Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
File:                     D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json)
Hash identifier:          aIOrK8jBgSlnN8wZtRMGKOnWDBMHGtvN7WAS71AtlgM=
Subject key identifier:   6C:00:44:35:65:06:2F:47:24:06:01:05:7F:3D:A7:1D:79:66:F4:9E
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Certificate issuer:       /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial:       01A0DFBCDCF20A67C0D7000308C7DFEFE7D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
Manifest number:          07FB
Signing time:             Sat 26 Sep 2026 22:01:31 +0000
Manifest this update:     Sat 26 Sep 2026 22:01:31 +0000
Manifest next update:     Sun 27 Sep 2026 22:01:31 +0000
Files and hashes:         1: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: K0mLB1DiTgfCzpZ1IWoYPXFibewJbAQ+oW5pmfx9Kg0=)
                          2: j2ZKQ_RP0pW4ha3iJS6LUS2RxvQ.roa (hash: 324nY+Or3t4CapZD40Ksbrzo26apvn/Md/6kgiF3MEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:bc:dc:f2:0a:67:c0:d7:00:03:08:c7:df:ef:e7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
        Validity
            Not Before: Sep 26 22:01:31 2026 GMT
            Not After : Sep 27 22:01:31 2026 GMT
        Subject: CN=6c00443565062f47240601057f3da71d7966f49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ff:b9:a8:8a:5d:9f:78:cb:b6:80:e2:ae:c9:
                    ad:8f:41:f2:3d:ee:5d:3c:3c:70:41:09:4b:b1:c1:
                    82:c8:42:c7:14:d7:03:75:ad:2e:0a:18:02:47:20:
                    05:92:76:d9:94:02:87:d6:16:c8:f3:72:0d:67:b2:
                    c9:8e:8f:6e:5e:07:b6:64:da:c3:2a:fe:84:63:9a:
                    af:29:45:58:64:56:56:a7:a7:48:91:9b:62:b5:39:
                    34:32:c3:ff:11:1d:58:05:b3:c9:81:2c:9f:b6:98:
                    80:f2:09:b6:91:b8:6a:3a:d2:09:10:86:0c:77:ce:
                    5b:b0:6c:59:db:5c:f4:49:dd:23:09:80:0b:76:9d:
                    9c:9c:fc:f3:27:65:be:8a:cf:cc:03:61:d5:af:d9:
                    0b:02:2d:b9:1a:e7:bb:b8:93:1b:f7:1e:7e:13:9e:
                    44:56:c4:7c:33:02:cf:26:5b:7c:7d:51:4b:b4:73:
                    c9:95:ab:ba:46:c7:60:dd:8a:de:cc:e2:c3:9e:cb:
                    0f:7b:10:e9:18:b4:28:f8:57:2e:b9:3a:b6:f6:e8:
                    d1:a2:13:d7:99:cb:d5:e7:ab:f2:af:b5:7e:2b:d8:
                    2f:8e:c4:10:79:10:01:fa:8c:e9:68:2c:d9:46:3b:
                    6d:36:e1:c5:11:75:f8:62:46:f5:bf:86:07:44:f6:
                    7c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:00:44:35:65:06:2F:47:24:06:01:05:7F:3D:A7:1D:79:66:F4:9E
            X509v3 Authority Key Identifier:
                keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:cb:9f:89:15:8b:2e:c6:b3:ab:76:bc:aa:1c:2a:54:3b:cc:
         be:6a:5b:57:c8:20:b6:3c:fa:e0:bd:0b:06:ae:31:8f:04:b6:
         2a:4c:f3:2c:95:62:12:23:33:53:c5:3e:ee:b0:5d:4b:a0:b8:
         53:cf:6a:11:43:31:a5:3a:7d:7e:b6:8c:36:0a:4a:ba:8b:00:
         a8:37:14:59:a9:97:f1:b1:f8:54:92:18:d0:a6:1b:ac:ee:26:
         71:64:72:f4:7e:aa:85:6d:60:c7:c3:e4:83:2a:b0:5e:0e:d4:
         4e:1b:a7:f1:71:b1:8b:74:49:42:a3:a4:d3:0b:28:cc:7d:3d:
         16:78:e7:b8:59:41:98:01:1d:ab:01:1f:b4:b4:1e:95:e0:e8:
         c2:b3:f9:0c:96:5f:57:c4:60:55:6c:9c:af:34:fd:79:4b:00:
         2e:35:c0:aa:84:44:3c:eb:c8:2a:f1:9f:0c:8b:5f:fd:10:20:
         13:41:7b:90:e9:0e:1b:e5:19:a0:08:96:14:67:e6:28:21:f9:
         b3:e7:da:eb:1a:5e:84:ef:a0:09:bb:be:b9:cf:58:fd:ab:c4:
         21:95:57:bf:e4:38:48:12:26:90:23:21:a0:d2:2b:b7:0e:95:
         a1:f1:17:95:94:d3:62:71:20:47:13:50:7c:b6:8f:93:15:2a:
         f0:9f:0e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:30:20 2026 by rpki-client