Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft
File:                     dRWCm38DQRu-IbGiAEmM7r9cBsA.mft (raw, json)
Hash identifier:          JDP/9aHlfy0rU8gZO397fUP23ypdXxw8MnS7LWKRyqU=
Subject key identifier:   99:67:EE:FB:6A:DA:F9:FA:3C:AE:9A:DE:B7:90:88:83:6B:17:BE:5F
Authority key identifier: 75:15:82:9B:7F:03:41:1B:BE:21:B1:A2:00:49:8C:EE:BF:5C:06:C0
Certificate issuer:       /CN=7515829b7f03411bbe21b1a200498ceebf5c06c0
Certificate serial:       01A0E8535B6C29A9FB116862E5F542DBCCB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft
Manifest number:          02F0
Signing time:             Mon 28 Sep 2026 14:02:52 +0000
Manifest this update:     Mon 28 Sep 2026 14:02:52 +0000
Manifest next update:     Tue 29 Sep 2026 14:02:52 +0000
Files and hashes:         1: dRWCm38DQRu-IbGiAEmM7r9cBsA.crl (hash: UJ74qbIWsrea8Jqcu9pS8UVcqTyqm9jiVdxW3dHfCN4=)
                          2: xtgzbsY4RQgAHqGjGSJ0iMYk8Y4.roa (hash: z72ZDa/NMuWUT8gblQL7edLWi92ZNQzGqAeFXRe+TZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:53:5b:6c:29:a9:fb:11:68:62:e5:f5:42:db:cc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7515829b7f03411bbe21b1a200498ceebf5c06c0
        Validity
            Not Before: Sep 28 14:02:52 2026 GMT
            Not After : Sep 29 14:02:52 2026 GMT
        Subject: CN=9967eefb6adaf9fa3cae9adeb79088836b17be5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6b:18:37:d0:ed:9a:d9:3f:3a:8f:2d:b0:d6:
                    ef:84:53:8d:10:49:bc:72:fe:7f:93:3d:0c:14:df:
                    53:d3:ba:0d:a5:ce:26:c0:d4:59:41:f9:55:ea:48:
                    b6:1b:9d:50:5c:7a:f0:f6:91:e7:a9:e6:0b:70:ed:
                    cb:c5:59:95:8c:7e:1b:a0:b4:e6:17:c5:83:6b:02:
                    3c:4b:7a:c2:4d:a3:c6:3d:96:23:5a:41:6d:e0:1f:
                    66:09:77:63:08:50:43:83:d2:1c:91:30:a9:68:27:
                    2d:87:37:44:78:ef:1f:c2:61:82:16:f5:b0:33:90:
                    82:2d:e3:62:00:bd:b0:2c:6b:22:f6:2f:79:0a:b4:
                    4d:3b:39:97:1e:9a:c8:d9:a7:86:d9:96:45:8f:35:
                    e8:a3:31:15:e8:c9:03:a9:7a:40:4b:91:b3:79:e1:
                    3a:84:db:cc:a7:f0:d8:b2:26:b8:21:08:0a:bf:e6:
                    92:fe:ba:c8:a6:1c:c1:f2:20:3c:af:5f:b9:90:5c:
                    d8:02:c8:f3:57:f0:79:1e:a1:f9:7c:ea:57:e4:7b:
                    4e:f2:38:de:2f:62:a8:63:a4:a0:6c:07:c2:e2:7c:
                    d4:e6:cb:60:81:16:59:8a:71:52:df:44:53:07:50:
                    4f:50:7a:38:95:c8:fc:4e:77:75:ed:0d:39:5e:9b:
                    48:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:67:EE:FB:6A:DA:F9:FA:3C:AE:9A:DE:B7:90:88:83:6B:17:BE:5F
            X509v3 Authority Key Identifier:
                keyid:75:15:82:9B:7F:03:41:1B:BE:21:B1:A2:00:49:8C:EE:BF:5C:06:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:83:68:00:79:71:fe:df:fe:67:87:b3:4c:14:01:ca:b7:56:
         3e:67:af:ce:1a:8e:d1:1f:e4:b3:f0:59:ab:97:a2:0c:9f:98:
         c3:a9:cc:11:ae:51:3b:3f:48:38:7b:f7:8a:17:ed:fd:8b:c0:
         57:69:16:84:bb:c3:5a:1d:28:10:3e:73:e4:7d:db:56:c2:44:
         39:47:0f:ab:46:b7:c5:e9:c8:84:fb:b4:62:82:ce:a8:e1:7b:
         26:44:79:29:ce:dd:00:a7:56:35:10:a9:61:81:01:86:f4:80:
         1e:f5:27:6f:a6:f4:c8:e1:59:8f:d4:e0:f2:ae:58:8f:5a:98:
         d0:f7:36:30:42:a2:04:f2:78:2c:f1:ba:10:97:5e:c4:73:24:
         7e:d4:0e:a0:dc:2c:bb:65:ff:7c:fb:67:42:9b:1c:a6:56:2a:
         cb:66:df:9b:42:d3:e2:a4:67:e3:a8:01:63:69:25:c1:22:d3:
         08:11:7e:59:2c:26:09:2e:7b:7c:20:73:8a:dc:7f:57:8e:96:
         e7:ec:c1:e5:fd:6a:53:22:77:f6:28:41:87:dc:88:de:85:52:
         c3:21:ce:4f:47:77:c7:7e:72:95:37:43:00:81:40:4d:84:50:
         41:b8:dc:cf:08:be:91:0a:72:9c:ae:ed:ac:7c:39:49:e0:31:
         9c:49:e4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:33:03 2026 by rpki-client