Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
File:                     36vRQuiUFoiDzkUicxf5-lAiGU8.mft (raw, json)
Hash identifier:          LCyQFUqi7zviA+QQRuFfY14r6btjz7Fta8PE4CeAwgI=
Subject key identifier:   69:95:25:43:9F:F5:15:39:C7:C7:FD:14:25:F5:3F:AD:ED:32:64:86
Authority key identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
Certificate issuer:       /CN=dfabd142e894168883ce45227317f9fa5022194f
Certificate serial:       01A0CA7DA69F6F041CCF09AF89E3EE12A82F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
Manifest number:          1064
Signing time:             Tue 22 Sep 2026 19:00:27 +0000
Manifest this update:     Tue 22 Sep 2026 19:00:27 +0000
Manifest next update:     Wed 23 Sep 2026 19:00:27 +0000
Files and hashes:         1: 36vRQuiUFoiDzkUicxf5-lAiGU8.crl (hash: UyfjauWsoFDSgNtdQSb0vM4Omj/DO6aPtDPgKxeW/MU=)
                          2: uI-quQ5_A0kZBp2yrmzexnFbllM.roa (hash: rDYsx8yebGIjiP0Kf0GxRBRYizjVck1GA16b9PLZbjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:7d:a6:9f:6f:04:1c:cf:09:af:89:e3:ee:12:a8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfabd142e894168883ce45227317f9fa5022194f
        Validity
            Not Before: Sep 22 19:00:27 2026 GMT
            Not After : Sep 23 19:00:27 2026 GMT
        Subject: CN=699525439ff51539c7c7fd1425f53faded326486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e7:f0:0c:14:94:17:4d:19:08:9c:ba:ce:4f:
                    0c:d5:e4:b4:ae:08:d3:3f:bd:cb:31:8b:a4:36:e0:
                    d2:a6:e5:fe:23:43:13:87:64:76:0c:70:3d:5c:73:
                    72:75:db:13:fd:54:3e:1d:87:80:d8:20:33:23:c1:
                    95:c7:0a:90:67:e6:dd:ee:7d:1d:74:b2:64:6c:1e:
                    18:13:30:83:9f:4b:0b:8c:e7:cf:d3:8c:95:84:0a:
                    e7:9e:58:bf:17:1f:82:de:dc:8c:b1:30:73:dd:52:
                    14:4d:cb:e6:31:09:45:13:72:a9:4b:cd:25:5d:bb:
                    f9:cc:86:61:5b:0a:09:7a:d2:71:8a:15:f9:b2:3c:
                    5a:75:c8:7d:34:9b:2a:61:82:d9:9b:8d:2e:56:ff:
                    75:0a:10:ed:62:d3:b9:22:f3:5d:04:dd:bf:54:28:
                    e0:e4:04:86:25:03:f0:85:80:b8:19:4c:ac:a6:9a:
                    aa:b1:6f:2c:86:fc:04:de:b6:a4:51:2f:f7:97:49:
                    16:9e:26:5a:5a:ad:58:16:04:c0:6f:bf:f6:4b:aa:
                    51:f0:a9:df:d4:3c:a8:11:29:b3:1b:31:ad:d6:37:
                    2d:26:87:c6:be:1f:59:ec:c8:42:23:5a:a9:ab:9c:
                    15:a5:66:bc:38:ad:05:cf:6b:3d:6c:b4:27:2b:88:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:95:25:43:9F:F5:15:39:C7:C7:FD:14:25:F5:3F:AD:ED:32:64:86
            X509v3 Authority Key Identifier:
