Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
File:                     cPTWBuHReQgGOXe2mHdoLtfi0e8.mft (raw, json)
Hash identifier:          qwZEoN3JSqsCGAMoUtNk8o4hz2OpO6aCflqN7dh6Xhs=
Subject key identifier:   9F:A9:5F:5E:7D:A1:32:6A:C3:69:56:0C:80:B7:73:19:85:FA:FE:B9
Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF
Certificate issuer:       /CN=70f4d606e1d17908063977b69877682ed7e2d1ef
Certificate serial:       01A0D45DF8D467BCC04B05E92D94B98DA910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
Manifest number:          0767
Signing time:             Thu 24 Sep 2026 17:02:03 +0000
Manifest this update:     Thu 24 Sep 2026 17:02:03 +0000
Manifest next update:     Fri 25 Sep 2026 17:02:03 +0000
Files and hashes:         1: cPTWBuHReQgGOXe2mHdoLtfi0e8.crl (hash: u6fwB7XZgxI0vPcMyTKWrnNL6tF7f8oJyRPriF/v8yI=)
                          2: eUWfxWghJ9MEZ7tCGolfI7KpscU.roa (hash: NcF9IeGtFM+4GMOYjdME6cxPWgCCMAdO701188d5CSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:f8:d4:67:bc:c0:4b:05:e9:2d:94:b9:8d:a9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef
        Validity
            Not Before: Sep 24 17:02:03 2026 GMT
            Not After : Sep 25 17:02:03 2026 GMT
        Subject: CN=9fa95f5e7da1326ac369560c80b7731985fafeb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:79:b0:af:af:b9:28:f0:d4:9f:a0:83:a6:45:
                    97:35:ad:27:c8:f6:d7:42:3c:63:39:b9:9f:43:97:
                    e6:85:4b:0c:81:9d:7b:5b:54:e2:f9:d9:db:16:88:
                    6d:84:2f:41:c4:1f:66:3e:b5:57:87:c1:29:fe:c3:
                    cd:34:90:a0:2c:6f:a3:25:d9:56:e7:66:1e:8a:ef:
                    20:3e:5b:3c:70:75:df:c3:0f:33:d0:a0:26:f2:a5:
                    b5:10:8c:58:1f:2c:2d:37:85:0b:24:c0:b5:6e:9e:
                    09:c7:24:75:1c:8e:89:f1:7e:ed:a3:cc:a6:be:c1:
                    50:41:a8:56:15:cc:b3:ce:86:47:c1:18:b7:01:68:
                    ef:2c:09:a9:72:da:7b:f0:d3:5e:ec:ad:fb:30:ab:
                    51:6a:b3:b9:cd:3a:79:d1:32:7a:aa:f3:20:fa:1e:
                    22:87:c9:b6:07:2d:ee:8c:34:cf:0f:ea:a1:ff:30:
                    22:44:36:60:ad:7e:1c:e3:2e:f2:b5:15:ce:24:ba:
                    1e:9b:55:8e:1c:85:ae:88:95:c1:3d:08:25:c3:9b:
                    bd:dd:ef:ab:ad:e8:0f:51:23:c0:4a:f1:66:e7:03:
                    82:78:a9:f4:bb:a8:9d:56:ac:ce:eb:69:9f:92:00:
                    ff:15:9d:5c:71:e1:af:d8:00:5f:8d:4c:95:2c:db:
                    50:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A9:5F:5E:7D:A1:32:6A:C3:69:56:0C:80:B7:73:19:85:FA:FE:B9
            X509v3 Authority Key Identifier:
                keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5f:f0:e6:30:38:26:86:35:a8:c2:1b:28:13:e0:e9:1f:99:
         29:45:90:64:4b:52:67:c8:1b:ef:7e:ad:a9:eb:89:72:32:8d:
         21:3f:d0:c7:33:8d:34:30:52:f0:26:5b:a5:d3:ea:c2:bb:66:
         5a:d6:f5:5f:6f:1c:80:0e:5b:ee:1e:7a:95:1c:f6:49:cc:7e:
         9c:c7:42:e0:bf:cb:28:90:11:54:8d:ce:f8:68:7b:fb:8b:8b:
         10:9a:bb:32:f5:66:e8:ab:e0:9c:10:a9:e2:ae:8b:b5:6f:05:
         d3:b4:e2:25:1b:b2:3a:d9:74:fd:b2:30:a2:3d:38:bd:2a:a6:
         ed:fd:18:24:fc:66:ae:e3:c7:0e:58:46:37:db:eb:ac:ac:a8:
         e8:0c:ce:d7:4c:56:27:fb:10:c5:ad:f8:7a:93:56:b8:ec:0f:
         43:49:d8:b1:96:9f:47:83:35:b5:0a:f2:de:22:d6:36:f6:48:
         20:71:77:28:d6:3b:64:21:17:86:52:a6:52:3c:90:36:98:a1:
         7c:a1:27:6b:58:8c:07:b4:4c:fe:26:3b:4e:74:89:1e:4a:e6:
         44:2f:27:10:31:33:b1:4f:f1:80:4a:7e:4c:19:49:4d:a8:9d:
         68:ac:25:90:7a:7d:72:f1:4a:1a:87:d8:12:15:77:84:5c:b3:
         20:1d:95:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:07:20 2026 by rpki-client