Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
File:                     CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft (raw, json)
Hash identifier:          V/qfUAw4xpCDf0gI8FHgyzUAQyBNvaoRAWlNG5ZP6g8=
Subject key identifier:   50:84:5A:50:83:D9:99:86:C1:8E:35:42:14:19:61:2E:1D:07:7A:00
Authority key identifier: 09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6
Certificate issuer:       /CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
Certificate serial:       01A0C8C6C03DCB482A3C1969F5B826F19558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
Manifest number:          1703
Signing time:             Tue 22 Sep 2026 11:01:03 +0000
Manifest this update:     Tue 22 Sep 2026 11:01:03 +0000
Manifest next update:     Wed 23 Sep 2026 11:01:03 +0000
Files and hashes:         1: CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl (hash: LdR3WHdxFyuprx6IoDi3+n6sV7xxaSs4SfTE0AVrSEs=)
                          2: QLNnaM3mDrJY5OzuKKR1lA5zTOg.roa (hash: eKp6GN6lOfR9UrD6nqU3foj29LSJ6HMnSsJ3VnYQEiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:c6:c0:3d:cb:48:2a:3c:19:69:f5:b8:26:f1:95:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
        Validity
            Not Before: Sep 22 11:01:03 2026 GMT
            Not After : Sep 23 11:01:03 2026 GMT
        Subject: CN=50845a5083d99986c18e35421419612e1d077a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:fb:59:95:df:f7:be:e7:b7:97:4b:1e:2d:
                    c9:eb:c3:f1:da:94:6b:5a:eb:a5:98:8a:81:91:d9:
                    0c:bb:2d:f1:00:c3:f6:02:44:55:57:53:b6:a3:b7:
                    35:4b:56:d1:fe:24:47:11:df:4d:14:52:7d:5b:99:
                    69:e3:ed:b8:61:06:7d:6a:c4:c9:88:21:e6:d7:26:
                    24:c1:fa:19:1f:4d:04:cc:4a:27:75:81:5d:8b:f8:
                    d2:e6:55:bb:6b:42:fb:a1:b1:27:6d:04:63:bc:ce:
                    37:00:bb:a3:c9:2b:ee:f1:06:a3:e8:f0:3d:6a:7d:
                    53:a9:db:42:45:56:e8:02:24:1c:73:0e:2f:ca:c3:
                    5d:3f:67:d9:aa:50:c4:2d:23:d1:ed:2c:43:d0:f4:
                    79:d2:fc:e8:6e:5d:73:ca:2e:d6:69:76:3b:92:49:
                    9f:bc:a4:f1:29:ea:f0:8f:88:a1:35:4b:db:e1:bb:
                    de:bc:7d:68:1b:64:17:2a:38:f7:07:96:74:1f:cc:
                    23:28:23:f9:fe:66:9f:cb:c6:70:7f:9f:dc:ef:37:
                    45:7b:be:0f:ab:19:56:11:05:44:b9:64:46:6e:98:
                    7f:e9:9d:05:07:64:6f:7e:b7:2b:95:af:db:ff:b7:
                    55:a0:75:49:e4:0a:49:7b:c6:ae:02:07:ca:26:65:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:84:5A:50:83:D9:99:86:C1:8E:35:42:14:19:61:2E:1D:07:7A:00
            X509v3 Authority Key Identifier:
                keyid:09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a7:a4:70:f9:4e:ac:1a:4e:9b:99:e9:9a:7d:90:ef:af:dc:
         93:94:25:8c:7d:37:f5:b8:bd:1a:1d:0f:06:06:f0:8e:97:55:
         5a:22:9f:45:0f:dc:e5:3a:03:cb:63:1b:05:7a:68:fa:20:c2:
         58:42:cc:3e:6d:a8:91:3a:c9:96:00:c0:c8:ab:33:27:99:8a:
         ae:ca:61:a0:b6:e3:71:4f:ac:7c:73:b7:4c:e8:6e:06:5a:34:
         28:99:b1:a9:41:ea:6d:16:53:4a:4e:83:cf:de:cd:35:39:85:
         f2:ea:1f:0e:9f:2e:4a:31:a4:ec:64:90:a2:22:de:6b:41:80:
         97:bd:9e:dc:55:e8:fb:83:a6:f1:24:fc:2a:f8:b5:14:29:94:
         37:33:2d:99:72:48:7c:99:37:6a:03:15:65:c1:2f:32:57:c5:
         84:47:4a:2d:54:92:b0:81:f0:93:77:a6:d6:36:c0:0b:29:17:
         4e:1e:6d:ba:f2:06:c9:06:a5:1b:ed:eb:6e:8c:49:c8:6a:13:
         de:aa:44:9c:8e:9f:b7:7d:1c:43:14:df:96:44:e2:fb:31:b7:
         8e:a8:df:51:79:33:cc:68:cc:d1:81:74:42:5b:50:02:37:3a:
         e8:08:f8:7a:d4:0d:84:fd:69:57:97:05:ce:54:81:98:06:b7:
         ac:db:ec:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:52:17 2026 by rpki-client