Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File:                     1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier:          e0DWHYlsPiyIeUffELvAauGwjSg9O0ZsTV0ojMXlpjQ=
Subject key identifier:   B1:DF:92:91:40:FF:17:3D:71:3C:AE:0F:E9:77:40:1F:48:27:90:52
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer:       /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial:       01A0D501E0844AB299AA989EC8D94EFE8961
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number:          1854
Signing time:             Thu 24 Sep 2026 20:01:04 +0000
Manifest this update:     Thu 24 Sep 2026 20:01:04 +0000
Manifest next update:     Fri 25 Sep 2026 20:01:04 +0000
Files and hashes:         1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: xrzTwklDgsfKRoFeX25miR8djvFW8stIfVY2jaIH/r0=)
                          2: q3vaJOTC8w8YJydcJlzdNu2t6t0.roa (hash: 6HoX9dCuUvOi7bV1+OJY+cnUcJyW0sCh4AS88KCyve8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:01:e0:84:4a:b2:99:aa:98:9e:c8:d9:4e:fe:89:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
        Validity
            Not Before: Sep 24 20:01:04 2026 GMT
            Not After : Sep 25 20:01:04 2026 GMT
        Subject: CN=b1df929140ff173d713cae0fe977401f48279052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:31:b8:86:86:05:65:85:15:78:71:7f:51:
                    68:9a:89:97:59:f0:ed:a4:40:5d:57:f9:ca:0c:46:
                    b1:23:4c:fe:6c:ac:7c:4f:47:fa:13:d5:e4:37:5a:
                    9a:cd:5d:c7:d8:a0:d0:46:32:5b:12:30:e3:f7:06:
                    7c:74:e1:a9:71:ff:99:5e:38:04:1f:f4:7a:f1:95:
                    03:50:b0:ce:a3:88:e8:78:53:ac:6f:74:68:ba:9b:
                    6b:85:75:fc:64:67:83:4e:1d:19:69:b7:2a:dd:44:
                    59:0f:65:05:d5:7b:7a:a2:92:48:a8:9b:c2:a6:cb:
                    dd:7f:01:2c:7b:0a:42:87:9c:c0:f3:64:5c:cc:43:
                    7c:96:be:3c:97:56:ec:c5:49:12:ab:f4:c2:fd:e1:
                    df:0e:60:28:88:bc:91:48:ab:b2:f9:7a:b3:7b:56:
                    c3:6d:19:10:62:6c:2c:75:ba:50:c2:49:05:fb:ae:
                    98:9f:1d:54:e2:8b:7e:82:ab:eb:d2:ef:93:92:f4:
                    d8:dc:10:0a:c4:54:d5:9c:ff:59:db:9a:fc:7a:46:
                    24:b5:b0:f1:75:ae:27:81:c7:46:f3:ba:b0:08:8a:
                    c4:f8:ee:bc:31:a7:e8:66:af:92:bf:83:d9:89:0c:
                    b1:3e:fd:4a:74:45:4d:76:b5:de:d0:6a:5a:bc:09:
                    35:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DF:92:91:40:FF:17:3D:71:3C:AE:0F:E9:77:40:1F:48:27:90:52
            X509v3 Authority Key Identifier:
                keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:68:1d:39:63:60:f8:98:08:59:38:ad:b9:1e:d8:d3:46:05:
         95:8f:d6:8e:73:09:49:a6:67:0b:69:1c:d0:2e:c2:e8:b5:4a:
         e1:ad:41:1f:d7:27:b5:b7:3e:b0:22:c2:aa:ca:5c:24:c7:19:
         cf:6f:b9:22:c4:f0:2a:bb:9b:b9:64:8d:d9:dd:a6:5f:09:55:
         0e:28:c0:a3:17:eb:4d:32:9e:fc:28:d1:24:e5:5a:5c:8b:1d:
         8d:28:82:be:c0:41:c2:06:1f:ca:29:91:3d:bc:b3:bc:25:ef:
         ee:fe:24:f2:47:84:4c:f3:87:9b:61:90:f8:06:3a:1e:7d:fe:
         65:83:5d:55:2c:1a:7a:40:51:66:19:4d:3c:71:7c:4b:4a:8a:
         00:7e:e0:c4:6e:e9:46:ec:bd:8b:58:bd:62:f1:92:a1:98:f7:
         9f:ae:7a:ea:02:4e:a2:c2:a4:59:d9:a2:78:1c:34:08:00:5e:
         5d:0e:c9:1b:7d:a1:e7:e4:09:4f:7a:d4:e0:1c:c0:ac:ec:25:
         67:86:9b:2e:b6:65:19:08:23:23:a9:39:4e:39:da:ee:15:31:
         77:a7:27:ac:78:75:21:c3:76:0d:58:6f:78:d4:a4:5f:2b:d6:
         b0:66:44:88:77:a5:24:bf:42:a2:e1:59:76:c8:76:73:ac:8c:
         14:2b:69:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:38:15 2026 by rpki-client