Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File:                     31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier:          iIjNhiyPOsQb0s/Ue9LL9FZJeQzFbDlMrDCD8zOHC8k=
Subject key identifier:   96:92:2E:15:19:55:A9:FD:E7:E9:4B:7C:01:06:C2:C9:3A:BC:EC:3F
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer:       /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial:       01A0CDEC98B4CBFD9FFEE2C8A4EB38D7B5E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number:          1A6B
Signing time:             Wed 23 Sep 2026 11:00:29 +0000
Manifest this update:     Wed 23 Sep 2026 11:00:29 +0000
Manifest next update:     Thu 24 Sep 2026 11:00:29 +0000
Files and hashes:         1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: sUvuAMjbVOuuFzgXPeiIxviH/hcKwQG2hhDWBfNF8tU=)
                          2: bFzdMPznlOjSbXFpquaFvhugI8E.roa (hash: K3/O8FhhB6ddNanECmUzETBKUHzHCD/aSiUCGY1B2qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:ec:98:b4:cb:fd:9f:fe:e2:c8:a4:eb:38:d7:b5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
        Validity
            Not Before: Sep 23 11:00:29 2026 GMT
            Not After : Sep 24 11:00:29 2026 GMT
        Subject: CN=96922e151955a9fde7e94b7c0106c2c93abcec3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:91:4d:59:65:cb:76:2a:8d:43:03:e6:a0:7d:
                    d4:3b:2e:19:87:46:68:b4:0c:44:75:1e:a4:a1:26:
                    9c:5a:ab:cb:79:90:f3:c4:9d:11:4d:c3:5b:75:73:
                    91:5c:9b:c1:82:ad:6a:79:50:82:54:0b:46:89:35:
                    9d:b7:27:ab:1d:79:54:f0:3d:c0:9a:bd:3f:e5:25:
                    fd:a9:e0:be:4f:f8:18:d8:93:af:42:29:98:d8:87:
                    d5:b2:df:60:d8:8f:30:b0:09:32:8e:b2:24:e9:dc:
                    0e:1e:f4:be:2d:47:0d:7d:62:29:8b:44:e0:78:8a:
                    49:27:8b:62:f4:8d:4c:d6:c9:f5:69:b9:cb:63:4e:
                    77:36:90:1d:b5:58:2d:22:c7:82:af:6f:1c:02:6a:
                    68:aa:e0:3a:d4:a8:6e:8e:46:8e:49:00:b4:18:ea:
                    ec:90:28:0c:55:37:65:0b:d1:3b:d3:24:b0:34:27:
                    01:c2:22:9b:21:0e:a5:64:23:a4:ab:02:9f:f6:fb:
                    7f:d0:6b:b9:0b:c1:96:21:02:98:9f:6f:f0:0d:0e:
                    0e:6a:8b:05:9c:dd:bc:bc:6d:a3:5b:e3:c2:76:47:
                    37:4f:2c:1b:a9:59:2f:a5:37:61:f1:b1:a0:4b:65:
                    4f:da:9d:29:b2:25:a3:ea:94:8e:e9:c7:84:61:ad:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:92:2E:15:19:55:A9:FD:E7:E9:4B:7C:01:06:C2:C9:3A:BC:EC:3F
            X509v3 Authority Key Identifier:
                keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:76:c8:62:42:35:3e:68:5d:11:83:02:6e:fe:77:c9:ae:09:
         60:53:e7:5b:a6:2a:84:ca:55:6c:b5:dc:12:cc:72:6f:2d:3c:
         c3:26:ae:ec:9f:63:0c:12:ac:6d:14:a1:bf:7d:75:a7:d8:89:
         10:3c:55:38:a2:a2:dd:48:a8:a0:fb:16:f6:9d:a0:0e:e0:1e:
         99:41:63:a7:4f:37:60:4e:f5:fd:13:3e:d3:8d:1e:42:18:24:
         e1:91:a1:f0:0c:9f:27:02:a6:a4:f0:1e:c7:27:11:60:8b:78:
         a1:14:74:3c:81:f5:55:9e:46:5b:b2:f8:4f:55:ef:31:02:1c:
         9e:c1:87:b3:14:19:8f:e6:48:77:c8:dc:d5:06:f8:ae:00:de:
         bb:a6:29:16:73:01:27:f7:1a:3c:59:16:56:9b:91:a5:7c:be:
         65:1b:6d:c8:2a:a9:17:1b:35:24:52:ce:55:2c:df:37:aa:e0:
         03:8f:fb:86:4b:7e:40:a9:eb:f2:e7:fd:51:6a:3b:69:83:0b:
         51:ed:45:3a:13:74:ec:b6:8e:fc:a6:aa:45:65:33:4d:b9:f1:
         b7:70:30:0c:f1:3b:18:14:b2:a4:e6:9c:f2:81:0e:b1:d6:dc:
         2f:62:f4:a6:2d:ae:12:37:46:c4:8a:ae:38:be:d1:2e:32:e0:
         62:24:8c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:56:10 2026 by rpki-client