Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File:                     Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier:          YkoBiW4iV5yGkikhqDnaewobxshFf9HvRC21k/VWg3Q=
Subject key identifier:   80:D5:3A:62:9F:35:A4:8D:32:8A:65:92:85:CE:C0:44:39:09:31:F2
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer:       /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial:       01A0DCBC2D27AB9418237D8BD7F89FA8DB11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number:          1A82
Signing time:             Sat 26 Sep 2026 08:01:54 +0000
Manifest this update:     Sat 26 Sep 2026 08:01:54 +0000
Manifest next update:     Sun 27 Sep 2026 08:01:54 +0000
Files and hashes:         1: 6-VbzQgi8XA2TJAq8RgMaysx0X8.roa (hash: nwaIi9ebrKp/Q5R4ShMm9TiJvoby9UkF3818QuosS1w=)
                          2: ByAZZvD6ZO4dFVGZCOox_IHwdzo.roa (hash: wGFO7OyD3Pn5gOzCEOeYwv/8FCnWxDnlJBKiFmfnr/k=)
                          3: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: 7ocCW3zmlORKbUoWrip5ioBCldvvN2mg8d81+vKZcaU=)
                          4: KM6PkAFxCJgnCXLELW5hiOAKjus.roa (hash: DuJVolLG90aax0OKvLaTyX/VTpILvcyZxRZVQhnBPeY=)
                          5: YoJZ9epoonqwiI5Cz_IYJxFC0KQ.roa (hash: rcBdfpWe95Pbv9jR1rFIiVQgv2ItDDK2rcgQtFQdM3o=)
                          6: kZOcgE-yQiEGZ59-58kZODUnVtk.roa (hash: NpX21ZAdgdJK8Ql3JOW4Xo/GtwmqnfCpzM6EirlUM7w=)
                          7: odPvkDMmAxjrc3ZPhrKtHv1Pl_Q.roa (hash: WbetbahmmvNLGyGKWf2niABo2rq9cUlLwj18Yb3Jj3M=)
                          8: ps2vvRE8em2BhpWugO8HL3Oy4sw.roa (hash: UVRw/RrZWURZppeHPUhCU3KyC7ib1pGilFd5giOzN0U=)
                          9: sT5NvgSrjzuwTioYpNTeZgud1ao.roa (hash: eCoPPFfnRnkLIs6eZVD/zHitzMoyIccre5mcG4E3t34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:bc:2d:27:ab:94:18:23:7d:8b:d7:f8:9f:a8:db:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
        Validity
            Not Before: Sep 26 08:01:54 2026 GMT
            Not After : Sep 27 08:01:54 2026 GMT
        Subject: CN=80d53a629f35a48d328a659285cec044390931f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:54:cd:80:40:de:5d:49:b3:ad:db:f7:12:aa:
                    9d:ed:82:73:72:36:b8:a0:7f:90:e6:af:ff:0a:e2:
                    9b:0a:9f:e9:39:4a:48:d5:8d:a5:ea:b8:4f:1f:b3:
                    d4:92:4a:d3:a2:e4:b0:ae:07:a6:6b:7d:94:1d:aa:
                    f0:91:70:1d:98:36:7c:ec:7f:82:e1:ed:3d:08:32:
                    15:57:24:d8:d3:28:55:5f:af:ec:ac:60:bf:ff:a4:
                    fe:fd:b9:c7:f0:9f:92:3e:2e:6e:97:25:ea:f7:50:
                    e3:c8:16:d8:da:dd:92:92:3b:68:71:78:72:c4:79:
                    1a:9f:25:23:48:29:02:9d:38:f6:bd:f4:c3:d7:a0:
                    2d:fd:2f:7e:d0:1e:ac:04:1a:0e:7f:59:a3:a6:72:
                    f9:09:cd:e7:fe:e7:4b:ec:42:4b:c4:a7:ca:4f:fc:
                    2f:7a:3e:7c:36:e7:9a:3f:d0:01:07:65:65:00:40:
                    02:ec:96:be:59:02:91:db:a8:29:ff:73:23:a9:1d:
                    45:0b:fc:4c:59:c3:ba:49:63:34:aa:4c:0e:77:3f:
                    98:9b:54:dc:ef:f4:d2:38:ca:e7:aa:c2:e2:66:9a:
                    4c:90:01:23:af:87:7e:99:56:8f:3a:66:fd:95:c0:
                    85:69:4b:f5:ba:78:09:37:0f:a7:8e:a0:22:36:45:
                    ab:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D5:3A:62:9F:35:A4:8D:32:8A:65:92:85:CE:C0:44:39:09:31:F2
            X509v3 Authority Key Identifier:
                keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:06:c5:11:66:4c:78:5f:5e:42:12:01:f5:60:a1:9a:2a:01:
         ce:9b:10:a8:79:0e:53:a8:4b:bc:62:f3:83:54:fd:ad:8e:d3:
         80:d4:e9:f4:2c:2b:07:80:fe:3e:ea:46:df:e1:bd:b3:2b:ce:
         40:4c:f6:e4:db:bc:13:b5:0b:8f:ac:77:80:ab:b6:93:40:07:
         4a:dc:42:ab:e7:bc:a9:be:a3:3d:bf:3d:d4:a5:76:73:42:2d:
         96:a7:c8:9f:07:5e:dd:4e:ee:3d:03:a3:4d:05:e2:eb:4e:54:
         83:e7:5b:19:8a:ae:a8:2e:c7:81:85:5d:d0:d0:11:b4:35:6e:
         bc:5b:f6:ab:48:61:aa:9a:99:c3:3e:f0:c8:45:37:2f:d1:0d:
         51:7c:01:b9:4f:14:c5:25:bd:db:c8:9b:df:ae:17:72:82:d8:
         48:71:83:31:a1:02:42:dc:d7:98:81:96:bb:80:35:12:9d:8a:
         67:e3:a6:99:7f:87:1a:3f:fb:23:38:ca:ac:08:87:58:38:e5:
         19:7b:a3:4a:79:73:b6:b4:54:9b:17:b4:97:f0:e7:34:c5:b8:
         80:0c:f5:fd:ef:ad:7d:2a:c7:53:d4:ae:82:c6:0b:8e:3a:d3:
         a6:dc:88:51:ed:a1:89:d6:14:80:2b:02:20:9f:82:22:a4:bc:
         c9:c3:ca:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:21:13 2026 by rpki-client