Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File:                     DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier:          48jovmvHjXjcbWjbVad4BwvlMgBZ8vl2EQz+Y9tojPI=
Subject key identifier:   EF:67:E5:9F:9C:56:E4:B7:93:D8:AE:00:C8:CD:4D:E3:7F:91:83:D0
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer:       /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial:       01A0E13D3C275534FACB687E63ED4C75B385
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number:          14EF
Signing time:             Sun 27 Sep 2026 05:01:21 +0000
Manifest this update:     Sun 27 Sep 2026 05:01:21 +0000
Manifest next update:     Mon 28 Sep 2026 05:01:21 +0000
Files and hashes:         1: 9z2R7mR7CTqEMhJ2KlrHCYJ3vjc.roa (hash: FvuJb6Wc0/pGsiV3BQi7hOtAMeCwlp8+eAq8AekfMKM=)
                          2: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: uTL5HxhAC9iSPbg+JCoytWfijnbSuLBszmpLSN07pmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:3d:3c:27:55:34:fa:cb:68:7e:63:ed:4c:75:b3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
        Validity
            Not Before: Sep 27 05:01:21 2026 GMT
            Not After : Sep 28 05:01:21 2026 GMT
        Subject: CN=ef67e59f9c56e4b793d8ae00c8cd4de37f9183d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:b3:ee:31:0e:4b:2e:2c:37:09:20:3a:f0:
                    2a:86:8e:67:d2:74:72:cc:c6:e1:20:da:6b:75:b0:
                    04:d3:2f:e1:e9:b1:69:d3:a1:3f:23:5c:6e:69:64:
                    06:86:64:27:74:76:33:07:9b:79:cb:52:ed:c2:db:
                    c5:5c:a1:be:3c:ad:88:86:b5:18:0e:8f:88:01:55:
                    ad:84:a2:2e:d5:86:15:a2:92:bc:ea:8f:d4:28:0b:
                    3c:ac:28:15:32:37:f3:4a:1c:02:5e:00:4a:13:da:
                    ee:b5:e2:86:b4:70:2e:34:83:28:ed:9a:58:b3:c8:
                    4d:0f:24:80:98:cf:2f:4f:d6:7d:83:71:d6:86:7a:
                    34:7e:08:ef:a8:04:d9:7c:26:69:a7:28:d2:5b:45:
                    bd:d0:b0:fd:6d:f3:63:da:aa:31:59:97:95:02:dd:
                    0c:90:ed:ed:8d:4d:09:4e:af:71:97:52:6e:d4:41:
                    ed:27:ee:47:d9:ad:83:72:62:23:5e:f4:7e:a0:bb:
                    28:37:25:8c:80:87:8a:1f:1d:ef:4d:78:19:dc:81:
                    84:1f:c0:37:61:70:f1:18:34:6a:b0:0b:17:b9:23:
                    e2:4c:58:aa:98:e6:9f:a8:96:df:4f:cd:1d:5a:1a:
                    22:5f:e5:4f:44:69:2f:2f:8d:e8:ad:59:a9:9a:78:
                    bf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:67:E5:9F:9C:56:E4:B7:93:D8:AE:00:C8:CD:4D:E3:7F:91:83:D0
            X509v3 Authority Key Identifier:
                keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:28:fa:8c:82:31:1b:54:91:26:46:6a:a1:06:29:ee:50:6a:
         06:a6:9e:1a:f2:ff:25:4a:3a:70:4d:3e:2f:9f:85:ed:e3:db:
         bb:61:f5:72:09:56:38:a9:79:97:db:66:f2:05:be:dc:be:44:
         59:0b:a7:a3:81:23:f9:56:ee:b0:b2:40:c2:d0:e1:c8:f4:6a:
         04:0b:4c:6f:18:6d:1e:ac:73:9c:df:a1:38:8f:87:84:70:83:
         61:8d:42:8e:4a:3c:59:c5:e5:fa:6c:fd:a3:a6:cd:ee:76:bf:
         18:07:93:1c:c4:9f:80:16:1b:a0:04:ca:41:71:e4:44:74:5e:
         c6:a5:1d:2e:bd:75:be:e0:9d:e6:18:c6:09:a5:bd:96:06:6f:
         65:1e:84:dd:2f:ea:33:a0:a5:ba:25:84:2b:20:d1:1b:b5:03:
         39:a9:f1:3f:08:31:c6:45:4b:da:58:89:0b:e3:c6:7c:84:d1:
         ce:59:12:70:59:e3:fe:7d:23:c2:ea:28:17:72:0c:95:4e:f0:
         24:94:55:3a:66:d3:d6:ef:a3:ba:cc:8d:3d:35:73:da:31:1b:
         24:53:2b:01:3a:c0:04:6d:e4:09:bd:bb:50:07:ce:b9:80:ff:
         a5:97:8a:6c:63:fe:4b:ea:1d:44:5e:b2:57:c8:93:38:5e:c8:
         43:1c:38:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:51:19 2026 by rpki-client