Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
File:                     pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json)
Hash identifier:          a97T7Ol5F+RGMzoyrkil3AJiZQJpTBF+yLN4+pzhfU0=
Subject key identifier:   24:59:14:50:1A:DF:03:01:AC:02:BC:87:C3:A4:30:ED:F6:79:75:4D
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Certificate issuer:       /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial:       01A0E69A5F96D88C165B793BA35D7D636237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
Manifest number:          0B3A
Signing time:             Mon 28 Sep 2026 06:01:11 +0000
Manifest this update:     Mon 28 Sep 2026 06:01:11 +0000
Manifest next update:     Tue 29 Sep 2026 06:01:11 +0000
Files and hashes:         1: 0lvXa172UplN6y7av1cXq_FBnIY.roa (hash: wYYltyOrSFKK2j0JVE4ExTzSFfm4Tu29VSNIrOnj0/w=)
                          2: J0u4PbYIevSkqXDSEnsyGZVMqtc.roa (hash: aBXYYl48jca9wveAZI/GuYbbGGyv9mDo91i3PZYst5k=)
                          3: W7a_s-Jl-VcdTVf7k5VBlu09lYo.roa (hash: NXJVtq1VsU3W1ziELfQ1JwgkYM4PzBdJsNwmTSOSzqs=)
                          4: oFb4jBbqBQ0GaSAPZ2CPzXwpuXU.roa (hash: ReFO9yx5996yanj90nD2kh+KTbHdkiMkBpj9BJ+Y/vs=)
                          5: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: wzOS/7bGjSoIs1oAnfvfj/gizsresWt+RvR70DbAuME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e6:9a:5f:96:d8:8c:16:5b:79:3b:a3:5d:7d:63:62:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
        Validity
            Not Before: Sep 28 06:01:11 2026 GMT
            Not After : Sep 29 06:01:11 2026 GMT
        Subject: CN=245914501adf0301ac02bc87c3a430edf679754d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:68:f5:b0:eb:6f:93:99:f1:b4:73:1a:b1:
                    2f:0e:cd:74:a8:ca:b4:63:d7:f4:d7:55:85:58:09:
                    ce:63:42:f5:80:be:b0:25:f8:43:64:52:f4:ec:ba:
                    52:f4:24:4f:b1:ce:61:fe:6a:3f:a6:63:56:63:7e:
                    f6:ad:17:cb:ed:eb:ac:83:6b:49:77:50:c7:b0:9c:
                    9d:78:c4:be:7a:c8:36:15:7b:ce:4e:be:2a:c1:59:
                    f1:68:b3:55:dd:6b:9f:8b:09:c3:5f:fa:16:af:d6:
                    ec:fb:f5:2e:3a:82:87:a0:b6:bd:df:df:a4:df:ad:
                    14:96:06:28:36:f8:b5:fa:b5:79:9b:80:7e:d9:a9:
                    9a:25:78:40:07:da:a1:65:fb:87:2a:45:3a:17:2c:
                    9e:4d:bc:47:e2:fc:02:96:e3:48:26:a6:a6:fd:75:
                    43:b1:c6:a8:99:e8:79:3a:a9:73:c1:a7:a4:d3:54:
                    f0:f6:b0:ea:a6:27:76:40:ec:52:75:81:40:7a:99:
                    ef:47:c2:59:55:b6:c1:67:7a:0c:b9:ba:81:85:da:
                    38:40:66:e0:43:a7:58:e5:20:bd:0c:5f:dc:8c:6f:
                    fc:a2:fd:fc:f1:90:f1:d4:be:e3:80:e3:a0:0b:ac:
                    87:41:9c:79:0c:2d:93:b6:96:34:a9:fe:3d:8e:92:
                    36:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:59:14:50:1A:DF:03:01:AC:02:BC:87:C3:A4:30:ED:F6:79:75:4D
            X509v3 Authority Key Identifier:
                keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:28:f0:00:73:5a:8e:35:e3:2c:c4:60:66:95:95:d4:a8:e7:
         8f:6d:d0:27:f8:78:c7:5a:66:9e:df:71:24:89:24:55:09:29:
         2f:10:c3:b0:3b:28:b0:5b:34:c5:fc:c0:61:bf:b2:21:be:d0:
         a5:ba:7f:28:56:b7:60:5a:6e:09:c7:eb:ed:3e:b8:d3:ca:d7:
         cf:28:72:00:fb:ff:2f:d1:5d:6b:2a:0c:ca:aa:a3:5f:90:fa:
         05:20:bc:e1:c3:dc:d1:7f:e6:0e:08:ec:33:65:8c:50:65:e3:
         ac:db:bd:3e:2b:c4:00:f6:59:4c:bd:2c:88:aa:35:74:c8:31:
         f3:5a:25:8b:de:12:4d:8d:bb:d1:de:1e:11:7f:b7:c0:2c:c6:
         24:74:a2:8a:cc:a9:a4:8e:f6:76:7b:4b:fd:db:78:bb:00:ba:
         1f:11:a7:2a:64:a0:24:f9:69:56:e2:ce:64:5c:41:45:94:c6:
         a7:a9:95:5c:cf:d9:f5:e1:ef:61:ce:58:46:2c:9b:4f:5e:7b:
         f5:87:af:11:de:b1:cc:7a:fa:03:10:d2:89:ab:40:04:70:20:
         a9:03:b0:77:5a:65:5f:51:1e:38:08:a0:4d:6e:61:78:70:db:
         d9:13:ba:84:f2:e3:96:59:ba:11:a0:81:5d:66:ed:24:d0:37:
         9d:ba:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:10:01 2026 by rpki-client