Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
File:                     0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft (raw, json)
Hash identifier:          636PWyCHKK4ZMDiZ+kCWHn96uejY4Px4yN2tEbeucDc=
Subject key identifier:   38:CD:12:CC:10:B0:E0:15:AD:C4:CE:E5:9E:74:62:BE:37:99:F8:5C
Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
Certificate issuer:       /CN=d3277a239664d245becf4214dde15923042a142f
Certificate serial:       01A0D8729D50CE14DF19602AF202A928CFC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
Manifest number:          13B1
Signing time:             Fri 25 Sep 2026 12:03:04 +0000
Manifest this update:     Fri 25 Sep 2026 12:03:04 +0000
Manifest next update:     Sat 26 Sep 2026 12:03:04 +0000
Files and hashes:         1: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl (hash: ARNFNVGJyjKPGMIZMGxhylrgJhPWocOn5qo1Eyg6/Zk=)
                          2: EAy4SNOanXhaxXxJSyGzCor_nI0.roa (hash: Ea+Uw6sz9cAh7cFY1x39RiJi5kY9NftCtSPZo+he5xo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:9d:50:ce:14:df:19:60:2a:f2:02:a9:28:cf:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3277a239664d245becf4214dde15923042a142f
        Validity
            Not Before: Sep 25 12:03:04 2026 GMT
            Not After : Sep 26 12:03:04 2026 GMT
        Subject: CN=38cd12cc10b0e015adc4cee59e7462be3799f85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:db:e3:6c:8d:f7:37:c0:61:5b:b0:b7:b0:b9:
                    74:46:af:49:d4:bf:32:62:ce:1f:0c:74:14:ad:03:
                    f0:09:9a:17:06:e9:d2:b2:d4:47:70:3a:a9:ff:ce:
                    c2:ce:c8:2e:18:a6:db:0d:23:32:2e:36:95:32:a2:
                    ed:71:98:8b:e3:61:2e:3d:a1:c4:2c:88:ef:4e:73:
                    cf:fc:3b:56:c2:53:41:a1:7e:8f:82:ed:46:b6:94:
                    ba:5f:4c:d4:fe:67:c3:c6:25:9c:11:b8:5f:e5:9b:
                    0c:ad:e0:1c:d2:8f:61:e1:b6:2c:ec:bc:8a:2b:c8:
                    e8:ae:e0:cc:98:48:08:c1:bc:5a:07:a9:fb:b4:cc:
                    03:79:df:b5:42:60:00:b2:af:89:0b:c3:97:c6:94:
                    09:1d:2e:61:02:8a:e1:6d:0a:fe:d0:d4:45:96:ac:
                    42:ce:e3:8d:93:d6:33:cf:92:92:c0:a1:1c:3e:6b:
                    dd:f2:17:eb:4c:1e:2a:54:ab:4b:ef:29:a7:09:d2:
                    fd:e3:27:b3:c2:8c:d2:0f:7a:99:2c:4f:ef:ff:4f:
                    0b:11:9a:68:16:f9:bb:32:e0:34:51:78:6e:06:47:
                    82:5b:ae:db:ef:52:41:86:8d:b9:51:83:79:52:d6:
                    ce:51:74:4c:d9:ff:29:a3:88:07:af:cc:62:b8:d7:
                    f3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CD:12:CC:10:B0:E0:15:AD:C4:CE:E5:9E:74:62:BE:37:99:F8:5C
            X509v3 Authority Key Identifier:
                keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a4:b1:a1:77:4f:c9:99:d2:11:6d:4f:6f:93:df:71:48:e7:
         a4:e3:c2:08:63:1c:03:7b:00:d4:2b:87:a5:b3:4c:00:e5:08:
         65:cf:8c:dd:44:dc:47:f0:69:61:8b:ce:b3:b5:d0:09:b7:3e:
         9e:09:4f:42:52:29:85:19:59:58:ca:d4:23:53:b2:d0:19:cf:
         0e:1a:c5:31:86:ce:60:60:34:da:26:38:cb:ea:b7:01:87:6e:
         7b:d4:e0:4a:7d:53:17:d0:c4:a2:26:49:a5:be:ed:d5:c7:60:
         fa:b8:d8:59:2f:5a:c8:02:c6:53:95:71:d8:0d:91:b2:0c:44:
         8a:cf:3b:7b:9b:ad:6b:59:cf:50:01:5f:91:bb:e1:40:29:39:
         05:84:07:44:db:bd:dd:f5:a4:92:2a:13:bd:90:49:44:cf:af:
         61:82:9e:94:75:37:65:b0:f2:fd:14:0e:d3:ac:3d:ee:4d:53:
         93:d3:57:0e:1c:3e:8a:f8:7b:74:f0:ed:75:2a:59:12:ee:5b:
         ec:71:07:37:2a:01:54:98:60:48:c5:d3:63:7b:31:85:90:24:
         b1:59:34:e7:0b:2d:6e:fe:d0:74:21:3c:bd:a0:a5:e4:b3:06:
         ca:0c:f1:67:6b:e9:21:75:5f:0e:17:42:a1:7a:d1:ee:af:c1:
         9e:43:fc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:09:35 2026 by rpki-client