Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.mft
File:                     dXkGpvZU8QWwxDaMy_iTlQ5j01g.mft (raw, json)
Hash identifier:          oSKTbZKjlpdzzBA/S79H9FHa2rbI+LhXazqiXy+35wI=
Subject key identifier:   A5:24:BB:96:A2:E1:3B:A8:3B:C9:D3:50:49:55:60:18:7B:28:71:3A
Authority key identifier: 75:79:06:A6:F6:54:F1:05:B0:C4:36:8C:CB:F8:93:95:0E:63:D3:58
Certificate issuer:       /CN=757906a6f654f105b0c4368ccbf893950e63d358
Certificate serial:       01A0DA5F38EFD6793F05016F1D4F8EC8AA3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXkGpvZU8QWwxDaMy_iTlQ5j01g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.mft
Manifest number:          46
Signing time:             Fri 25 Sep 2026 21:01:08 +0000
Manifest this update:     Fri 25 Sep 2026 21:01:08 +0000
Manifest next update:     Sat 26 Sep 2026 21:01:08 +0000
Files and hashes:         1: dXkGpvZU8QWwxDaMy_iTlQ5j01g.crl (hash: bBhBNUFXcGFUQKbYPCfa5hdmR5inYC+IYBGgtv2ASo8=)
                          2: tl0OBmf8MnBulWTdK9V197lEdpc.asa (hash: /XgkkQXTtxStbqhMJsiGKYRiPgEqgz/otau+qpTZwuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dXkGpvZU8QWwxDaMy_iTlQ5j01g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:5f:38:ef:d6:79:3f:05:01:6f:1d:4f:8e:c8:aa:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757906a6f654f105b0c4368ccbf893950e63d358
        Validity
            Not Before: Sep 25 21:01:08 2026 GMT
            Not After : Sep 26 21:01:08 2026 GMT
        Subject: CN=a524bb96a2e13ba83bc9d350495560187b28713a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:12:dc:83:22:22:fc:d9:a4:ee:ca:25:a0:
                    c3:97:15:4e:74:38:8b:37:5b:17:87:ee:35:49:e3:
                    f9:e5:53:69:68:4e:9f:56:20:a8:cf:95:c0:76:aa:
                    2a:7d:6d:ba:38:36:54:74:04:0e:58:9d:0d:b3:56:
                    33:ba:ce:41:05:b8:16:2f:79:46:9b:8b:6f:cd:f0:
                    41:df:22:2d:11:f7:b1:98:f8:cd:e3:ac:7a:df:a8:
                    51:18:78:37:4e:e8:e7:6d:4d:36:68:db:66:0a:d1:
                    02:a2:46:71:15:a8:c1:44:d9:07:b8:e0:50:90:d9:
                    17:64:8e:24:b6:98:47:1f:e5:0f:af:b0:7a:2f:4b:
                    25:f8:eb:c0:71:a2:a1:a3:a4:8e:32:4c:9e:0f:da:
                    92:31:e0:cc:6c:24:c4:45:1c:ee:85:93:14:11:a2:
                    20:79:2d:87:4e:94:95:ea:c6:cc:d3:35:a9:9a:dc:
                    4c:2f:f3:0c:ee:67:06:fc:72:00:a7:d5:a6:76:23:
                    7e:9a:e7:c3:89:de:29:03:8a:25:f9:00:69:d3:29:
                    54:d1:ae:c2:06:0a:56:03:54:38:d8:a8:c2:2e:01:
                    a4:34:60:19:c7:6e:94:c7:c8:ba:cb:72:d8:ba:33:
                    91:ed:ba:77:19:22:ca:ed:48:e7:88:53:55:3f:f9:
                    07:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:24:BB:96:A2:E1:3B:A8:3B:C9:D3:50:49:55:60:18:7B:28:71:3A
            X509v3 Authority Key Identifier:
                keyid:75:79:06:A6:F6:54:F1:05:B0:C4:36:8C:CB:F8:93:95:0E:63:D3:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkGpvZU8QWwxDaMy_iTlQ5j01g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6a:ae:91:ba:4d:2d:1c:a4:c8:df:71:1e:e6:3a:18:75:66:
         7a:36:33:73:8b:79:48:dd:18:1a:39:f8:32:c1:e4:18:6c:5d:
         40:fa:b3:a1:c7:45:22:2d:64:d5:82:6a:36:57:95:c7:df:5d:
         a9:83:ff:e0:0d:fe:b4:f8:4a:dc:15:29:2f:c5:44:f8:10:f2:
         8c:fc:e6:ea:fe:de:06:56:1e:43:43:93:93:c4:21:8f:7c:94:
         a3:d2:6f:a2:89:3b:03:a6:7d:19:b2:b5:05:85:71:b7:80:61:
         37:f2:5a:6f:34:58:ec:a5:df:ca:ec:31:2d:d5:86:c6:3d:84:
         ff:2b:fb:d2:a2:e3:22:ba:a5:26:e3:98:c0:1c:c3:c2:99:6e:
         ce:dd:33:09:4a:e2:9d:4a:c1:c4:83:e7:93:16:89:b7:ee:dc:
         5f:75:42:50:89:3f:5b:91:5a:95:03:18:e3:ae:3c:80:72:06:
         e4:4d:e8:3b:58:a4:63:64:f4:c6:9b:54:c9:de:3e:13:97:d4:
         d7:b7:cf:cb:9e:b4:66:34:69:51:64:3a:77:34:5a:bb:a6:ce:
         98:10:9a:b7:9a:f9:2b:e8:da:4d:c1:5c:48:89:4c:83:f5:83:
         3e:45:e1:b9:5e:dc:e8:82:05:a8:30:da:7d:f1:05:73:35:40:
         f3:50:5e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:48:11 2026 by rpki-client