Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File:                     pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier:          rtqza2xxojbofcg6xqRLIQtWlwo2R3lzeXdkduQtalQ=
Subject key identifier:   D6:46:7C:74:68:BC:0B:9D:4B:31:83:55:A8:5A:A7:15:33:7F:99:5A
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer:       /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial:       01A0D8DEEAEA53BC655F58CD9C73173FAB9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number:          0BFF
Signing time:             Fri 25 Sep 2026 14:01:22 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:22 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:22 +0000
Files and hashes:         1: PVIvAggMAtuREjhV8GPK-EuHdx8.asa (hash: /yi4srMyiV+9qj1Uy16aZQoRy4KHU28OFJInXDw+3jg=)
                          2: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: 6D5VPAXVpSPb4ptIwX5d18Fl0fUsf+uiqNV6KoJej6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:de:ea:ea:53:bc:65:5f:58:cd:9c:73:17:3f:ab:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
        Validity
            Not Before: Sep 25 14:01:22 2026 GMT
            Not After : Sep 26 14:01:22 2026 GMT
        Subject: CN=d6467c7468bc0b9d4b318355a85aa715337f995a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:e8:04:9e:f4:51:f3:3b:1c:27:14:76:bf:
                    8e:6d:5f:39:5e:e5:41:46:f3:8b:ce:ee:6b:b3:2b:
                    6c:f5:a5:dd:9b:5a:5a:1d:85:75:13:ce:42:d2:e9:
                    7b:25:43:bc:47:eb:0f:96:3c:1a:5d:87:70:1a:ce:
                    f5:c7:70:1f:2e:84:0b:cd:59:4b:4a:96:f3:02:75:
                    9a:95:cb:fc:de:34:79:1f:81:47:fd:f1:ac:7d:19:
                    46:9a:79:18:db:31:76:d2:25:bb:7c:6b:9a:ec:fe:
                    e2:94:fb:23:46:21:a8:73:67:02:99:04:77:00:96:
                    9c:ef:c1:2e:14:45:be:a0:fe:de:bc:cd:57:37:46:
                    8b:db:1a:a0:c8:25:de:3c:76:a3:79:10:0c:ff:e3:
                    2e:e9:3e:13:c4:38:c2:a4:8e:cc:3c:0a:b6:f5:d8:
                    09:ac:e3:39:f2:da:64:da:52:88:a5:88:53:ee:52:
                    d6:84:ad:b3:fc:42:b0:70:b4:05:52:ea:6a:19:88:
                    c2:07:36:1f:34:72:0b:eb:b8:f7:a5:03:2b:bd:74:
                    ee:d7:ea:ae:eb:e7:95:87:71:d9:52:b5:30:28:fb:
                    7d:d8:62:94:90:fa:30:a8:28:9d:ec:95:2d:15:82:
                    68:85:29:bf:70:86:e4:95:31:2e:0a:b1:99:9f:cc:
                    c0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:46:7C:74:68:BC:0B:9D:4B:31:83:55:A8:5A:A7:15:33:7F:99:5A
            X509v3 Authority Key Identifier:
                keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:07:6e:40:56:d1:52:f5:b2:31:41:9f:41:53:34:40:36:4d:
         d1:fc:45:e1:39:19:96:fd:77:52:7c:dc:82:2c:89:5a:3a:fb:
         ac:69:61:90:20:fc:e1:00:82:35:25:ee:81:a3:0e:cf:19:d5:
         11:9c:61:a3:49:a4:fe:c5:df:fa:d5:11:e3:aa:95:92:0b:ad:
         2e:4c:74:fb:da:7b:0f:53:c1:6a:ee:56:80:44:d5:99:56:a6:
         42:2d:7a:8e:a1:41:04:2a:92:32:1f:c2:a9:19:d6:c1:b0:88:
         ae:f9:fa:62:37:15:e9:1f:23:99:70:fa:98:5e:b0:ec:f0:e5:
         a9:ff:62:cd:fb:5f:91:a3:5d:6a:d7:06:0f:7b:5a:ae:76:fa:
         ad:39:11:ce:f8:a8:d1:58:6b:50:69:35:70:23:9f:2b:e1:49:
         43:e1:4e:7d:f3:60:ee:2b:a1:aa:96:92:77:ed:dd:48:ea:5b:
         e8:9c:ae:a3:a5:50:58:cc:2f:d8:26:b6:dc:ee:9b:fc:7f:3b:
         e2:f4:e7:1d:31:a1:92:15:c0:a4:3b:1c:dd:4f:9a:65:da:e6:
         e1:eb:7b:05:16:46:8b:a8:97:a1:59:f4:7b:fb:93:67:eb:77:
         3e:4e:1f:45:c4:b5:64:ed:17:91:8e:cf:85:51:d5:09:5a:d9:
         ee:d2:07:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:02:32 2026 by rpki-client