Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
File:                     36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json)
Hash identifier:          sUzFonEawfoOw07a2sZ05jd2nZDAll4zywzqKVRcfYQ=
Subject key identifier:   E8:BA:AB:E7:69:B5:8E:83:01:0F:67:80:AF:EE:93:AA:00:25:7C:8F
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Certificate issuer:       /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial:       01A0DA28ED67FA72B2CC773AA0BCE816C121
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
Manifest number:          1A73
Signing time:             Fri 25 Sep 2026 20:01:50 +0000
Manifest this update:     Fri 25 Sep 2026 20:01:50 +0000
Manifest next update:     Sat 26 Sep 2026 20:01:50 +0000
Files and hashes:         1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: 4yKIbhIylORAudUyQ7QbkS8whxT6MQs2Y7Ivaw8PVNs=)
                          2: _ZC_MGF9yyx42gGb0lgQ-sX228w.roa (hash: bGqRm0SkOPme7T2i93CGaIAZfH+uCY+YSZjEaMa7stY=)
                          3: lpfk7UVcGKZO2jgTSznBpb0u8Pk.roa (hash: DMe8L1nI8dyjjoOJsf6UQZzDm/D+LPuRxMoaepRymzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 20:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:28:ed:67:fa:72:b2:cc:77:3a:a0:bc:e8:16:c1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
        Validity
            Not Before: Sep 25 20:01:50 2026 GMT
            Not After : Sep 26 20:01:50 2026 GMT
        Subject: CN=e8baabe769b58e83010f6780afee93aa00257c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:9f:06:b0:f0:f2:a3:50:d4:d8:ca:8f:7a:
                    b5:8b:9e:e1:69:65:d8:32:d6:33:66:58:44:aa:01:
                    77:78:f7:94:26:0a:c4:2f:57:e5:82:24:2d:da:a3:
                    54:3d:60:46:e7:70:a9:da:2e:81:e4:d0:5a:6d:7e:
                    bb:b6:27:05:6b:c6:00:01:03:19:68:39:e2:9c:17:
                    ef:30:cd:2a:22:a7:0b:e4:b0:69:4f:5b:f6:45:c6:
                    21:1e:a8:bd:a5:92:9a:fe:16:24:5c:0a:c0:cc:70:
                    34:77:3e:af:13:0f:f3:de:1d:e8:a0:3c:f4:e2:b3:
                    90:a7:85:c6:97:fb:de:8b:75:e8:8b:33:9d:e6:ca:
                    44:ae:28:2a:3a:ca:e7:9e:10:c5:a1:3b:13:01:a7:
                    a2:b1:ac:d8:3e:af:38:6b:a7:9d:0e:3c:94:3c:c2:
                    18:0b:43:d9:ec:56:1a:39:dc:89:6b:77:ce:b9:3e:
                    c8:bc:60:4d:0b:2c:45:d4:d5:00:3b:c2:e2:b8:18:
                    a1:47:cc:50:9f:33:f7:6d:03:59:91:6c:46:e6:6e:
                    a8:8b:34:36:9f:46:27:e3:29:68:45:12:7f:96:58:
                    0e:97:fb:f0:72:9f:7a:97:4b:da:b2:ff:71:94:61:
                    c3:02:2f:27:66:9d:c2:f6:97:02:e0:c0:c1:32:3c:
                    e3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BA:AB:E7:69:B5:8E:83:01:0F:67:80:AF:EE:93:AA:00:25:7C:8F
            X509v3 Authority Key Identifier:
                keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:8e:1e:a2:4a:e8:d1:95:c8:cc:16:8b:21:38:4d:30:21:96:
         6e:c3:02:23:86:2a:9c:3d:68:79:ea:49:ba:b0:fc:fc:d1:5f:
         5a:08:f2:36:7d:90:26:f2:6c:be:f4:12:4c:c7:2c:85:e2:dc:
         92:b0:89:3f:77:e3:4d:c1:a9:d9:d1:17:13:53:c8:cd:71:46:
         ba:d0:bc:d1:ad:85:c8:59:53:6a:32:24:a2:9b:c2:e2:a0:68:
         34:ba:8e:39:6b:f6:b3:d4:33:b9:be:02:6b:2d:ef:7f:ed:b2:
         3e:d5:05:cc:66:42:d4:d1:e0:ff:aa:e3:30:d3:76:c5:46:59:
         7b:13:51:b1:51:4a:56:2d:50:41:3b:41:d8:fa:31:8d:1e:e5:
         69:e2:c1:56:f7:d7:71:bb:e5:5a:62:ce:cb:b1:67:dd:b4:24:
         be:88:41:fb:92:1a:3f:12:01:79:dd:33:54:4a:7a:2d:c5:2f:
         b0:15:ad:a2:56:ff:98:f3:e3:98:57:e4:f1:95:ee:0a:2a:d3:
         2c:11:db:3d:65:8b:c2:8d:a6:f7:a3:22:ee:ea:02:38:76:19:
         0a:8b:5c:9d:52:d7:10:cb:73:77:99:18:73:8b:d4:a1:50:f8:
         98:bb:09:ba:a9:77:66:75:33:7a:b3:da:1a:24:c6:e3:46:a8:
         f7:f8:54:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKO1n+nKyzHc6oLzoFsEhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYTY5YzNkOTgzODVkNDE1NDA1ZmM2ZmQzMGE4MDAzNjNj
MDE3YzEwHhcNMjYwOTI1MjAwMTUwWhcNMjYwOTI2MjAwMTUwWjAzMTEwLwYDVQQD
EyhlOGJhYWJlNzY5YjU4ZTgzMDEwZjY3ODBhZmVlOTNhYTAwMjU3YzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvifBrDw8qNQ1NjKj3q1i57haWXY
MtYzZlhEqgF3ePeUJgrEL1flgiQt2qNUPWBG53Cp2i6B5NBabX67ticFa8YAAQMZ
aDninBfvMM0qIqcL5LBpT1v2RcYhHqi9pZKa/hYkXArAzHA0dz6vEw/z3h3ooDz0
4rOQp4XGl/vei3XoizOd5spErigqOsrnnhDFoTsTAaeisazYPq84a6edDjyUPMIY
C0PZ7FYaOdyJa3fOuT7IvGBNCyxF1NUAO8LiuBihR8xQnzP3bQNZkWxG5m6oizQ2
n0Yn4yloRRJ/llgOl/vwcp96l0vasv9xlGHDAi8nZp3C9pcC4MDBMjzjHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOi6q+dptY6DAQ9ngK/uk6oAJXyPMB8GA1UdIwQY
MBaAFN+mnD2YOF1BVAX8b9MKgANjwBfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgt
M2NlZjU2MjVhZWQ2LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgtM2NlZjU2MjVhZWQ2
LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQY4eokro
0ZXIzBaLIThNMCGWbsMCI4YqnD1oeepJurD8/NFfWgjyNn2QJvJsvvQSTMcsheLc
krCJP3fjTcGp2dEXE1PIzXFGutC80a2FyFlTajIkopvC4qBoNLqOOWv2s9Qzub4C
ay3vf+2yPtUFzGZC1NHg/6rjMNN2xUZZexNRsVFKVi1QQTtB2PoxjR7laeLBVvfX
cbvlWmLOy7Fn3bQkvohB+5IaPxIBed0zVEp6LcUvsBWtolb/mPPjmFfk8ZXuCirT
LBHbPWWLwo2m96Mi7uoCOHYZCotcnVLXEMtzd5kYc4vUoVD4mLsJuql3ZnUzerPa
GiTG40ao9/hU2Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:41:31 2026 by rpki-client