Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File:                     DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier:          KVgOdZAWAa55LS08uTbLW1Fkgpg3d3huqc9ZBj/C8uY=
Subject key identifier:   9F:51:98:CB:E7:6E:9F:93:0E:BF:F8:24:F4:F3:06:9D:72:9A:EF:50
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer:       /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial:       01A0DB03DB80AAAF4BCE9F83F0880F646708
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number:          1788
Signing time:             Sat 26 Sep 2026 00:00:57 +0000
Manifest this update:     Sat 26 Sep 2026 00:00:57 +0000
Manifest next update:     Sun 27 Sep 2026 00:00:57 +0000
Files and hashes:         1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: xa7yzjacstvD80QBr/MpEZuWvXS91LHqlE/zRVRxeJI=)
                          2: I6B11vAuliEHXkaj56Cx_nMNtzM.roa (hash: zwWKRvjHFcgx4AfaFVQj5qA+i2zTNLuDDbo0ohM5s9o=)
                          3: aFA8TdWBrL0sKL1WgCpchD-t0-E.roa (hash: yrp0PGLJIdfIoFJTh2LRDBtU78Dj8mCkVBqMsQkNwT0=)
                          4: zbElgd4kOsYPerCSi4Ys9upL4XA.roa (hash: i1lrAyqBTfs/DpcBlpdmtWLhCahW3WY5O3LNfMBqc9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:03:db:80:aa:af:4b:ce:9f:83:f0:88:0f:64:67:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
        Validity
            Not Before: Sep 26 00:00:57 2026 GMT
            Not After : Sep 27 00:00:57 2026 GMT
        Subject: CN=9f5198cbe76e9f930ebff824f4f3069d729aef50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c2:6e:c9:c7:78:e5:e8:63:81:43:99:4c:c9:
                    ef:52:5a:0b:f9:19:8a:62:ca:95:c0:e8:b2:52:4b:
                    79:bb:bb:8b:c8:03:86:1f:bf:d6:8b:00:25:cd:fb:
                    91:d4:fc:ce:0e:78:2a:59:f1:6f:47:45:ba:2e:77:
                    4a:ed:0c:f1:1d:4f:ae:4b:26:4c:15:8b:59:9d:57:
                    b2:1a:90:86:00:95:63:cc:af:38:54:f4:8a:59:b7:
                    eb:58:dd:f4:6c:ac:54:be:f0:e6:0f:22:77:aa:08:
                    5e:b2:41:59:60:b5:de:c7:20:d0:26:0f:6b:da:62:
                    30:5e:f3:d5:69:f2:91:c3:ce:f7:0a:27:a7:9b:cf:
                    ae:d3:f4:30:c0:47:ec:b2:af:88:b0:cb:d8:5f:be:
                    54:e0:29:54:31:a2:f5:ba:98:5d:40:e7:e9:ed:7c:
                    11:1a:cb:d6:4b:e4:12:60:c6:79:fd:a0:9f:6a:81:
                    8f:ac:e7:ab:b6:6e:9e:b2:69:b4:08:3e:c5:b2:9b:
                    4a:ca:55:1c:65:11:71:a6:da:98:9a:ad:9b:f0:d3:
                    b4:41:6e:8f:70:b5:81:84:56:31:e7:81:25:e5:f9:
                    bf:8b:87:9d:40:b5:59:aa:c3:f9:fe:c9:f0:62:b4:
                    0d:d3:47:b0:fa:66:dc:57:0b:5f:c9:88:59:97:0f:
                    59:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:51:98:CB:E7:6E:9F:93:0E:BF:F8:24:F4:F3:06:9D:72:9A:EF:50
            X509v3 Authority Key Identifier:
                keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:71:77:e1:55:f8:ec:68:5b:e5:f6:0c:51:50:92:04:f0:0f:
         99:1e:dc:e4:f8:0e:d0:e5:cf:50:10:5e:53:b0:68:93:da:35:
         40:cf:e6:9d:a3:e9:4a:50:56:0d:ea:c3:2a:74:3b:a0:87:71:
         a8:32:c2:fb:d7:54:90:6c:92:e0:88:94:3b:70:92:17:a8:9c:
         e0:26:a0:9e:8d:c7:5f:2e:3c:b8:ae:cb:1f:16:55:d3:c2:0b:
         74:af:16:4b:c8:44:a2:39:35:df:e1:58:0d:9f:a8:b8:4f:74:
         b5:8d:c5:bb:fc:e5:75:5d:65:d7:79:99:53:05:e9:3a:9b:2f:
         b8:2f:29:0f:77:de:e2:f9:b4:44:6e:40:fc:90:b8:98:a8:cf:
         0a:24:c6:b2:a5:0b:3d:cd:8f:af:80:98:df:b3:80:85:33:ca:
         5a:8d:b5:36:61:13:8c:07:21:59:65:50:e5:15:a0:d9:be:cf:
         83:40:a4:17:c9:8d:9b:78:4c:31:b1:e1:46:29:48:15:7c:38:
         6f:50:d5:08:c3:77:8b:1e:e5:12:fe:3f:c1:9c:cc:84:e4:45:
         0f:c5:93:4b:cd:4e:25:9e:db:bd:94:f7:20:6f:99:f4:65:ce:
         a2:63:a2:a3:f2:0b:fc:05:c9:97:51:4d:f3:c7:0d:f8:dc:24:
         aa:44:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:17:12 2026 by rpki-client