Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
File:                     0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json)
Hash identifier:          AgL0tazJwKThnUNsWsaRmFGH5qstobO6wNU/SXogLJo=
Subject key identifier:   43:8B:CE:BD:44:E4:94:62:A3:EE:C3:6C:7E:28:ED:36:76:20:3E:B8
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Certificate issuer:       /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial:       01A0D2005CC9A6F658089DCA6BC0CF1C84C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
Manifest number:          1A6C
Signing time:             Thu 24 Sep 2026 06:00:34 +0000
Manifest this update:     Thu 24 Sep 2026 06:00:34 +0000
Manifest next update:     Fri 25 Sep 2026 06:00:34 +0000
Files and hashes:         1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: fdjPrsWWW9kEQzbLdglRpPgtjviGO1O9LMhjDP/Q+bE=)
                          2: i7JFrF70bzBo-gwwIdRO8VszDSY.roa (hash: tGNZRPLTTkwJbCKJRv1gdNJVG7D13l/23dduFfdxkF8=)
                          3: j-RqQ-Jv6xwxZVAttzs0WSOfmLc.roa (hash: 8oVyr5bD2ep8rJ+/mCDqgEEEeQzSBWCENnyJGHUEE6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:00:5c:c9:a6:f6:58:08:9d:ca:6b:c0:cf:1c:84:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
        Validity
            Not Before: Sep 24 06:00:34 2026 GMT
            Not After : Sep 25 06:00:34 2026 GMT
        Subject: CN=438bcebd44e49462a3eec36c7e28ed3676203eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:47:42:43:3d:c9:c7:5f:46:60:d7:f3:46:2a:
                    92:46:c3:57:1f:1c:be:95:ab:8b:3b:d1:b9:c1:b1:
                    b3:89:dd:82:da:d1:ba:77:df:1c:c7:36:46:77:45:
                    37:30:16:10:36:05:da:af:00:e0:e3:b8:96:4b:da:
                    88:3e:49:bb:09:eb:fe:41:4b:18:ec:8c:11:95:71:
                    ce:f0:11:2f:89:b4:23:fa:df:f4:f9:a8:c2:0c:6b:
                    8f:ef:45:ab:fe:14:3b:08:d2:ad:2f:2d:82:0a:66:
                    e8:3d:fe:4e:71:09:05:1e:b7:7b:09:fa:25:84:3f:
                    18:c8:78:2b:7e:28:9d:7c:64:cd:08:17:40:cc:2b:
                    17:b8:ed:c0:ba:3e:3f:20:b2:64:68:1d:8d:07:6e:
                    51:c6:01:a3:0c:27:12:b3:c9:7e:fd:c4:90:84:29:
                    9d:17:53:1a:51:d0:01:19:8c:e2:43:44:6a:b4:39:
                    a6:e2:e0:51:21:0d:6b:97:f7:6d:e2:3b:20:b0:dd:
                    25:72:a0:aa:08:15:fa:96:f9:24:c9:38:f8:bc:68:
                    bb:15:62:f3:83:eb:b2:98:34:7e:ae:cd:82:8c:66:
                    33:26:39:37:7a:58:03:a9:df:1c:aa:43:81:52:90:
                    07:ac:25:65:04:db:ea:2c:2c:e8:95:7f:8f:fa:8e:
                    d7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8B:CE:BD:44:E4:94:62:A3:EE:C3:6C:7E:28:ED:36:76:20:3E:B8
            X509v3 Authority Key Identifier:
                keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:40:0a:14:ea:ac:14:35:2a:eb:1e:79:d0:f3:a9:d1:fa:ce:
         ad:66:37:5c:e3:0c:f4:2b:8a:af:d8:36:e7:44:ed:2e:f6:a3:
         10:cc:ec:8f:42:e3:11:dc:0a:fe:06:dc:4a:b3:73:63:d6:51:
         c3:95:25:46:d2:dd:20:ed:ac:ef:44:51:c2:e7:52:98:ed:ed:
         d7:16:1b:66:b3:c2:31:9e:71:f3:66:7b:59:27:1f:7b:1f:06:
         1d:be:d3:28:20:88:df:ea:17:f2:b5:0d:2c:7c:15:7f:99:48:
         14:4a:aa:ef:ce:a6:91:e2:6d:ec:ce:50:b0:76:eb:47:ff:35:
         45:11:9a:cd:bd:47:b6:7b:d5:42:ab:4b:0b:66:f7:f6:ca:bd:
         f8:42:c0:9d:75:c6:aa:6c:ed:7d:a3:a8:27:2f:29:4e:1d:3e:
         f8:28:d4:7b:7d:8b:b2:48:5e:5b:b9:c7:b0:e3:98:c7:01:9a:
         fa:17:37:02:5a:20:c8:18:d7:23:4d:d4:a0:3d:dc:f9:bc:70:
         12:20:7e:2c:5a:03:de:c8:80:c0:61:32:2b:bf:aa:e8:d2:fa:
         f1:44:e4:d1:cd:7c:b6:d8:6b:03:15:f4:1b:4c:e1:6d:ee:fd:
         60:da:1a:8f:93:6a:f2:7b:e6:46:41:c8:f3:df:b3:ed:4d:b2:
         cc:9d:40:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:48:47 2026 by rpki-client