Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
File:                     Dm2P132t49P5bLSZMZSMJymtoN4.mft (raw, json)
Hash identifier:          J5hhE05aiK71D02TL/nwig8ovy95oXSpkkVPju3Ndes=
Subject key identifier:   2B:67:93:33:C5:1B:E6:EB:8D:57:F2:7A:80:AF:57:0B:0D:D8:76:A8
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Certificate issuer:       /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial:       01A0F1C389FABD9B5216C06D657300BDC61F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
Manifest number:          1A7F
Signing time:             Wed 30 Sep 2026 10:01:58 +0000
Manifest this update:     Wed 30 Sep 2026 10:01:58 +0000
Manifest next update:     Thu 01 Oct 2026 10:01:58 +0000
Files and hashes:         1: Dm2P132t49P5bLSZMZSMJymtoN4.crl (hash: KQaYW8iIhxjGd8E1bPKwKCj59Et6epW+j/DFEOYJ2JM=)
                          2: DzslbHixmzBYrsPf_coOdi4vCac.roa (hash: VreYJplCemlpCEq1mBOMn3xaebIevlMt/pCSqFrimOU=)
                          3: ROslS2q2gassZHFsPyNfMnp6lnQ.roa (hash: KypsIjFPEkDmNdlDZHjTDjD0J5MLcaB0s63R8Glt4Zo=)
                          4: iglWtYkBC9ngDdbZompM_rZYncA.roa (hash: nTTJKP/icYG9HF3qJuhxJ0nRjLYKtjmOl9gPDGv0VMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 09:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:c3:89:fa:bd:9b:52:16:c0:6d:65:73:00:bd:c6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
        Validity
            Not Before: Sep 30 10:01:58 2026 GMT
            Not After : Oct  1 10:01:58 2026 GMT
        Subject: CN=2b679333c51be6eb8d57f27a80af570b0dd876a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8b:a0:98:d8:ef:fc:c0:94:03:07:4f:25:25:
                    cf:03:77:ff:dc:81:66:44:53:9f:2e:5f:b0:e7:4c:
                    d3:94:7e:31:29:3a:78:c2:89:0e:fa:25:eb:75:14:
                    23:42:10:67:0e:72:ae:50:85:29:66:7a:f6:92:30:
                    4f:54:45:c3:33:d1:29:34:4d:8c:5c:d3:7f:12:e7:
                    aa:63:aa:d5:6d:dc:59:63:02:61:b2:f3:37:59:15:
                    97:00:4a:cf:90:b5:4c:4a:fd:5c:cd:55:cb:ee:44:
                    1d:c3:79:88:bb:97:62:41:b5:0d:c5:a3:d4:ea:96:
                    94:14:63:0d:24:5d:70:4d:42:2c:46:c1:82:e7:8e:
                    b2:1f:6c:4f:93:a9:27:b1:be:e9:88:f6:58:d5:f4:
                    2d:58:85:93:15:ee:7a:25:a5:1f:8e:51:25:21:f9:
                    ed:4e:9e:8b:f9:b1:33:d9:e0:75:82:66:1f:f5:2c:
                    19:b2:51:36:2c:98:ce:54:01:cd:c0:da:24:ee:1d:
                    43:ac:ad:cf:58:ab:c6:21:c3:db:a1:bb:c5:90:72:
                    e3:a0:88:e9:90:1e:fd:e2:da:a8:b6:2f:ae:3a:d7:
                    42:e5:db:6d:a4:75:df:aa:41:66:50:c5:2c:7c:3e:
                    cf:3d:c7:1b:33:47:32:50:c1:0b:92:db:e3:f1:38:
                    aa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:67:93:33:C5:1B:E6:EB:8D:57:F2:7A:80:AF:57:0B:0D:D8:76:A8
            X509v3 Authority Key Identifier:
                keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d1:4e:50:24:b7:db:32:22:59:96:3d:c3:88:c9:56:6a:e3:
         8b:4d:60:ae:28:67:92:38:82:6a:38:20:8d:b6:0a:d9:35:8c:
         ab:84:a9:8a:51:08:11:d0:d6:4d:e4:32:7a:05:0c:9c:78:b8:
         ea:99:4d:41:fc:86:80:60:01:ec:8f:02:40:f6:8b:96:ca:18:
         9b:a0:15:8d:b9:93:85:e9:e3:25:f7:18:78:bd:d8:19:99:1b:
         7c:d0:fa:89:9d:f2:d2:59:55:a1:a7:7a:09:10:2f:e8:13:69:
         58:64:f6:8b:9e:7b:c8:e5:8e:4e:8f:ea:82:67:90:a0:09:c5:
         f8:12:68:97:07:8f:40:4d:f4:51:e8:6b:b9:90:1c:b8:0e:7c:
         40:47:be:81:f5:29:eb:7a:ae:dd:98:4c:93:77:96:b9:73:91:
         f6:ca:05:46:ed:70:e7:a8:1d:59:69:40:05:eb:98:f9:f2:94:
         3d:32:91:8c:7e:e7:81:8f:50:68:88:94:ac:15:8a:5b:2d:75:
         92:f4:77:e9:3c:d4:25:09:5d:39:0a:4f:b7:29:e2:72:5d:0c:
         27:ef:06:7f:40:69:3c:22:b5:cc:80:17:43:23:88:ce:f4:27:
         d9:b8:7d:4b:c3:2c:63:12:16:ad:07:f0:b1:91:8d:c9:8f:85:
         2d:f9:dc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:08:53 2026 by rpki-client