Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
File:                     82ct8ORpiLvu2b5UENoSo_Fw1pE.mft (raw, json)
Hash identifier:          nRPTkrrkZL4SwqAgdQ6LHbeigj4+VeGBBsHzfayA1Cs=
Subject key identifier:   EF:99:9F:AB:60:42:C4:0F:DE:DE:8B:E7:31:0E:B4:C9:9B:2C:71:9C
Authority key identifier: F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
Certificate issuer:       /CN=f3672df0e46988bbeed9be5410da12a3f170d691
Certificate serial:       01A0D34A792C91055AD488847A09545D5F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
Manifest number:          1A70
Signing time:             Thu 24 Sep 2026 12:01:08 +0000
Manifest this update:     Thu 24 Sep 2026 12:01:08 +0000
Manifest next update:     Fri 25 Sep 2026 12:01:08 +0000
Files and hashes:         1: 82ct8ORpiLvu2b5UENoSo_Fw1pE.crl (hash: UfZRK5isfBY0WqCtrUMS8lPNgUc37LCtyqU8fNbl6MY=)
                          2: YwCwR3LXMu11k-vznf5QFY8Ls70.roa (hash: b+6Jc3/zLUqnM8wMsCWGbM4Jx06SlYE6hCoOYI6G5cA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 12:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:4a:79:2c:91:05:5a:d4:88:84:7a:09:54:5d:5f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3672df0e46988bbeed9be5410da12a3f170d691
        Validity
            Not Before: Sep 24 12:01:08 2026 GMT
            Not After : Sep 25 12:01:08 2026 GMT
        Subject: CN=ef999fab6042c40fdede8be7310eb4c99b2c719c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:7c:d8:38:3a:71:7a:ff:4e:c6:2a:bb:dd:
                    ed:2e:1d:ec:94:4a:3d:c2:1c:8c:8b:ab:c2:33:ed:
                    64:d8:d6:b5:cf:65:d0:48:86:c8:b0:40:29:e0:e7:
                    00:3d:62:c5:e5:ad:7d:f4:e2:ba:89:0a:69:b2:b9:
                    3a:3f:61:2a:79:8f:40:8d:ed:7b:13:52:32:81:15:
                    29:34:ef:71:07:4b:ae:4c:33:db:dd:0a:57:b9:12:
                    1b:9f:43:39:74:d9:55:00:ad:5a:9a:4a:56:61:2e:
                    88:5d:67:49:f9:aa:63:ee:d4:ca:6d:c0:34:ab:93:
                    4f:75:5c:dd:dc:7f:e4:d8:a9:ca:e6:ec:ea:1d:9a:
                    fa:c2:71:3d:fe:09:0c:91:76:b4:0a:04:c4:09:59:
                    24:55:99:4d:7b:69:b3:ec:07:f3:c5:bd:a1:24:7e:
                    16:fb:36:7f:1d:40:99:f3:5f:2f:01:6e:69:d1:a2:
                    cf:2f:d4:6d:c3:74:80:69:28:51:3d:54:2b:b8:7b:
                    4c:02:ab:f0:37:33:fe:bb:cd:85:f4:bf:53:6f:cc:
                    b6:d6:3f:8c:ec:97:c3:71:47:a6:45:51:ed:6a:8c:
                    44:21:d4:2d:42:c4:be:80:51:67:29:ed:38:17:bd:
                    e2:12:95:0e:e3:36:6c:f3:57:76:d0:13:bf:09:a4:
                    e8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:99:9F:AB:60:42:C4:0F:DE:DE:8B:E7:31:0E:B4:C9:9B:2C:71:9C
            X509v3 Authority Key Identifier:
                keyid:F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:29:cf:c5:f1:91:73:38:f9:88:6a:60:5e:61:92:4f:46:9d:
         52:28:3d:cb:6c:9e:bf:88:96:d4:f5:da:6f:c3:8d:0f:28:26:
         93:33:e7:aa:05:15:00:94:8b:a4:b4:47:8d:77:51:b7:51:c6:
         00:e2:bc:c0:83:23:58:ad:46:1b:33:e8:1f:a2:f1:8d:07:96:
         6f:2e:59:f3:f5:a5:62:d5:11:79:31:ba:63:da:5d:55:9a:e2:
         29:ba:3f:0f:b2:e6:33:3f:a7:ee:94:75:c3:4f:10:2e:d4:ba:
         ca:81:b1:07:83:73:a4:95:81:04:ea:5b:0b:0c:e4:87:87:3c:
         c1:bb:fa:95:07:e5:6d:42:31:9a:75:29:7e:35:62:82:9e:4f:
         e0:4b:eb:cd:44:b4:60:a4:6d:c1:a1:cb:98:0a:5b:c1:9e:3c:
         10:e9:11:c8:c5:1a:ca:1d:3e:6e:cc:7e:78:b9:3b:d2:b8:6f:
         aa:0f:35:28:03:a9:ad:9f:f5:d5:70:63:9d:ef:f1:45:9b:20:
         c2:a0:ca:0e:6d:a6:e9:19:c8:44:51:da:52:a0:e5:cc:16:60:
         e3:d6:06:a1:d6:b1:e8:da:66:a4:33:1b:8c:e3:53:6b:00:fa:
         fe:c5:82:57:fc:9b:20:43:98:f4:43:9d:bc:be:4c:36:47:d4:
         64:85:cc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:08:23 2026 by rpki-client