Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File:                     DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier:          X9rpFGtD8aacQ84URPMsfB49jRvrU7sZOGYNqTp2Vkw=
Subject key identifier:   01:24:A0:9D:92:F0:BB:1C:27:F0:94:5E:95:4C:C6:8A:A4:97:9B:9C
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer:       /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial:       01A0DBE00B5B16B02C2235AFE29E6F9A49E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number:          1A75
Signing time:             Sat 26 Sep 2026 04:01:28 +0000
Manifest this update:     Sat 26 Sep 2026 04:01:28 +0000
Manifest next update:     Sun 27 Sep 2026 04:01:28 +0000
Files and hashes:         1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: MZLL8J2+ZZvqtQUlVhYTc6o561ZN2HDBOnPxrsRKhak=)
                          2: FNGdELpGS2bwEGg4hvaYUE_r1O4.roa (hash: Ei6sBNoGSjj3ahbV1+2LrTjtk8IEn6iFKEC198BdvPQ=)
                          3: cfuyV7WY5uCzefphkg9dkFiDF4o.roa (hash: 56j+8wClcw9KajdQHM4PT6tZ5VXaRrrlOf4m/1pMO8M=)
                          4: zdTKCzMNYrD_vxLGScehqegrrJk.roa (hash: Al6OIKoNSWVa63JvchjYlE1VIlKOSAurCVguG0aSQOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:e0:0b:5b:16:b0:2c:22:35:af:e2:9e:6f:9a:49:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
        Validity
            Not Before: Sep 26 04:01:28 2026 GMT
            Not After : Sep 27 04:01:28 2026 GMT
        Subject: CN=0124a09d92f0bb1c27f0945e954cc68aa4979b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:16:8e:15:6a:f1:ba:73:0f:4b:34:5f:e9:
                    54:66:a0:9c:56:d8:d9:13:56:eb:54:d6:b9:7c:59:
                    8c:db:31:ea:66:14:11:dc:c8:33:80:cc:bf:d1:82:
                    63:2e:22:71:ad:fd:4b:89:80:bc:42:3d:51:95:37:
                    30:a9:7b:fb:e0:40:6e:79:3d:f2:cc:8b:10:dc:7f:
                    8f:28:52:57:71:cc:22:14:3b:b4:7a:6e:f4:02:5f:
                    76:69:f5:5a:f7:d4:04:39:23:a8:0b:69:0a:b1:91:
                    53:1a:d4:ff:7e:ef:17:97:45:3e:fb:e3:42:65:80:
                    f8:1c:11:18:9c:aa:43:3d:63:01:9e:d9:d5:73:d4:
                    e1:9e:28:d3:ef:e0:c7:fd:a3:85:51:4c:b3:ab:ff:
                    40:da:e8:27:1f:76:8c:22:3e:69:85:7c:e8:0a:8c:
                    04:43:f6:3c:af:23:ca:1e:d8:fd:f2:0e:71:e0:2e:
                    1c:c8:46:a3:38:7c:0b:68:97:2d:b7:40:62:1c:f1:
                    21:73:f4:89:ff:e2:f1:44:2b:d7:40:6f:3f:af:02:
                    64:a0:8b:ea:34:4d:bf:75:da:49:44:97:33:27:78:
                    d7:7d:60:89:20:f1:54:eb:24:43:39:88:27:54:bf:
                    19:22:77:8f:36:26:ba:a8:83:42:4d:b1:e5:88:77:
                    fd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:24:A0:9D:92:F0:BB:1C:27:F0:94:5E:95:4C:C6:8A:A4:97:9B:9C
            X509v3 Authority Key Identifier:
                keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8a:c3:71:b9:16:49:e3:d0:bd:27:31:54:ef:0d:c3:7f:d8:
         5a:f8:6f:ad:91:db:a5:45:2c:0d:f4:07:be:f6:6e:14:37:93:
         fd:9f:ac:54:01:71:92:a4:2c:e4:d7:22:a0:0d:b0:76:2d:30:
         24:20:4a:2f:9b:40:50:24:a3:d4:10:e6:5e:2b:2b:36:88:d5:
         99:67:66:41:53:ff:5a:c6:a5:b8:aa:a4:e3:a0:6e:33:62:27:
         a3:45:71:8a:11:19:af:21:73:48:05:ba:b8:0d:e2:5a:c8:16:
         40:bc:18:0a:6a:b5:ff:93:ba:b5:85:f3:66:74:7b:ee:44:df:
         10:94:8e:bd:fa:46:94:7a:c6:89:07:b0:d3:72:33:3d:b7:b1:
         7d:6b:0a:29:5b:74:3f:59:07:96:5f:74:6f:0b:b5:c6:d3:b1:
         53:24:70:54:ee:5a:5c:aa:e4:65:76:b2:43:6b:b9:43:10:82:
         1a:ae:92:08:f3:0c:af:a3:d0:8e:f2:29:c3:1e:bf:5e:15:34:
         13:9c:19:26:a1:fb:b9:10:42:fb:2c:ec:3e:68:e2:66:7e:4b:
         c2:b3:21:4f:3e:69:6c:e9:c5:7d:b5:d7:75:e2:d1:b3:93:9d:
         8c:b5:ee:c6:db:fb:f2:a6:0f:29:9d:aa:f9:f4:48:c8:6f:40:
         1c:e8:f3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:36:20 2026 by rpki-client