Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File:                     d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier:          Lg7aVr6hd4ULeGEduiTeVYarzT+Hq03AgQ8pjM5jLfk=
Subject key identifier:   55:17:B5:80:1F:58:BD:BC:F8:8B:CA:D6:45:7F:2C:0F:06:E1:1A:51
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer:       /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial:       01A0EE1DACC85EB8909BE4F3D354CE8E30D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number:          0602
Signing time:             Tue 29 Sep 2026 17:01:56 +0000
Manifest this update:     Tue 29 Sep 2026 17:01:56 +0000
Manifest next update:     Wed 30 Sep 2026 17:01:56 +0000
Files and hashes:         1: 3AKV0u3WSxtyrBn5vr3IyCaz8CY.roa (hash: eMq4UCU2DpJceG3vsiv0qnCLBJvV82fA2hJ3CQNxIsw=)
                          2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: S8lfKzMv6TEtpC1wR1v52Qln/S60/DFyjylD5OB1IIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ee:1d:ac:c8:5e:b8:90:9b:e4:f3:d3:54:ce:8e:30:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
        Validity
            Not Before: Sep 29 17:01:56 2026 GMT
            Not After : Sep 30 17:01:56 2026 GMT
        Subject: CN=5517b5801f58bdbcf88bcad6457f2c0f06e11a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:17:f3:a4:40:80:00:46:f6:a9:ba:27:e9:6e:
                    9b:55:73:6b:d5:b1:83:db:c5:5a:60:0e:d8:64:df:
                    74:c1:1a:d9:4f:c5:48:eb:cb:fa:50:99:a3:f0:ec:
                    ba:3c:d0:9e:57:9c:b0:03:aa:01:5e:dc:8b:a1:76:
                    25:d2:9d:b1:21:8c:9b:28:36:58:01:9f:8f:bb:44:
                    b2:60:1e:a1:54:b0:c3:a6:69:ca:d4:59:a2:37:0c:
                    66:5a:98:22:e6:d6:5a:94:4f:84:4b:86:8b:a8:21:
                    b2:23:01:ca:78:6e:f4:2a:1a:45:33:02:3d:28:a8:
                    da:5f:2a:41:1d:10:50:85:c5:cd:01:18:90:dd:35:
                    56:2b:82:f6:5c:de:3d:32:8e:eb:9c:75:60:ae:89:
                    ad:c5:28:06:66:38:2e:ed:ca:e7:64:0b:51:df:a9:
                    a3:ab:72:5c:f5:9e:87:a4:17:95:d5:12:0e:65:08:
                    d5:68:92:5e:1a:bb:fa:6e:4d:80:53:3e:6a:04:4d:
                    49:1c:15:f2:c5:cd:69:39:ad:02:a8:94:42:21:5b:
                    9a:ba:d4:37:ed:e7:00:4b:28:a6:00:89:20:95:fa:
                    ac:46:d3:50:c5:81:3f:d7:22:50:52:5a:ad:e1:ac:
                    ab:4e:db:22:74:ac:4c:84:cb:16:a6:6d:c5:5b:d4:
                    e4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:17:B5:80:1F:58:BD:BC:F8:8B:CA:D6:45:7F:2C:0F:06:E1:1A:51
            X509v3 Authority Key Identifier:
                keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8a:eb:10:39:f1:3f:5e:a2:47:3f:90:49:39:69:23:39:5f:
         55:e8:20:9a:b4:f5:f2:c6:ee:24:d1:58:35:e4:9e:27:ce:1f:
         a7:07:b2:1b:36:77:b2:98:cf:06:20:fb:14:cb:3a:c5:20:69:
         fa:a1:7e:b3:52:48:00:66:af:12:01:a8:0d:a2:d2:a5:95:13:
         f2:86:84:b8:4a:59:b9:c4:66:4b:a9:55:af:07:bd:b0:a2:27:
         52:6d:8a:79:96:b8:89:c2:f4:a7:28:88:f1:b7:47:7c:92:10:
         bc:c2:ab:96:47:e4:4b:f9:31:dd:55:f9:bf:de:18:06:e3:34:
         5b:a0:27:22:66:ce:c3:7e:41:86:8c:d2:f0:76:65:1e:6f:06:
         d3:de:63:e4:a7:34:77:2c:65:2e:13:b5:ea:41:be:ab:0f:dd:
         76:8b:62:bd:67:ed:d8:55:3f:45:5d:a1:eb:8d:a3:43:71:0d:
         46:ee:d7:75:e0:56:eb:f4:ca:6f:82:e9:b1:66:7d:0d:bc:12:
         9f:b5:93:27:98:2c:af:c4:69:48:18:38:84:13:7d:83:c9:da:
         ad:65:2a:52:ef:ad:d3:e6:65:25:e0:22:4d:16:d9:55:c5:ae:
         81:bd:b9:87:dd:21:e9:e3:04:4c:8e:b5:b1:49:2b:e6:b5:26:
         b0:a8:19:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:26:22 2026 by rpki-client