Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft
File:                     0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft (raw, json)
Hash identifier:          G49J0hM+Ap16/HB1Q99HIPmYZ+EkvIidtK9SdXjBzFE=
Subject key identifier:   34:1B:CD:26:C7:29:60:A9:7F:54:57:62:FF:84:BC:41:28:9C:9C:AC
Authority key identifier: D0:42:5D:25:4D:FF:F3:E1:2A:96:72:93:08:43:FC:0E:9A:BC:90:62
Certificate issuer:       /CN=d0425d254dfff3e12a9672930843fc0e9abc9062
Certificate serial:       01A0CEC89979C0A91296E947B778852FA42A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft
Manifest number:          0178
Signing time:             Wed 23 Sep 2026 15:00:47 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:47 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:47 +0000
Files and hashes:         1: 0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl (hash: 4pgCX5tGFXyaPimOVU8INqjFAMPv7IUNOpBBetehvEE=)
                          2: ZV6GoQmFKWprJrgS-BNOZfIs3uw.roa (hash: rskKuW0jzlm4vvgnrDF3Zit1RKOWw89g0roHWJQez7E=)
                          3: b9SZegPwSzxHPkJmXkOZdO34Isk.asa (hash: E7JZVgnPZLiJMVvltmZKGhM+/DtbizayQSGX/wVp+IM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:99:79:c0:a9:12:96:e9:47:b7:78:85:2f:a4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0425d254dfff3e12a9672930843fc0e9abc9062
        Validity
            Not Before: Sep 23 15:00:47 2026 GMT
            Not After : Sep 24 15:00:47 2026 GMT
        Subject: CN=341bcd26c72960a97f545762ff84bc41289c9cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:13:57:ff:3f:0a:61:e3:6a:49:0b:fb:55:5e:
                    88:79:ed:62:f6:ef:b2:29:61:a1:5e:e7:28:f2:d4:
                    0a:fa:6d:f3:ec:7d:8c:f5:e5:02:49:cf:ce:5e:37:
                    5c:57:82:55:0e:f1:6c:41:71:57:93:21:ee:5c:e1:
                    75:15:67:28:b9:50:f6:86:47:4a:46:d6:7a:20:70:
                    5b:70:a3:9c:73:81:14:0a:17:c1:8c:8b:10:eb:a3:
                    c6:0f:82:bf:b1:d8:2c:87:11:51:41:c7:b3:9b:27:
                    12:80:93:53:06:cb:ba:0f:2d:50:f0:d7:fc:1c:0f:
                    80:62:5d:f1:89:88:22:5e:94:0c:ac:03:d0:73:66:
                    80:c9:d7:ef:70:4a:f1:89:45:67:7b:aa:20:c4:34:
                    a7:2b:c6:6b:15:f0:e0:60:a0:32:ac:17:2e:8c:c7:
                    7c:ef:a6:4b:8c:79:59:a1:0e:1d:a3:a5:9c:cd:c8:
                    e5:fd:52:96:0c:3c:2b:7a:23:de:54:34:92:08:c3:
                    60:02:38:4e:a4:2f:24:9d:36:46:d7:06:bf:20:37:
                    b9:69:9f:dc:c7:bc:ed:b8:66:5d:71:f3:09:fa:bf:
                    28:d5:a5:98:32:15:56:42:68:35:06:2f:90:a0:0d:
                    ed:2f:f5:5d:5c:a4:8c:6f:74:8d:27:f6:f7:dd:34:
                    5b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1B:CD:26:C7:29:60:A9:7F:54:57:62:FF:84:BC:41:28:9C:9C:AC
            X509v3 Authority Key Identifier:
                keyid:D0:42:5D:25:4D:FF:F3:E1:2A:96:72:93:08:43:FC:0E:9A:BC:90:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:75:ac:8a:4b:34:50:79:87:81:4a:c8:43:67:2c:5b:8a:9f:
         e9:1a:83:48:84:0c:5d:15:5b:47:78:b7:7b:ab:25:0a:97:ef:
         83:ba:67:16:06:c2:92:1f:72:1c:cc:51:d2:e2:9f:06:b7:ec:
         f1:f6:95:ce:8d:94:32:5a:22:14:8f:fe:ed:b5:c6:e4:e1:d0:
         16:3a:a0:f3:e4:07:39:ed:46:6f:6a:44:98:72:53:98:41:0e:
         f6:f3:97:e7:15:ae:75:ae:1e:97:a7:a4:16:a1:29:31:2e:a1:
         4a:c4:cb:b2:5c:05:b9:6e:80:39:1d:4a:2a:3d:59:38:5c:20:
         0c:8e:f7:56:f0:02:9c:71:4f:62:15:a4:68:e5:3d:6e:08:5a:
         8d:44:76:c9:5f:43:3e:b7:eb:df:d6:1c:6d:a3:40:50:9d:f2:
         84:64:b1:b0:ad:7a:e5:ba:c5:5a:c1:f0:a8:0b:a6:67:9d:45:
         6d:b4:40:8f:a4:d5:1f:64:de:73:c7:25:63:30:f3:49:a8:a7:
         41:92:97:fe:ab:69:30:ed:0c:0c:8f:be:fc:36:24:29:90:9a:
         ad:bd:fb:e7:cb:e8:30:df:ed:be:30:91:f6:5f:fc:95:02:a5:
         41:bf:dc:00:1b:5e:ca:10:8f:7a:07:50:17:7e:6f:a9:c5:49:
         2a:06:94:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:42:53 2026 by rpki-client