Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
File:                     1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json)
Hash identifier:          MjNSklVXIwV2GaSYfQVQSY9omzKzT61KapSdH/YsSLY=
Subject key identifier:   F6:9D:D5:77:21:63:05:27:37:C5:59:B2:E9:63:73:E4:72:11:4D:89
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Certificate issuer:       /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial:       01A0D15BF60E2C253F6734A8BBC5EB315D2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
Manifest number:          1A6D
Signing time:             Thu 24 Sep 2026 03:00:59 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:59 +0000
Manifest next update:     Fri 25 Sep 2026 03:00:59 +0000
Files and hashes:         1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: 3/JElPKPkBI8GV6lXT2MpTgI/PrcwLBhxbjWs3F7xO4=)
                          2: Rho95ZWPheaVQQ9rPl1_APX-IdU.roa (hash: C+usd2BKZ4KTjGvMtB8Sy6rObSrr4wOsZ9I+pM/IkIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:f6:0e:2c:25:3f:67:34:a8:bb:c5:eb:31:5d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
        Validity
            Not Before: Sep 24 03:00:59 2026 GMT
            Not After : Sep 25 03:00:59 2026 GMT
        Subject: CN=f69dd5772163052737c559b2e96373e472114d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0c:5e:b1:07:bd:b1:30:cd:c3:86:d4:65:de:
                    82:e3:71:66:3e:be:dd:1a:99:b6:e9:9f:b1:ce:2d:
                    db:3e:2f:aa:be:a7:e1:3a:0c:8f:52:02:80:e2:5f:
                    28:17:83:fa:29:2c:a5:52:fa:05:78:f6:bd:41:d0:
                    48:d3:1e:04:f8:08:bf:b5:82:ac:fa:eb:b7:53:7f:
                    88:d2:00:ab:9a:9a:1e:10:aa:53:1d:ef:01:0b:c8:
                    b7:c4:7e:e1:74:65:7e:e7:c5:45:e7:ce:e3:90:79:
                    f7:0e:5d:22:88:8a:e1:52:f3:04:e3:c9:97:05:4d:
                    03:b0:db:13:66:a1:2f:53:5e:42:e7:12:da:5b:3b:
                    a6:93:c5:87:e0:cc:6d:80:84:32:ea:5f:79:ce:3c:
                    74:ef:20:82:60:5e:0e:4e:35:b6:d3:62:09:fe:be:
                    5b:8b:5c:9d:37:31:60:0f:46:a4:74:fc:48:1f:9b:
                    92:55:14:fa:64:04:ad:2f:ef:1e:ec:27:88:31:4f:
                    d9:7b:e3:4e:de:83:3f:76:7c:22:56:86:37:6f:72:
                    fe:5c:63:d0:c8:fa:a0:84:b6:f7:75:00:dc:20:aa:
                    7b:ca:18:5f:07:3b:32:f2:2f:5f:a8:72:2c:da:91:
                    c8:9c:87:02:cd:c5:9d:46:08:20:0a:d7:03:9c:35:
                    b2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9D:D5:77:21:63:05:27:37:C5:59:B2:E9:63:73:E4:72:11:4D:89
            X509v3 Authority Key Identifier:
                keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:0b:26:8c:a5:21:e2:96:0a:c6:ab:52:c4:5c:38:fd:e7:a4:
         ab:ef:db:0e:c7:20:5f:8c:e6:76:28:29:51:09:48:35:4c:c3:
         97:f7:c9:3e:49:d1:2c:3d:d2:e3:77:e8:5b:14:9b:8e:9c:ae:
         cc:6e:6c:be:4c:9c:95:e5:7e:9f:74:cc:0c:9a:b3:de:12:99:
         50:7f:98:50:79:aa:88:90:3b:42:96:e6:48:86:9d:90:ff:2d:
         89:e3:6f:8f:24:ba:7b:6a:2b:74:0b:a8:7d:d1:a8:9d:cc:50:
         87:f6:4a:bc:56:6d:3b:11:d5:5e:3a:91:07:63:09:95:8a:08:
         ee:6f:b6:48:05:db:17:4b:1d:40:ae:40:4b:c3:21:08:05:fe:
         cb:ad:e8:ca:5b:b6:92:ee:84:10:84:6d:61:03:85:4c:23:18:
         0a:4d:d0:d3:dc:60:c0:a7:39:21:20:4f:3f:c9:60:36:1b:04:
         ad:fe:29:30:c0:ee:be:03:25:16:39:8f:a4:0e:48:44:75:7b:
         61:b1:ee:7d:97:a0:f5:93:56:5d:b4:86:53:ed:50:9e:6e:43:
         61:a8:bf:2d:69:b6:9f:46:77:43:c5:aa:3b:a9:2a:cf:2b:c0:
         18:ab:2c:4d:e1:d8:fe:55:e5:43:b3:19:1a:8e:bb:87:73:64:
         c9:a7:c6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:04:44 2026 by rpki-client