                keyid:DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:11:b1:69:eb:92:e6:29:da:2f:f4:af:99:3c:0f:ac:47:ba:
         cf:f5:48:9e:42:93:d9:52:fa:a3:e2:b5:73:b4:fb:9a:9d:8f:
         0a:16:5f:56:2b:3f:be:87:d5:1d:ee:d4:c2:04:aa:dd:c6:1e:
         48:a0:29:6e:da:03:8e:a5:14:d3:a8:19:b6:3d:f3:74:5a:a3:
         66:5f:d4:d6:a6:cb:12:0e:c2:4b:c9:e5:0c:3e:8d:69:23:87:
         88:d0:c6:f3:21:3b:7e:60:45:7d:ae:17:4b:0e:e3:91:48:26:
         be:5c:09:c5:f7:4f:2e:a0:6d:0f:bd:75:14:00:83:33:4c:61:
         01:fd:15:0e:12:4f:69:7a:14:82:3d:16:2f:24:af:3c:c2:b7:
         f5:3c:05:1d:10:bf:10:c2:5b:2c:13:b6:80:e3:83:80:8e:12:
         af:72:88:fd:79:e9:82:a8:e5:93:eb:7f:9e:44:e0:cc:fc:e4:
         c7:01:d8:8f:14:0f:6e:aa:c7:72:17:be:19:5c:3b:78:35:af:
         9e:6b:5b:83:74:f5:63:52:e6:1f:4d:f0:4c:6c:e3:cf:cc:99:
         c8:0e:0e:db:ad:89:d3:22:2b:30:d2:69:d9:72:54:ff:6a:2d:
         f9:ea:5f:0b:ee:5b:33:c2:87:1c:8a:e9:d1:df:c5:4d:bf:82:
         38:f9:33:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKfaafbwQczwmviePuEqgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYWJkMTQyZTg5NDE2ODg4M2NlNDUyMjczMTdmOWZhNTAy
MjE5NGYwHhcNMjYwOTIyMTkwMDI3WhcNMjYwOTIzMTkwMDI3WjAzMTEwLwYDVQQD
Eyg2OTk1MjU0MzlmZjUxNTM5YzdjN2ZkMTQyNWY1M2ZhZGVkMzI2NDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOfwDBSUF00ZCJy6zk8M1eS0rgjT
P73LMYukNuDSpuX+I0MTh2R2DHA9XHNyddsT/VQ+HYeA2CAzI8GVxwqQZ+bd7n0d
dLJkbB4YEzCDn0sLjOfP04yVhArnnli/Fx+C3tyMsTBz3VIUTcvmMQlFE3KpS80l
Xbv5zIZhWwoJetJxihX5sjxadch9NJsqYYLZm40uVv91ChDtYtO5IvNdBN2/VCjg
5ASGJQPwhYC4GUysppqqsW8shvwE3rakUS/3l0kWniZaWq1YFgTAb7/2S6pR8Knf
1DyoESmzGzGt1jctJofGvh9Z7MhCI1qpq5wVpWa8OK0Fz2s9bLQnK4jbfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmVJUOf9RU5x8f9FCX1P63tMmSGMB8GA1UdIwQY
MBaAFN+r0ULolBaIg85FInMX+fpQIhlPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzZ2UlF1aVVGb2lEemtVaWN4ZjUtbEFpR1U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lMzhmYzMtZWExMy00MDEzLTkyODQt
M2E4YWM0ZGMzZWVmLzEvMzZ2UlF1aVVGb2lEemtVaWN4ZjUtbEFpR1U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lMzhmYzMtZWExMy00MDEzLTkyODQtM2E4YWM0ZGMzZWVm
LzEvMzZ2UlF1aVVGb2lEemtVaWN4ZjUtbEFpR1U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBGxaeuS
5inaL/SvmTwPrEe6z/VInkKT2VL6o+K1c7T7mp2PChZfVis/vofVHe7UwgSq3cYe
SKApbtoDjqUU06gZtj3zdFqjZl/U1qbLEg7CS8nlDD6NaSOHiNDG8yE7fmBFfa4X
Sw7jkUgmvlwJxfdPLqBtD711FACDM0xhAf0VDhJPaXoUgj0WLySvPMK39TwFHRC/
EMJbLBO2gOODgI4Sr3KI/Xnpgqjlk+t/nkTgzPzkxwHYjxQPbqrHche+GVw7eDWv
nmtbg3T1Y1LmH03wTGzjz8yZyA4O262J0yIrMNJp2XJU/2ot+epfC+5bM8KHHIrp
0d/FTb+COPkz1g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:37:41 2026 by rpki-client