Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.mft
File:                     1x8WWerJpqNDHfYJ-eLiGWoEXI0.mft (raw, json)
Hash identifier:          SiC+PuH75xbKwuzQNaHQRbmXRNFHp/EP5kFfNufDyQ0=
Subject key identifier:   13:41:DF:CE:A4:07:AD:BF:D6:0E:ED:EE:12:93:26:BD:71:4D:58:DE
Authority key identifier: D7:1F:16:59:EA:C9:A6:A3:43:1D:F6:09:F9:E2:E2:19:6A:04:5C:8D
Certificate issuer:       /CN=d71f1659eac9a6a3431df609f9e2e2196a045c8d
Certificate serial:       01A0D682CF09A77AD050308A364870863EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1x8WWerJpqNDHfYJ-eLiGWoEXI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.mft
Manifest number:          0235
Signing time:             Fri 25 Sep 2026 03:01:31 +0000
Manifest this update:     Fri 25 Sep 2026 03:01:31 +0000
Manifest next update:     Sat 26 Sep 2026 03:01:31 +0000
Files and hashes:         1: 1x8WWerJpqNDHfYJ-eLiGWoEXI0.crl (hash: iZe7hGWzgbs6/nOwTiRXJXhuhOj85ct+oK0NzW+YWCc=)
                          2: 9nPlOHYAHfyq6nvNreDs-Z27tqM.roa (hash: lVEwvYAKVlQiegB9BUjPpXT5BRTtW+2GQKgK1DFVwe0=)
                          3: M0nXoemZM80cs7-wgz7LynloKRU.roa (hash: Ml2fWT6fJ60kgFf8AT9u9ZFbZB2Z3iBFnyjQVhvjjO4=)
                          4: ZPcVr_99m8S8MN4KS8E89rzHdiU.roa (hash: 4ghNNSiKjSYzIHSnF3XQIcioMv7lGSMklZ8MTORFbKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1x8WWerJpqNDHfYJ-eLiGWoEXI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 03:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:82:cf:09:a7:7a:d0:50:30:8a:36:48:70:86:3e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d71f1659eac9a6a3431df609f9e2e2196a045c8d
        Validity
            Not Before: Sep 25 03:01:31 2026 GMT
            Not After : Sep 26 03:01:31 2026 GMT
        Subject: CN=1341dfcea407adbfd60eedee129326bd714d58de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:2a:66:89:1c:0d:d4:9e:81:6d:3c:6a:93:
                    69:b5:27:18:b7:10:b7:d1:39:72:3e:9f:c6:f1:42:
                    1d:37:68:1a:11:2c:ea:c4:a3:2b:9c:1f:56:53:a3:
                    91:52:cf:16:41:64:ba:b6:1e:80:22:90:e1:01:a6:
                    ff:8a:00:17:84:c9:8f:ab:5a:d3:de:a5:87:83:9b:
                    76:5d:3f:7c:6c:a0:87:e1:70:aa:a7:81:ac:d9:a9:
                    46:6f:c0:c4:f9:ba:06:88:a5:8e:2c:4b:fe:3a:a6:
                    75:f3:57:4c:be:22:a5:7f:25:bc:e4:b2:2f:b5:3b:
                    05:39:e6:56:93:15:82:a7:b9:98:2f:fe:b2:c4:94:
                    a7:14:4b:e6:35:17:16:90:ca:4c:a4:12:f0:a0:b6:
                    21:42:3c:1d:e2:03:67:e2:d8:b2:e4:3e:ad:08:34:
                    2e:8f:28:47:e6:32:42:28:d9:c1:5e:ee:a2:ca:8d:
                    bd:8e:b1:f1:2a:91:ab:83:90:13:8c:60:ed:b9:e8:
                    3d:e4:72:a4:5b:66:f9:db:f0:da:13:4a:6d:a6:3d:
                    bb:17:c3:77:09:2a:16:d1:7b:78:4c:bf:c6:db:87:
                    76:52:2c:67:58:bc:8a:16:2b:ba:b6:69:08:ab:f8:
                    f4:9f:da:cd:14:07:e4:be:fe:79:eb:62:fe:7c:42:
                    53:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:41:DF:CE:A4:07:AD:BF:D6:0E:ED:EE:12:93:26:BD:71:4D:58:DE
            X509v3 Authority Key Identifier:
                keyid:D7:1F:16:59:EA:C9:A6:A3:43:1D:F6:09:F9:E2:E2:19:6A:04:5C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1x8WWerJpqNDHfYJ-eLiGWoEXI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c9:b8:8f:cb:cc:46:da:b2:71:e5:8e:f4:61:87:25:c2:29:
         9c:8c:9a:13:f5:81:4c:85:e5:4c:9c:06:64:d3:41:a9:23:80:
         bc:1b:d0:81:95:07:f2:a9:20:dc:74:23:67:cc:5c:29:bb:13:
         af:7f:6b:1b:5c:75:ae:99:a1:95:2c:a7:5b:77:43:1d:36:b9:
         fb:94:33:d0:0e:8e:6d:e0:67:6a:a1:33:ea:f4:55:b7:f1:f9:
         db:7b:f7:68:66:0c:0f:52:f8:fa:49:81:30:7e:1f:9d:65:31:
         c9:b2:8a:ef:f0:cb:28:62:f7:9c:03:5a:19:01:a8:54:1f:a1:
         d5:a2:07:ed:0c:65:2c:29:27:fb:89:9d:71:20:97:d5:44:01:
         91:e1:89:7e:49:c4:54:78:68:c2:f0:2d:b8:2a:b2:f6:9e:f6:
         bb:c6:cf:66:bc:f1:de:73:dc:87:59:7f:32:0e:92:a9:6e:b1:
         89:10:13:88:32:d7:ca:a7:1f:d4:cd:19:9d:b1:b3:c4:f6:98:
         46:14:b2:fa:98:49:d4:9f:d4:4d:6b:57:79:4f:c5:76:72:d1:
         55:b1:eb:52:b3:c7:ad:64:85:97:45:37:f2:d1:bd:20:04:d6:
         a4:e0:ea:2f:75:ae:58:5f:31:34:0f:83:47:38:ec:b8:29:ae:
         b2:e5:a2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:19:59 2026 by rpki-client