Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
File:                     1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft (raw, json)
Hash identifier:          PpyMGuotDXdLmegkIwUrEKrjr8zP4PrkYhw7uRUmUBQ=
Subject key identifier:   2C:DC:73:D7:79:61:31:6F:55:5D:86:80:74:AE:80:89:4A:5F:41:D4
Authority key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
Certificate issuer:       /CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Certificate serial:       01A0EEC1D39F11D7EA9FD7472BADC2332E24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
Manifest number:          0DBC
Signing time:             Tue 29 Sep 2026 20:01:15 +0000
Manifest this update:     Tue 29 Sep 2026 20:01:15 +0000
Manifest next update:     Wed 30 Sep 2026 20:01:15 +0000
Files and hashes:         1: 1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl (hash: fvnA2zXSIb7J5bKq5XpdI57B5LdW+zxiwmBKPX17UvU=)
                          2: _bF1xY0tz7JbEXvFbfl2J9z_aGE.roa (hash: RJ6E1ubvdFwW8RqYbgq5Su4V9SdqGf0qZCB+qrw7Uhg=)
                          3: d55MmSSrMOAa7YboXbvWTauB-vE.roa (hash: u/wjI69y9HM6cDlahIXVWn271sSNYCBmkSyoOi+8hS4=)
                          4: tSXjnZHfIFRPkfR23KuWOEzYmso.roa (hash: bT+yAY7ld62QoBr+Sm2VFzdlFNBEOfbRTYnS7F4jOIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ee:c1:d3:9f:11:d7:ea:9f:d7:47:2b:ad:c2:33:2e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
        Validity
            Not Before: Sep 29 20:01:15 2026 GMT
            Not After : Sep 30 20:01:15 2026 GMT
        Subject: CN=2cdc73d77961316f555d868074ae80894a5f41d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ae:45:3d:eb:cb:4a:0c:9f:11:7d:29:b0:c1:
                    b6:66:c3:90:b2:d4:73:92:8d:e0:1f:fc:3f:f4:99:
                    7e:ff:a2:29:34:e1:46:c3:2d:8f:70:aa:d5:57:c6:
                    90:69:b1:51:ab:61:cd:5b:9a:92:b1:81:33:d4:49:
                    f9:d9:34:d0:e6:e1:1a:1b:cc:7d:3f:0c:48:43:70:
                    73:d6:42:00:af:66:78:8a:a9:cc:47:ce:62:18:6a:
                    63:fd:28:a0:31:9b:7d:05:3c:23:27:36:af:21:87:
                    b3:7d:59:2c:20:c0:36:7c:0b:f5:b4:7b:9a:c0:ef:
                    be:49:c4:f2:a7:9c:44:b3:e0:e1:f3:0f:71:c3:b3:
                    b0:f5:6f:28:fc:c5:84:4c:12:6d:d4:dc:5b:45:af:
                    db:b4:47:76:89:72:5d:cc:00:66:ba:9c:ec:8d:32:
                    66:ef:59:fe:42:77:6b:86:01:7e:df:35:1c:ed:fe:
                    c2:52:5d:0e:f1:07:c0:2a:1e:4f:f2:4d:0c:e5:27:
                    d2:10:9e:75:39:94:56:4a:32:93:ea:c6:e2:51:79:
                    41:bf:5d:eb:75:6c:8b:93:29:0b:e3:3c:c6:d7:d5:
                    01:e8:2d:23:cb:4a:2b:e8:ab:d3:b2:a8:b4:07:db:
                    f9:ab:e2:9f:b3:83:ae:d5:47:02:2e:7c:ec:9d:8a:
                    ed:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DC:73:D7:79:61:31:6F:55:5D:86:80:74:AE:80:89:4A:5F:41:D4
            X509v3 Authority Key Identifier:
                keyid:F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:29:f0:34:7c:01:68:fe:79:28:69:7c:c9:f0:f9:8c:8a:93:
         27:2c:16:b9:12:57:3d:db:65:63:2f:e2:5b:1d:f1:a0:10:7e:
         4b:c7:6d:69:e4:00:f1:83:46:6e:bf:f4:3d:16:4b:ba:af:57:
         45:7b:cf:34:f3:2d:92:48:e3:73:e1:e5:4e:95:5c:ca:75:32:
         11:02:19:1f:cc:2a:f4:ee:63:f4:a0:64:89:fc:44:b5:78:b1:
         fa:d1:d0:82:12:6e:43:07:96:73:38:49:ff:9c:d4:40:27:c3:
         23:95:a6:58:ae:b7:c8:1d:9d:a4:c1:5b:04:c9:07:fe:7a:a1:
         61:2d:4b:96:d8:18:da:8b:be:a1:d1:88:48:cd:1c:40:16:c8:
         67:00:d8:04:32:1e:aa:a6:d5:72:c9:fb:f2:f5:ec:06:3e:36:
         04:c6:8e:c3:31:b9:ea:1d:7f:69:92:9e:8f:4e:ac:07:64:d7:
         5c:13:1f:e9:6c:5f:55:01:67:6e:91:92:eb:85:44:28:74:d0:
         e8:13:fd:4e:bc:82:ee:bb:ee:27:d2:ca:cd:25:ac:05:95:67:
         ee:b5:31:58:d3:7a:ff:38:ab:46:8f:db:a2:e2:c4:d9:0f:f0:
         94:55:a5:83:2e:c6:76:1b:5f:a8:57:e7:be:7d:1c:ec:02:a4:
         5b:d3:7d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 02:36:21 2026 by rpki-client