Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
File:                     CTdXHsK0hQX72gnKfqaN69lOAdM.mft (raw, json)
Hash identifier:          QkG4Gr8pQf4E1ONLM2xWSmJVxodVmjJbLxBV5SHVi9k=
Subject key identifier:   14:22:CC:C8:7F:ED:C7:0D:54:29:85:0D:4C:9F:53:B1:8F:2E:E2:B4
Authority key identifier: 09:37:57:1E:C2:B4:85:05:FB:DA:09:CA:7E:A6:8D:EB:D9:4E:01:D3
Certificate issuer:       /CN=0937571ec2b48505fbda09ca7ea68debd94e01d3
Certificate serial:       01A0DBA8F5DC2908E4B4962CC269C0E14895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
Manifest number:          EB
Signing time:             Sat 26 Sep 2026 03:01:18 +0000
Manifest this update:     Sat 26 Sep 2026 03:01:18 +0000
Manifest next update:     Sun 27 Sep 2026 03:01:18 +0000
Files and hashes:         1: CTdXHsK0hQX72gnKfqaN69lOAdM.crl (hash: VUtdWHGvV5TEx45PZ0aEhq2c5u8jCyphw5MhRmjdyj8=)
                          2: pjNNqrlFdBEk-5LXIPaA2yAX9II.roa (hash: 6xAgp3Y3/YbpjnpdTMNy11kqzchtaR+Q0nGNwxBy1EY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a8:f5:dc:29:08:e4:b4:96:2c:c2:69:c0:e1:48:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0937571ec2b48505fbda09ca7ea68debd94e01d3
        Validity
            Not Before: Sep 26 03:01:18 2026 GMT
            Not After : Sep 27 03:01:18 2026 GMT
        Subject: CN=1422ccc87fedc70d5429850d4c9f53b18f2ee2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e7:ce:8b:6a:1d:e8:a9:90:5e:82:f7:eb:43:
                    63:bb:90:ba:9d:21:f2:0d:3c:2e:cd:11:23:cd:60:
                    47:5f:b1:b0:f4:83:77:98:51:14:ad:0a:cc:03:c6:
                    7d:88:8e:b5:92:73:2e:f2:a0:45:a9:a3:3d:0a:e9:
                    bc:37:70:4d:f2:19:a4:fa:bf:34:07:93:c4:b6:ec:
                    7b:b7:0a:57:47:52:53:4e:3b:4b:17:0e:e3:f2:cd:
                    d9:cf:30:2c:bf:69:c0:dc:97:44:38:94:54:19:8c:
                    f2:57:24:a0:38:d6:f4:29:af:ff:bd:ec:62:1f:af:
                    64:95:b8:b6:94:6d:2d:de:c7:3b:f4:d0:fa:a5:40:
                    3d:6b:13:a6:1c:63:09:c5:62:70:5d:5c:44:82:3e:
                    d0:dd:58:fa:7d:54:04:44:cc:34:eb:d2:12:27:48:
                    8c:a2:dd:16:d2:9e:2b:22:d1:58:8c:d4:45:42:65:
                    77:aa:c9:56:2b:61:55:fb:25:5d:c3:57:56:5e:f1:
                    c2:23:16:11:2b:3c:ee:f8:3f:b9:e8:07:ce:90:fc:
                    4b:96:66:47:bd:39:15:96:c6:44:28:54:a4:73:0e:
                    f4:7f:6d:dc:f0:9e:98:89:ab:aa:e8:70:51:ab:11:
                    db:52:49:b4:5d:23:15:8c:af:d8:6e:0a:f6:a0:c0:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:22:CC:C8:7F:ED:C7:0D:54:29:85:0D:4C:9F:53:B1:8F:2E:E2:B4
            X509v3 Authority Key Identifier:
                keyid:09:37:57:1E:C2:B4:85:05:FB:DA:09:CA:7E:A6:8D:EB:D9:4E:01:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:b7:ce:36:ef:73:ad:b1:8c:0c:ba:64:4d:9a:db:2c:e1:a2:
         d9:de:77:44:fa:e7:91:23:8e:d1:77:6f:5e:a2:ae:49:60:c7:
         3c:9c:56:ac:f2:0f:56:1a:fc:54:7a:b9:d9:8f:f2:65:f0:5e:
         6a:6c:2d:ca:92:22:30:65:11:71:41:b6:3c:91:9a:fd:36:81:
         03:d5:ad:23:59:f1:32:d0:af:19:6a:10:b2:a4:37:a6:48:93:
         9e:78:39:03:05:4f:54:9b:01:46:27:ee:05:bd:6d:d7:d0:ae:
         4a:33:c3:c7:2e:6f:0c:5e:1e:e3:11:39:ee:ee:25:42:c1:de:
         03:16:06:1c:25:6c:76:8d:e3:f2:32:a7:f7:5b:bc:08:38:c7:
         dc:3e:fe:88:9f:32:81:a1:7b:e1:4d:48:c6:85:0b:ef:f9:02:
         34:eb:3a:66:36:b3:dd:37:5e:4c:f2:43:fc:13:63:f8:58:00:
         84:9b:9a:cc:9a:d1:ac:e8:b1:c7:99:e6:f0:5a:6e:a5:f1:08:
         e9:f4:88:7e:20:b8:b7:c6:49:c3:9a:56:4a:a2:ff:5a:cf:2a:
         07:d7:c7:9b:e3:79:41:f3:1a:3e:65:bf:27:6a:3d:f4:7a:35:
         db:b5:5a:1f:1a:d1:e3:10:9e:bd:d3:d1:07:41:d3:50:49:ea:
         ec:8c:1c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:53:47 2026 by rpki-client