Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
File:                     33SEs_Vo6k6qe_DLfIP172Y-sXA.mft (raw, json)
Hash identifier:          MEa2Xg5Fyj7FMMTZtnwnogsZ/XEtDjNpY1ySvY/C8s0=
Subject key identifier:   28:DE:E4:38:CC:DD:25:73:2A:D3:34:57:6E:A4:61:5C:E7:54:83:CD
Authority key identifier: DF:74:84:B3:F5:68:EA:4E:AA:7B:F0:CB:7C:83:F5:EF:66:3E:B1:70
Certificate issuer:       /CN=df7484b3f568ea4eaa7bf0cb7c83f5ef663eb170
Certificate serial:       01A0CE5B0776F08AF9F6138DE37E04035668
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
Manifest number:          7F
Signing time:             Wed 23 Sep 2026 13:01:07 +0000
Manifest this update:     Wed 23 Sep 2026 13:01:07 +0000
Manifest next update:     Thu 24 Sep 2026 13:01:07 +0000
Files and hashes:         1: 33SEs_Vo6k6qe_DLfIP172Y-sXA.crl (hash: IHED3RBYPkEh0G00s2IqSFTCKl6kuaYyKG0hNIQRi5w=)
                          2: sqHFwo0XB24O-EyLxoiNi9bPLc8.roa (hash: ig6fBlUC0evhdNCNW32iCNTFqWb3AD0R7kCT6EGKt9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5b:07:76:f0:8a:f9:f6:13:8d:e3:7e:04:03:56:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7484b3f568ea4eaa7bf0cb7c83f5ef663eb170
        Validity
            Not Before: Sep 23 13:01:07 2026 GMT
            Not After : Sep 24 13:01:07 2026 GMT
        Subject: CN=28dee438ccdd25732ad334576ea4615ce75483cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f3:5e:36:84:dd:bb:58:d2:73:b7:90:d5:7c:
                    84:41:ee:6c:f6:ac:1f:ea:53:1f:c7:4b:d5:48:f5:
                    22:e6:82:d0:3f:bc:a1:db:30:f5:49:ba:bd:14:e5:
                    93:82:cd:b2:3a:cb:72:2b:f7:00:ce:89:3f:ee:24:
                    64:e6:67:62:7c:1e:e0:fd:e9:6b:bb:92:3a:f1:19:
                    54:6f:86:ac:09:ad:43:4e:10:8b:00:8d:64:a2:08:
                    f5:8d:d0:db:0f:9e:4e:0d:d1:53:d6:e4:8b:5e:a0:
                    5a:3a:7a:8e:8b:34:64:43:a2:22:2b:7a:eb:6e:24:
                    c5:28:52:1f:ee:53:a9:ac:c6:0a:ba:b6:70:3f:da:
                    8e:c0:d7:fd:15:9c:c0:d8:bc:74:0e:b2:9f:b4:70:
                    c5:77:95:cf:3b:48:09:e1:af:e8:cc:92:39:52:61:
                    b6:0f:72:e7:76:5e:2b:82:70:4a:03:f8:0d:35:aa:
                    cf:3d:16:46:d3:0a:81:aa:77:11:1c:88:47:4d:44:
                    3b:62:ce:98:cb:b4:16:8e:c6:f8:e5:28:fa:07:2d:
                    97:06:9e:ce:0d:19:9b:6c:00:42:e0:65:65:9d:ca:
                    64:ae:fe:c1:c9:d8:24:6f:f5:37:72:54:1b:4e:f2:
                    6c:ae:d3:15:1e:df:be:a2:a3:38:78:e7:be:2b:e7:
                    7d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DE:E4:38:CC:DD:25:73:2A:D3:34:57:6E:A4:61:5C:E7:54:83:CD
            X509v3 Authority Key Identifier:
                keyid:DF:74:84:B3:F5:68:EA:4E:AA:7B:F0:CB:7C:83:F5:EF:66:3E:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:2c:a6:e0:ca:17:c1:cf:e0:d2:d1:8a:a2:ab:21:ef:9e:bb:
         3a:05:6f:3d:86:25:86:a8:4e:3d:17:e1:66:f5:cd:a2:32:b1:
         d0:60:ff:37:a7:eb:65:dc:a3:ea:19:ce:0d:7d:14:65:26:3e:
         95:24:dd:e9:28:34:3f:d0:00:b5:1a:20:8c:3e:66:ac:bf:dc:
         93:4c:b9:6d:85:a2:98:31:b9:1d:79:8d:3b:29:01:78:c2:56:
         6f:ff:3f:64:82:fa:af:6d:5a:8c:e7:65:9f:8b:0e:4a:5a:d5:
         70:53:c8:22:8f:f3:fd:4b:8c:a1:be:2b:5f:27:62:dd:23:6d:
         a7:94:5b:0a:1b:37:1d:4e:57:3e:0b:eb:cb:7f:43:8b:ca:b4:
         aa:78:4f:1a:dc:ba:e2:54:da:ed:7b:e3:cf:7e:4a:dc:f6:ee:
         27:03:3b:54:1e:76:5b:a0:21:cc:0c:cc:ba:46:5f:84:44:62:
         d4:d5:03:04:14:b6:af:d8:38:e3:4c:a3:89:c3:fa:ea:bf:74:
         a9:a9:d3:39:8f:0e:e3:1c:5f:63:06:7d:e1:5e:78:97:a9:93:
         4a:9f:8a:de:4a:3e:09:90:45:62:46:f5:ec:5f:9d:a4:f5:a5:
         4e:a7:27:5a:f8:1d:d5:03:0e:70:d0:63:02:0c:88:5e:3a:77:
         4d:0b:4b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:50 2026 by rpki-client