Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File:                     1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier:          5e4G5bxNyWsaxqgid47KQjT3LhCJh8E/eGfAA892zos=
Subject key identifier:   06:E5:5F:4B:70:6F:FC:9E:10:8C:F0:0E:84:B6:C3:AA:5C:F7:B3:2A
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer:       /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial:       01A0CD7F28A42EFCF2C6B623B04E59B20172
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number:          180C
Signing time:             Wed 23 Sep 2026 09:00:57 +0000
Manifest this update:     Wed 23 Sep 2026 09:00:57 +0000
Manifest next update:     Thu 24 Sep 2026 09:00:57 +0000
Files and hashes:         1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: NfaKmRRNfhlLV/c1Xk4GLDh4iuig1so4VET6p4jR2NE=)
                          2: DIEeHXr-sg72w8tBgzQ5nqnQ7go.roa (hash: EtH8YkhhVk7GVyIh/CoOOspQ4bbxWgxf9R15/OkaX/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:7f:28:a4:2e:fc:f2:c6:b6:23:b0:4e:59:b2:01:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
        Validity
            Not Before: Sep 23 09:00:57 2026 GMT
            Not After : Sep 24 09:00:57 2026 GMT
        Subject: CN=06e55f4b706ffc9e108cf00e84b6c3aa5cf7b32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:b8:89:14:64:81:a7:c4:6f:1f:d6:53:26:
                    d2:c5:75:3d:86:4b:9d:53:a4:b3:aa:21:50:e2:0f:
                    f3:14:e7:17:57:6c:64:0f:20:73:25:71:be:2e:ad:
                    bd:d6:06:50:55:cf:35:f2:0e:47:9c:79:41:e9:66:
                    be:d9:39:87:32:22:c7:b6:e6:ce:2a:96:af:3b:b1:
                    55:ed:05:4a:40:71:b8:36:8a:c4:ce:e4:2f:69:80:
                    ea:80:86:87:49:94:0a:2d:2e:6e:a8:3e:58:87:81:
                    5b:bc:02:2a:fb:1c:09:b6:80:ca:ba:06:15:b3:b3:
                    92:dc:18:5f:98:7d:6f:f9:db:40:58:f4:59:fd:86:
                    7a:d4:d2:cb:29:b6:95:66:c3:af:f0:22:96:ea:0a:
                    6b:41:50:0e:27:0f:8b:55:a7:d8:93:6e:b7:82:74:
                    b8:c1:13:ef:fc:69:61:f3:05:f1:73:20:6a:c6:d9:
                    4a:b2:bf:dd:60:ae:21:bc:a4:ad:67:c3:44:b4:92:
                    5f:35:d2:23:13:36:cb:d0:2b:5a:2a:a3:17:97:88:
                    a0:4e:c1:69:a9:fe:59:48:30:69:79:39:4a:65:d4:
                    8c:5d:09:b7:5b:b8:bd:9a:79:89:43:ff:9c:c9:74:
                    15:9e:f4:d8:7e:0f:e2:5c:c9:c7:6a:e2:8a:c8:3b:
                    02:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E5:5F:4B:70:6F:FC:9E:10:8C:F0:0E:84:B6:C3:AA:5C:F7:B3:2A
            X509v3 Authority Key Identifier:
                keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:42:96:0f:c6:34:56:6c:a5:8d:72:1c:36:14:1f:f2:3b:3e:
         2f:e1:f3:de:c3:1e:75:d0:02:52:83:e5:0c:8e:8b:a0:13:87:
         f2:73:09:76:a9:bf:83:91:0d:7b:48:49:62:48:dc:8a:3e:83:
         55:e5:48:2e:fc:ef:5d:47:50:b6:a4:ce:45:15:41:04:54:c4:
         42:d2:42:d1:65:1a:13:be:46:4f:28:fa:9c:c6:81:1d:ea:f8:
         fa:e0:f1:e1:b4:d5:ca:bc:62:55:a0:46:9f:be:42:05:1a:a4:
         ec:ed:38:cc:98:e2:a2:62:73:bb:c3:33:bb:0d:95:78:06:8c:
         79:92:7c:88:02:7f:4f:d4:47:0d:bc:d0:79:33:49:8b:33:fa:
         55:33:c7:b0:2c:47:2c:45:71:17:47:9b:d2:87:6e:15:80:85:
         95:33:ef:17:04:91:6d:e1:64:23:6c:87:a1:cd:3c:3f:1b:7e:
         2e:b9:85:86:86:af:33:2f:76:b4:2c:70:d7:d8:7f:b6:98:44:
         c7:3c:fe:81:7c:3b:f6:9c:43:dc:0a:0b:79:8f:ea:10:06:64:
         eb:9f:21:ac:b9:84:15:87:89:8c:7d:3f:9b:32:fc:e3:d8:ff:
         97:62:56:55:df:1a:1c:ee:2f:2d:6d:27:43:3a:07:bc:0c:5b:
         36:75:7e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:36:22 2026 by rpki-client