Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
File:                     59nPsHjtpYFvyAnpjCXLcZY-dbc.mft (raw, json)
Hash identifier:          rmox32UiLQQGZEag8HDK6R2X3yRZboM+uWhrY7hEmXQ=
Subject key identifier:   74:18:EF:6B:1A:D1:38:02:2A:79:87:29:AC:4F:11:85:C2:1F:A8:CE
Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Certificate issuer:       /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Certificate serial:       01A0D048CA754308813CF256112741AF2251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
Manifest number:          158A
Signing time:             Wed 23 Sep 2026 22:00:26 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:26 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:26 +0000
Files and hashes:         1: 59nPsHjtpYFvyAnpjCXLcZY-dbc.crl (hash: rvUbO2K+kLotOM3MsWPPRjY2yaLOMWNVYR54KqjKfzo=)
                          2: NuJEHjDX6DrNz16mjk8EVqK6rfk.roa (hash: Ys6DWelm4t8OA8iEU1qUmznaHoT0ZkwCkm2E4AX00hk=)
                          3: SZX71ph8QaHTDKUZ_awWsJ3Rop8.roa (hash: Ezxrik8lWqt6m7GXayjzec/qOLlnThrVGFvxsgwlbj0=)
                          4: fcB7v88dNhWSMeT9xkM_6tDlgB4.roa (hash: YUROPGa3vWTnRdc4QLIk9Iod/RP5OfyerhymP88IP4Q=)
                          5: gwoEbA-s4PqsDQjmI3X53FaRSJ0.roa (hash: avXcM/pU53LLvoxo3B9yOyXnFdyqGLBv2h2RqdKqi6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:48:ca:75:43:08:81:3c:f2:56:11:27:41:af:22:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
        Validity
            Not Before: Sep 23 22:00:26 2026 GMT
            Not After : Sep 24 22:00:26 2026 GMT
        Subject: CN=7418ef6b1ad138022a798729ac4f1185c21fa8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:59:ba:10:26:51:ef:53:88:f9:00:6a:62:19:
                    2e:99:bb:94:0a:a0:e1:95:53:a3:7f:4e:ca:85:da:
                    fe:93:fe:dd:c1:07:e4:dc:2f:5f:89:95:f3:bb:d4:
                    1e:c6:1d:d8:e1:20:77:51:4e:13:e0:89:cf:d0:b2:
                    41:8b:0f:62:5d:97:e9:19:5b:09:88:97:69:10:f9:
                    74:df:41:0a:b8:02:37:3c:85:78:a6:26:1d:90:a3:
                    bd:c5:48:8e:0e:79:f4:ee:ae:bb:91:ab:e7:f9:0c:
                    da:a3:82:9e:7a:b9:81:0c:2c:b0:be:fc:ef:2d:11:
                    90:98:52:27:cb:fb:80:62:a1:2d:95:12:6a:e7:e3:
                    71:56:0e:a0:7b:2c:59:61:25:27:a9:8c:2c:52:d5:
                    3d:c0:af:32:76:3d:30:b8:8a:b6:ed:1b:95:5b:d1:
                    6e:39:a3:42:ea:59:f0:44:59:6f:f7:a0:cd:b3:3f:
                    11:1a:d2:43:df:9d:54:cc:d7:e1:9e:f5:3f:d6:2c:
                    de:2b:b1:e5:bf:06:4c:8e:da:74:01:02:03:0b:44:
                    93:e7:7f:f3:f3:8d:42:f5:59:86:e9:a6:04:38:15:
                    5a:de:07:d9:42:b3:35:4e:63:63:bf:9b:f2:82:a1:
                    c4:b2:64:d4:ef:2b:63:63:19:d1:2c:2b:19:58:72:
                    d1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:18:EF:6B:1A:D1:38:02:2A:79:87:29:AC:4F:11:85:C2:1F:A8:CE
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:17:97:d7:07:88:c6:00:b4:a0:0e:db:0e:09:94:b5:b5:ea:
         07:87:c3:68:fc:37:53:96:e3:b2:da:da:3d:5a:cd:8f:a6:a6:
         26:72:81:d6:59:7a:5e:58:32:16:5e:0f:0a:13:98:b8:4c:17:
         db:03:cb:1e:4d:be:c2:b4:4d:ee:55:69:4a:df:9e:bd:f4:26:
         71:92:5c:ce:aa:1e:9a:9f:f1:4c:b2:5b:10:3c:ea:84:5c:64:
         80:63:94:2b:00:be:66:01:80:32:c7:5e:1f:b7:26:c4:98:71:
         fe:91:89:63:de:d7:bf:5f:bc:01:00:03:80:ba:20:65:d5:81:
         25:fc:79:e3:61:f1:3a:3e:ae:09:f5:1e:40:64:30:a5:b6:f3:
         9c:61:04:a8:07:ba:d2:01:40:86:8f:ba:2f:32:e0:df:34:9f:
         db:fd:78:ed:1c:6e:9b:7c:32:ec:c3:42:67:d9:a5:25:38:ad:
         a1:97:f0:9c:ed:42:d0:b6:a7:a1:6f:96:da:00:4f:98:42:25:
         a3:45:ad:86:7f:b9:2f:13:9d:d1:b5:0e:17:37:19:86:86:8d:
         1e:4f:84:63:7c:81:a6:f4:30:b2:c2:96:4e:34:8a:6d:ad:69:
         18:03:1c:e0:8c:2f:e3:87:63:9c:55:76:73:ad:12:e6:e9:2c:
         04:ef:6b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:36:18 2026 by rpki-client