Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
File:                     96pRbAbRINN25XURMTT0T_Yl2Oc.mft (raw, json)
Hash identifier:          252oAjv5KW/HJv0OWwspl1Mim9Kd6sCSwpVTbJJFFuM=
Subject key identifier:   62:70:A4:0C:8D:98:45:3A:F9:F3:4A:17:2C:1B:48:F1:63:C1:35:C8
Authority key identifier: F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
Certificate issuer:       /CN=f7aa516c06d120d376e575113134f44ff625d8e7
Certificate serial:       01A10B822DC0667B16ABDFE67712FFC6BCB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
Manifest number:          0508
Signing time:             Mon 05 Oct 2026 10:00:43 +0000
Manifest this update:     Mon 05 Oct 2026 10:00:43 +0000
Manifest next update:     Tue 06 Oct 2026 10:00:43 +0000
Files and hashes:         1: 96pRbAbRINN25XURMTT0T_Yl2Oc.crl (hash: P6qRLtqROC7+kCqVTY0JNT3+mbFlx9s5kZKvuPyuClM=)
                          2: ej84eEjBZh5_TuoVktQ40a1gkgU.asa (hash: MHSI1jdl5w4t+h/f8ee1s5/oMRUiSdGHj/rdZ+jynew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 08:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0b:82:2d:c0:66:7b:16:ab:df:e6:77:12:ff:c6:bc:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa516c06d120d376e575113134f44ff625d8e7
        Validity
            Not Before: Oct  5 10:00:43 2026 GMT
            Not After : Oct  6 10:00:43 2026 GMT
        Subject: CN=6270a40c8d98453af9f34a172c1b48f163c135c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:30:30:b3:f1:93:04:72:14:cc:e1:23:ce:
                    78:57:63:ad:98:6b:5c:50:49:93:3b:e0:4c:66:aa:
                    f2:61:b6:69:9b:ac:65:fa:e3:0d:e6:46:43:70:33:
                    de:32:78:04:81:48:1d:ec:9d:c5:56:79:30:8f:4b:
                    4c:2a:27:24:c2:d0:4b:14:f0:de:99:dd:e1:c3:b2:
                    5a:22:12:ce:ad:fe:f1:1c:4d:17:53:64:76:cd:27:
                    c9:73:0a:38:5b:95:da:3f:cb:6c:93:c7:da:2c:d5:
                    73:f9:d7:21:ac:c3:6b:a4:05:23:aa:6e:9f:58:a5:
                    a6:1a:ca:99:f1:3b:40:be:0f:36:fd:ac:1b:6d:0f:
                    5b:65:a7:38:9f:5a:26:97:d1:44:1d:37:2b:f9:0e:
                    21:08:62:25:38:88:ba:88:e1:72:b3:32:1f:1b:a0:
                    f1:5d:e3:23:53:27:a8:85:0c:59:5f:1c:b6:89:b6:
                    f7:ce:ce:ab:af:7d:9f:29:29:54:bb:f5:77:3a:b5:
                    c3:86:93:6c:90:ab:2f:87:08:c9:b0:c9:23:91:d9:
                    ef:20:9c:ac:ec:74:67:9d:3c:0b:d2:bc:9e:55:70:
                    69:30:b3:16:3f:71:fb:4a:7c:10:92:5d:63:cf:ab:
                    53:46:0b:db:fb:ab:3a:1b:5b:e3:5c:63:45:02:14:
                    bb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:70:A4:0C:8D:98:45:3A:F9:F3:4A:17:2C:1B:48:F1:63:C1:35:C8
            X509v3 Authority Key Identifier:
                keyid:F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:68:2c:95:2c:c5:63:24:df:1c:b4:d2:b0:51:96:fd:e6:ff:
         7b:3c:de:64:c8:be:3e:50:5e:e8:22:27:d4:5c:ef:ad:6f:5f:
         f1:74:df:1d:3f:9d:50:c2:1a:25:34:63:d6:fa:a7:a9:a1:f2:
         fb:bb:07:be:d2:9f:36:61:7b:ec:4d:5a:53:74:50:82:92:52:
         a5:db:06:d0:ae:47:7d:78:ec:bb:5d:e1:dd:0b:ad:0c:7d:b4:
         cd:2f:0e:12:44:95:a3:89:50:21:e1:eb:41:30:0d:42:2f:9c:
         58:25:0a:74:2e:fc:9f:57:b8:e8:30:07:c9:03:6b:b5:a7:0c:
         ed:54:bd:74:1c:de:b8:b3:28:e6:0a:0a:32:f7:0c:d4:77:db:
         ef:6e:fc:45:3b:5d:01:d9:0c:6b:c4:5a:96:88:47:86:54:bd:
         3e:bb:d6:b0:46:3c:f1:ba:88:89:13:e6:7a:2f:a3:5d:99:7f:
         68:88:40:01:d6:74:b0:0c:c2:f0:18:7e:b0:ff:47:f2:88:a8:
         dd:0b:2a:18:49:0b:62:a9:ba:92:d8:02:88:b1:a7:30:5e:c9:
         51:73:98:d0:74:28:fe:4e:1e:76:08:65:ba:28:12:65:3d:aa:
         53:92:d3:cd:23:60:ab:fc:f3:64:86:18:d0:9c:fe:a5:92:74:
         d8:bb:d8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:41:37 2026 by rpki-client