07:c2:d5:16:
                    66:75:d7:1e:3a:fe:18:00:9b:ca:7b:5b:1d:0c:03:
                    43:0f:5e:61:96:16:19:c1:df:44:d0:c1:06:0b:38:
                    15:25:51:f0:0d:5f:c6:bb:97:25:23:be:41:ad:9b:
                    d5:55:5a:c5:d7:8f:76:32:1b:96:41:92:37:40:3c:
                    30:61:db:e9:c2:53:07:90:7f:1a:f5:0d:f6:f5:b9:
                    44:b1:da:a7:2e:9c:ad:b6:4a:4c:8a:77:cd:4f:46:
                    03:33:00:91:64:a2:13:50:fe:20:d2:b5:81:29:18:
                    16:63:a4:54:c6:45:66:4a:fd:23:ad:69:df:78:5c:
                    1c:6b:45:61:18:5e:e7:47:f7:fa:3e:b0:6c:f9:79:
                    01:e5:c1:bd:44:e3:9f:36:4e:ea:12:95:f3:f4:aa:
                    74:db:53:c1:28:c5:f9:20:13:38:23:59:ed:a6:0e:
                    d8:53:00:40:e0:67:c8:7a:b9:78:c5:0b:eb:f0:2f:
                    e1:a0:e2:56:4b:40:d4:0f:d6:30:c2:c7:ac:cb:2f:
                    cc:a4:90:6b:4e:80:87:08:4b:5e:93:d9:c6:c0:94:
                    87:fb:f2:67:8d:41:46:3f:cb:fc:2a:cc:1c:75:24:
                    4d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:76:2C:AE:B0:44:10:AF:37:D5:E1:AB:78:4A:44:AC:E9:83:2A:4B
            X509v3 Authority Key Identifier:
                keyid:F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:cd:54:33:c9:0a:fd:7b:bf:df:79:2c:b3:66:ab:7e:a5:15:
         67:71:7e:75:67:4d:7d:7f:f2:98:1d:6e:c9:31:19:e1:98:13:
         c6:b4:01:82:bc:95:89:e9:7b:3e:11:93:0b:65:47:e0:07:b3:
         f5:84:59:de:d1:fd:fa:2f:f2:61:9d:71:04:17:57:58:83:18:
         d0:78:42:d7:f0:e7:f8:97:18:9f:c9:a2:7e:ed:ff:f3:cf:75:
         45:bd:ce:92:82:36:3e:1d:62:4f:45:6d:d3:ef:b0:f8:78:28:
         ee:99:83:b3:5a:02:47:18:76:7d:28:c8:2c:0b:35:bf:64:e4:
         fb:b2:bc:60:70:40:e0:5d:3a:4b:46:a7:26:c5:f4:10:ef:63:
         f8:c1:8b:28:03:8d:95:45:2b:da:20:e7:01:f9:fd:8e:09:65:
         9d:5e:31:fc:35:6f:04:b4:b2:93:a8:f5:74:87:62:d0:e4:70:
         e4:35:08:74:82:49:84:07:ab:72:ce:b7:7b:b9:d4:61:e1:0e:
         ed:5e:39:8c:bf:6b:b2:3d:14:a3:ae:4a:f7:e5:50:7d:89:7f:
         c2:3d:35:95:1b:f2:4d:94:11:f9:f4:9f:f8:b5:93:67:54:dc:
         0e:64:40:51:42:07:98:3f:58:3f:34:71:41:7b:79:6f:a4:41:
         df:cc:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:10:05 2026 by rpki-client