Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
File:                     27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json)
Hash identifier:          jbjNxFVpE88puXdnADtwxnQwGj9N0UGS4gZzQViG4v0=
Subject key identifier:   AA:9E:E7:3F:ED:F4:B2:7B:B3:17:3F:9E:F4:3F:E0:32:F2:36:82:C5
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Certificate issuer:       /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial:       01A0CBFE0F0ABB9FA57DDA540CA384109AC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
Manifest number:          0E63
Signing time:             Wed 23 Sep 2026 02:00:19 +0000
Manifest this update:     Wed 23 Sep 2026 02:00:19 +0000
Manifest next update:     Thu 24 Sep 2026 02:00:19 +0000
Files and hashes:         1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: zCQb8KC+UUCkWN6bGRj9TCetJ/2H/f9fSr3wLZSyvv4=)
                          2: DfHWpmAWUgCCErY8uLt82E-U1FA.roa (hash: +Qi5uESsKdV2qG1rG182kIlHI1TpCDtCPoj/zgTI3/E=)
                          3: GYZtGu5A6w6f_D9QSqwvacnqffU.roa (hash: k+vGwyv3QPG/+s72nT5RSbpgXn+mZD4c8cr8T4ADKms=)
                          4: U98gDyS6dRj9SjIXrnN3pWc2zgE.roa (hash: HsrUh8+O8DlJnCmiqH/w8bVErohPR7VfDdSGvWsJKvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:fe:0f:0a:bb:9f:a5:7d:da:54:0c:a3:84:10:9a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
        Validity
            Not Before: Sep 23 02:00:19 2026 GMT
            Not After : Sep 24 02:00:19 2026 GMT
        Subject: CN=aa9ee73fedf4b27bb3173f9ef43fe032f23682c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ae:47:e6:41:64:ca:2d:a9:eb:b9:35:cc:76:
                    34:51:4b:39:d2:f1:fe:18:8e:c5:14:0c:c5:43:f5:
                    c0:85:1b:17:2e:fb:40:e9:fe:b4:0b:ff:b2:b3:af:
                    38:dc:0c:67:61:eb:20:45:da:87:ae:bd:4a:17:a2:
                    02:e5:a0:9e:3d:c5:34:33:31:49:4e:22:f1:b5:cf:
                    7d:ff:a3:48:34:a5:ad:d0:61:52:fd:c9:ba:d3:7b:
                    48:fb:47:50:19:9b:57:c2:0d:bd:d7:ce:78:ae:f8:
                    19:be:cf:85:c4:31:4a:7e:a6:97:c3:71:26:60:14:
                    69:c6:5c:81:4c:38:35:a6:b2:1f:f1:d4:84:28:23:
                    00:d6:9d:e6:b8:1e:37:e5:82:ef:ef:df:1f:15:7f:
                    de:29:aa:c5:9b:62:ab:db:0b:c6:0a:30:ee:d9:d4:
                    e4:d9:e0:c3:b4:db:f3:49:ac:f2:42:cd:54:c7:40:
                    ad:4f:9c:e9:32:11:64:ac:61:2d:39:e3:c0:92:3f:
                    07:b8:01:f4:48:e0:e3:ce:40:61:de:e1:dd:ab:64:
                    6f:42:31:ca:1a:74:85:aa:b1:30:fd:90:63:25:88:
                    17:a6:55:ee:1d:9e:73:4f:5c:4a:42:45:e7:ed:60:
                    1b:bb:6e:54:80:4f:2e:b7:0f:79:ff:3f:3b:86:d7:
                    12:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9E:E7:3F:ED:F4:B2:7B:B3:17:3F:9E:F4:3F:E0:32:F2:36:82:C5
            X509v3 Authority Key Identifier:
                keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b0:fb:8b:74:0d:27:c0:d8:f4:1f:6e:3c:4b:9a:ee:6e:1d:
         73:f5:5f:17:22:b1:4e:27:df:35:0c:61:0c:15:1c:8d:f0:f6:
         cc:3f:a7:a8:2b:f6:6e:de:cb:da:5a:07:f1:03:f0:a8:ed:6a:
         09:3e:99:ea:b0:59:f4:48:4a:79:81:60:fc:aa:bb:d8:de:a5:
         b3:98:e5:ec:46:e5:47:0d:89:0a:9c:d7:b1:c7:64:84:6f:f4:
         e6:40:34:a6:9d:d4:8a:71:b3:d8:63:f4:76:14:9d:6c:a4:5c:
         e2:ad:9d:91:93:51:a6:65:55:43:1c:57:6e:f2:a4:44:a5:e7:
         11:2a:3b:f4:38:5b:cc:c7:c2:77:c4:3c:4a:92:fd:b8:11:b9:
         a8:ee:c5:a5:ad:7b:d3:fc:49:19:ce:9c:9c:34:93:e4:8b:f5:
         5c:6c:0c:8c:90:24:ba:4e:db:9b:9e:2b:57:f8:af:f9:93:d2:
         5e:f0:0d:7b:73:81:8c:d3:14:e8:9c:02:aa:26:9c:bb:2c:7f:
         1b:51:56:fb:a0:aa:97:89:db:58:07:0a:b1:f7:7b:b3:08:71:
         61:7b:f7:b5:22:52:9c:28:d6:ba:22:dd:1d:65:d4:7d:66:8b:
         3a:1e:67:9c:72:ae:bb:33:17:0f:7c:38:07:78:f0:1d:c3:f1:
         7c:9f:41:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:18:29 2026 by rpki-client