Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/6bd653-3e8b-47b0-9b83-7b5964ddc36e/1/g0Urhb9FwGP6rV4VVRjnJPqrMz0.mft
File:                     g0Urhb9FwGP6rV4VVRjnJPqrMz0.mft (raw, json)
Hash identifier:          5z7P2Hx7Pvsb3nMYpE4QVOzMKaq+0A4NMAzgh3YVOhs=
Subject key identifier:   D2:35:87:E0:8E:BC:8A:85:A0:2E:8C:4C:79:D1:94:53:C6:39:4B:1F
Authority key identifier: 83:45:2B:85:BF:45:C0:63:FA:AD:5E:15:55:18:E7:24:FA:AB:33:3D
Certificate issuer:       /CN=83452b85bf45c063faad5e155518e724faab333d
Certificate serial:       01A0D4CBBCD2601A499AA720F2B34659B850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g0Urhb9FwGP6rV4VVRjnJPqrMz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/6bd653-3e8b-47b0-9b83-7b5964ddc36e/1/g0Urhb9FwGP6rV4VVRjnJPqrMz0.mft
Manifest number:          13
Signing time:             Thu 24 Sep 2026 19:01:56 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:56 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:56 +0000
Files and hashes:         1: USq3y3ZrmtlymF614A6Ey1yhMjU.roa (hash: leQoCm8GGhHqJlRnrWy26ehvmedBL8kxTMgDKzVKVsE=)
                          2: g0Urhb9FwGP6rV4VVRjnJPqrMz0.crl (hash: QZmjPC/AmEZupt43TGdN0rc7SoDfhzmkcH8qv7fiP/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/6bd653-3e8b-47b0-9b83-7b5964ddc36e/1/g0Urhb9FwGP6rV4VVRjnJPqrMz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/6bd653-3e8b-47b0-9b83-7b5964ddc36e/1/g0Urhb9FwGP6rV4VVRjnJPqrMz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g0Urhb9FwGP6rV4VVRjnJPqrMz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:bc:d2:60:1a:49:9a:a7:20:f2:b3:46:59:b8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83452b85bf45c063faad5e155518e724faab333d
        Validity
            Not Before: Sep 24 19:01:56 2026 GMT
            Not After : Sep 25 19:01:56 2026 GMT
        Subject: CN=d23587e08ebc8a85a02e8c4c79d19453c6394b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:9d:fe:5f:6c:09:61:3b:9b:bb:17:fc:e6:
                    dd:15:80:bc:7c:27:5b:df:99:1e:3b:14:f7:70:ae:
                    7d:3b:f5:68:35:4a:d7:b3:bd:49:b4:a7:f0:d5:5b:
                    e6:4d:2e:2a:aa:d2:9c:c6:32:7b:c5:d7:f6:73:4c:
                    52:48:61:21:b1:9b:31:c0:e2:3f:60:74:cc:aa:e4:
                    18:49:df:54:e6:6e:88:12:c0:44:3b:d8:b4:49:a3:
                    67:59:a1:5d:43:4a:bb:ad:1c:c3:5a:16:55:bb:5a:
                    73:a1:5c:a4:33:8e:6d:0e:c5:bd:82:7e:c6:ec:b4:
                    db:2c:d9:c9:04:5f:2d:c3:e6:29:2b:3e:a6:70:17:
                    6a:e0:60:ef:4a:8c:c0:90:98:28:30:59:18:4f:19:
                    c6:a8:05:0e:41:c9:75:5c:dd:8c:c9:ae:76:b1:45:
                    df:16:24:64:4e:50:54:8d:7b:05:80:8d:9f:f5:22:
                    16:73:34:e4:8c:f0:c7:2b:21:6d:6e:9c:12:11:49:
                    46:b8:d4:24:ef:15:f1:61:aa:9e:24:41:4a:1b:6c:
                    14:58:b2:ba:b3:1d:50:3c:1a:ec:15:33:1e:63:c7:
                    d5:83:28:fd:4d:16:f6:2b:a5:f1:30:37:8f:9b:c4:
                    62:c5:5d:d2:52:29:a0:0f:75:81:2b:7e:3d:2c:43:
                    b2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:35:87:E0:8E:BC:8A:85:A0:2E:8C:4C:79:D1:94:53:C6:39:4B:1F
            X509v3 Authority Key Identifier:
                keyid:83:45:2B:85:BF:45:C0:63:FA:AD:5E:15:55:18:E7:24:FA:AB:33:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0Urhb9FwGP6rV4VVRjnJPqrMz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6bd653-3e8b-47b0-9b83-7b5964ddc36e/1/g0Urhb9FwGP6rV4VVRjnJPqrMz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6bd653-3e8b-47b0-9b83-7b5964ddc36e/1/g0Urhb9FwGP6rV4VVRjnJPqrMz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:e8:a7:cf:3e:8c:72:5c:12:50:b5:3e:e7:5d:11:90:ba:d2:
         40:c7:2d:e7:0f:d7:b7:cc:5c:f4:6e:7f:f5:92:c5:80:c4:97:
         7c:53:21:e8:e7:f1:f6:f0:26:4e:ed:9e:64:03:45:cd:b6:dc:
         d5:7b:d3:32:1d:43:12:ef:de:e0:56:da:d9:5e:c9:fb:16:de:
         ab:6f:fd:57:16:bf:d2:15:3a:1e:c8:70:96:18:65:51:ea:32:
         b5:ee:65:29:7c:d0:34:42:ab:5a:7f:77:0d:cd:d6:91:49:e0:
         7b:ca:c4:75:40:f3:1f:33:5f:03:3d:ed:1a:bc:bc:94:0f:ae:
         2d:da:38:d9:41:7f:36:9b:b8:fa:51:91:2f:d1:56:41:da:33:
         b6:30:87:5b:ea:cd:81:a5:8a:ab:8b:01:72:7b:6e:85:28:d3:
         07:a8:ac:37:21:3c:64:d1:13:78:25:06:2a:5e:7f:70:a9:c2:
         fb:f0:c2:38:00:e4:73:d8:c1:5d:9a:fb:96:27:13:56:1b:ae:
         ae:1d:a0:70:8f:31:ca:2e:28:bf:0c:99:23:16:80:eb:1d:b5:
         af:91:e3:4f:b7:08:44:be:b0:a8:e0:bd:e2:94:33:1b:34:9b:
         1e:13:e8:0f:23:ac:b7:aa:42:d8:2c:1b:26:41:4d:a9:27:ce:
         ab:f3:33:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:48:35 2026 by rpki-client