Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
File:                     B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft (raw, json)
Hash identifier:          nx6cvbDW4VGQgg7v9vl9T0jwvZxBvYiLik65VanxEkk=
Subject key identifier:   AC:50:0D:7A:76:0D:EB:AA:E8:6E:FE:FE:0F:72:AC:01:42:F2:60:25
Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
Certificate issuer:       /CN=077946f04742c66279acd322009be15e3d588a5a
Certificate serial:       01A0DCF2C5ACCC07410B24E6BA2DC5FA0959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
Manifest number:          1A74
Signing time:             Sat 26 Sep 2026 09:01:32 +0000
Manifest this update:     Sat 26 Sep 2026 09:01:32 +0000
Manifest next update:     Sun 27 Sep 2026 09:01:32 +0000
Files and hashes:         1: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl (hash: IcGoPaKccRpRz5E86wMHDcGWjJjKuDa2Leo2ocLVbT0=)
                          2: O4J-NYIe9H0u52beSrp6KYfxSyM.roa (hash: 9cGF5R/YNUjncOYY/j5mBT3HsIQEUCIbaqGilj06Z9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:f2:c5:ac:cc:07:41:0b:24:e6:ba:2d:c5:fa:09:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077946f04742c66279acd322009be15e3d588a5a
        Validity
            Not Before: Sep 26 09:01:32 2026 GMT
            Not After : Sep 27 09:01:32 2026 GMT
        Subject: CN=ac500d7a760debaae86efefe0f72ac0142f26025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fe:e1:2e:3a:53:12:4e:08:77:20:e4:a8:c2:
                    e7:55:cb:28:bb:22:23:c9:20:eb:72:32:2e:e6:d3:
                    87:a2:5f:2c:8b:f9:5e:da:80:b1:f2:e1:50:c8:78:
                    ea:77:b2:03:2f:23:fb:3a:df:27:3b:27:6f:3d:5a:
                    ea:70:7b:02:1d:c9:f7:7e:ea:da:ce:7a:89:32:3e:
                    53:7a:ab:b8:37:f7:5e:3a:44:c0:92:8e:00:b0:5b:
                    ba:ee:46:47:33:bd:77:da:31:a5:08:76:cd:e5:a6:
                    90:2a:7c:fd:b7:54:f3:c4:ca:f0:ab:b7:81:5d:c1:
                    15:c4:c5:f4:f7:b2:69:10:9b:f5:76:57:76:d7:8f:
                    19:f3:c9:02:86:84:cd:79:e8:e0:33:15:ab:e8:a4:
                    80:13:f2:ff:af:50:a2:48:13:80:26:0c:50:97:23:
                    60:df:0d:d2:ee:c1:78:f4:2f:e3:78:81:1d:15:4e:
                    0a:cf:71:42:f6:7c:6d:62:e7:cc:fa:6b:6b:c7:b9:
                    eb:b0:1b:8e:4f:f4:bf:d9:f2:f1:3d:67:81:b3:07:
                    ae:f3:bf:66:55:c3:11:fc:7d:e4:44:1a:01:97:4b:
                    62:50:14:dc:86:b0:7b:af:aa:c7:a1:40:fa:71:4c:
                    9d:52:45:c9:01:c3:63:67:6f:8c:a0:21:63:b2:4a:
                    22:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:50:0D:7A:76:0D:EB:AA:E8:6E:FE:FE:0F:72:AC:01:42:F2:60:25
            X509v3 Authority Key Identifier:
                keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:95:14:5d:c4:c7:44:be:40:3f:27:8a:55:27:0d:fa:d6:3f:
         31:1e:19:00:e0:71:9a:55:77:b7:db:85:df:bd:2b:8a:23:bf:
         ea:fa:18:e6:33:e6:4b:d6:13:9c:a8:e9:ff:7f:91:2c:1c:56:
         04:d6:be:c7:05:cf:f1:e9:59:84:cd:18:93:11:bc:ee:06:f5:
         37:c6:a3:5c:e8:c2:be:b9:7b:99:cc:a5:a7:0c:ed:2f:51:40:
         46:2f:c3:31:05:76:12:9a:6b:83:91:fb:53:ae:a3:1d:ca:42:
         01:c8:2f:ee:43:4d:04:bd:c7:e1:4f:e0:6e:63:6d:6c:60:a7:
         ed:93:00:dc:a6:d3:bc:9f:6b:ac:01:55:17:bf:37:a4:66:20:
         d5:8b:63:86:81:a7:5b:38:dd:4a:07:e7:9c:b3:ac:8d:13:ec:
         d8:dd:3f:0a:ac:c5:1f:54:05:ba:d3:37:fa:53:4e:3d:15:87:
         b8:55:78:d0:ba:82:01:f9:36:8e:36:51:f8:44:c8:58:75:31:
         17:a1:97:f2:30:ba:83:53:a7:2f:4b:a0:84:e2:5c:66:d1:34:
         b5:34:02:53:2d:f4:eb:15:e3:19:fa:00:f5:93:19:69:ec:ad:
         46:a0:01:25:27:6e:96:34:04:02:92:db:04:f4:3a:b0:a8:35:
         58:41:73:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:31:48 2026 by rpki-client