Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
File:                     C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json)
Hash identifier:          9YAGz+wYOcMwxnKkYCcR9623qeedVUpLeTo6Ks4iNxk=
Subject key identifier:   2E:E6:0B:58:7A:53:79:D6:A1:B6:8E:89:82:D5:6C:C8:97:00:5B:A0
Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
Certificate issuer:       /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Certificate serial:       01A0FFB51336A189FAC5729D3769B401B25D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
Manifest number:          055F
Signing time:             Sat 03 Oct 2026 03:00:52 +0000
Manifest this update:     Sat 03 Oct 2026 03:00:52 +0000
Manifest next update:     Sun 04 Oct 2026 03:00:52 +0000
Files and hashes:         1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: M8ui0/IGtVHY1pBh//aLjHb63ftMqnGWAS9chgTu9bU=)
                          2: GTbIIUIo-dUPXDDNc0IDT6FB8t4.roa (hash: 8J7E94r3VGtcxGoE3/Ht7FS8OoqmAYFunNkzFd6kzqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ff:b5:13:36:a1:89:fa:c5:72:9d:37:69:b4:01:b2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
        Validity
            Not Before: Oct  3 03:00:52 2026 GMT
            Not After : Oct  4 03:00:52 2026 GMT
        Subject: CN=2ee60b587a5379d6a1b68e8982d56cc897005ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:62:3d:92:fa:c8:30:4c:1e:b1:4e:89:33:ba:
                    7e:15:e0:e8:61:7b:54:8d:e6:27:1b:f7:43:fb:45:
                    3d:a6:c0:84:7e:73:df:6a:ca:d4:5c:5f:e0:79:fc:
                    9a:3c:d5:28:4c:2c:0a:7e:d5:c0:d1:4b:63:62:e1:
                    7d:4e:ad:15:e4:dc:21:f7:24:e0:e3:73:eb:96:c7:
                    67:75:45:63:b2:25:f1:36:3c:ed:bb:0c:4d:11:28:
                    72:36:cb:d7:0a:aa:cc:7d:33:6b:46:88:b9:97:b8:
                    c6:37:13:e2:4c:df:94:6d:ff:1f:6e:32:d9:a4:0a:
                    60:54:03:fa:03:6f:56:18:74:6c:05:af:f3:65:be:
                    56:dd:b9:e8:ca:18:c0:c1:e0:8c:97:98:f6:86:26:
                    64:24:4d:13:2a:d1:5d:d9:31:59:5d:c9:ad:7c:2c:
                    36:5c:c9:f8:0e:8d:cb:0a:6b:66:5e:5c:38:05:f9:
                    e8:df:16:5e:0e:c6:42:43:43:a7:99:e7:99:d7:cd:
                    c2:ea:ab:0d:f8:1f:cc:99:f7:b8:a6:08:f7:89:d1:
                    b8:7b:9c:2e:55:3c:b1:c7:e5:0b:4a:f5:96:28:c1:
                    7c:d9:e2:d7:dc:bc:23:19:97:c5:dd:9b:57:5d:3a:
                    2b:b1:5a:0c:02:2a:c1:e1:a0:ba:b8:80:b5:39:51:
                    aa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E6:0B:58:7A:53:79:D6:A1:B6:8E:89:82:D5:6C:C8:97:00:5B:A0
            X509v3 Authority Key Identifier:
                keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b0:c7:75:06:aa:5f:c7:6c:90:f7:42:12:3f:a9:86:c6:c3:
         43:02:63:91:64:9d:fc:de:53:d5:42:0c:06:e1:ae:25:9d:dd:
         a8:d6:08:13:00:46:3b:4b:56:57:c0:1c:85:22:95:05:19:73:
         e0:a9:f8:a9:05:39:2b:56:84:94:d0:2f:79:1a:a9:9c:5d:e1:
         5d:0f:d5:b9:95:bc:b5:b0:fa:34:93:5b:47:fa:d7:f6:8d:0b:
         30:5f:ee:e0:12:b1:ff:0f:d4:0e:2b:32:e9:f7:ef:d2:91:be:
         df:73:4d:19:30:99:36:0a:00:c1:31:da:bd:48:97:e9:44:1b:
         c7:be:77:2e:ea:cc:1b:a1:e3:44:96:23:e5:48:9a:f2:1f:c6:
         94:60:92:fb:33:56:27:92:cb:fa:99:c7:fb:9c:15:d4:33:1c:
         66:64:71:3f:25:ff:03:a1:a8:91:ee:21:62:60:f8:20:e0:e5:
         4e:7b:dc:1d:51:4a:3f:75:95:a6:75:95:e3:69:5f:df:ee:a1:
         1b:ef:f6:9a:6b:20:16:4f:ee:1f:3d:be:d7:8b:83:97:bf:26:
         5e:5d:ad:41:7b:7e:bb:dc:4e:68:fe:de:8f:23:0c:b4:ab:5d:
         6e:3f:05:60:1e:11:9d:ca:00:0b:3b:55:0b:13:76:f7:89:88:
         65:81:2b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:13:01 2026 by rpki-client