Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
File:                     63yFxELMq3Xizm3inbX9APMmdJ0.mft (raw, json)
Hash identifier:          a0PJluUJnjiD3qsobcr4Rtu2+8nvReJvZ7VP08IJRe4=
Subject key identifier:   D8:57:02:0F:4B:4D:88:19:E9:BA:CC:2C:56:70:B2:55:67:4C:7D:3A
Authority key identifier: EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D
Certificate issuer:       /CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
Certificate serial:       01A0D12510731F0FEBC7D92FBDC0A49D2625
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
Manifest number:          1574
Signing time:             Thu 24 Sep 2026 02:01:02 +0000
Manifest this update:     Thu 24 Sep 2026 02:01:02 +0000
Manifest next update:     Fri 25 Sep 2026 02:01:02 +0000
Files and hashes:         1: 63yFxELMq3Xizm3inbX9APMmdJ0.crl (hash: AfB2rkwsUi8efLkqjmHzfnaz9c6Iynq0TEhI/gHiT9M=)
                          2: vUFwfEY11W7JpynTF9BbfUWs9-w.roa (hash: eu7mWQahLyPxvPg5BFYa4l+E4W1NHB0xDJbdLJnBmrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 02:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:25:10:73:1f:0f:eb:c7:d9:2f:bd:c0:a4:9d:26:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
        Validity
            Not Before: Sep 24 02:01:02 2026 GMT
            Not After : Sep 25 02:01:02 2026 GMT
        Subject: CN=d857020f4b4d8819e9bacc2c5670b255674c7d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:61:a3:94:aa:50:1c:be:0e:ea:5c:2d:06:c2:
                    36:b5:22:65:ff:19:7d:b0:13:51:26:5b:b8:24:b6:
                    79:38:18:03:d6:2a:18:7b:23:7b:48:fb:85:00:80:
                    a2:91:c9:4e:bb:46:7d:fe:62:54:38:81:00:3a:c8:
                    68:b7:a4:4b:ca:d0:7e:05:f8:5e:1f:37:ef:c1:f0:
                    fb:ba:ce:b1:84:a3:04:13:61:80:d3:2a:6d:25:42:
                    e2:76:18:62:24:60:60:a7:e1:38:22:ce:83:85:0c:
                    9e:96:16:a0:c9:f5:30:25:c2:05:76:40:00:92:6c:
                    e5:23:71:90:20:6f:6d:6b:57:70:bb:7b:40:89:e4:
                    0e:76:5d:25:2a:2d:e4:37:d7:8b:58:90:59:4f:b9:
                    4a:f5:da:de:5a:f7:db:b5:ee:08:16:18:5e:82:b2:
                    87:91:8b:48:05:01:ed:d3:7a:42:27:b2:ec:bb:7c:
                    13:44:27:0f:20:15:c5:42:d6:85:ce:cd:41:c5:25:
                    67:60:c5:62:22:12:97:e0:fd:c2:d1:55:fd:1f:d3:
                    9a:ca:a8:ed:55:ca:d2:7e:b0:27:c3:27:19:05:ff:
                    a8:f0:92:0f:14:03:09:b8:08:90:2e:0c:d6:db:14:
                    aa:1e:9f:34:3c:e0:f5:23:af:ac:b8:b7:7d:ac:65:
                    08:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:57:02:0F:4B:4D:88:19:E9:BA:CC:2C:56:70:B2:55:67:4C:7D:3A
            X509v3 Authority Key Identifier:
                keyid:EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:13:3f:89:e3:84:69:f6:cf:d6:f5:f2:14:42:83:ae:e2:b6:
         cc:4c:e8:ff:7d:a4:04:4e:8c:54:85:2b:1d:00:30:dc:72:38:
         78:2d:bc:20:51:9e:ff:85:20:ec:a9:a6:39:31:1e:f0:d9:42:
         57:88:6c:05:08:24:f3:5d:4c:b3:6b:6e:fa:51:58:76:ad:52:
         5c:6b:ab:13:33:dc:99:cc:db:72:8c:1a:c2:58:1c:08:67:62:
         4a:d9:3c:62:19:a4:05:a6:5b:32:a8:02:9f:56:45:5a:10:b5:
         3f:44:e5:e3:e2:7b:d7:35:6e:06:11:22:79:06:c0:1e:14:b6:
         82:af:01:95:8f:01:eb:c0:5d:b6:20:45:8b:01:bc:5d:c0:1f:
         7a:66:4e:39:b4:71:23:fa:45:14:6f:cc:ae:bc:08:fc:38:4e:
         92:f1:4e:56:dc:88:45:39:c0:20:ba:c2:99:7f:0d:c4:50:b4:
         74:8c:b0:95:b4:8c:ed:1b:77:54:e6:4d:c6:90:b4:43:d7:e2:
         95:a6:2c:9f:e7:17:f3:7c:b7:23:3c:cd:6d:1e:5a:b1:83:cc:
         24:a1:bf:6f:41:e1:33:56:9a:52:d2:b8:83:8c:30:4c:a4:b7:
         ac:32:e7:b6:0b:1c:c8:eb:33:1e:e2:51:cf:76:79:f2:4b:c9:
         54:94:c5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:59:32 2026 by rpki-client