Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
File:                     41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json)
Hash identifier:          gc8Gpqa1uAMMRhzjJtIH1ItRSMk8Zt1n3yQLRGRC1y8=
Subject key identifier:   B1:48:0F:C0:6C:4A:B3:F3:78:3C:C8:B5:9F:24:CE:7F:E6:13:F9:28
Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
Certificate issuer:       /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Certificate serial:       01A0CC35F5352C9F97E9BF3DF4DE5088B140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
Manifest number:          1A6C
Signing time:             Wed 23 Sep 2026 03:01:23 +0000
Manifest this update:     Wed 23 Sep 2026 03:01:23 +0000
Manifest next update:     Thu 24 Sep 2026 03:01:23 +0000
Files and hashes:         1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: vo4j+F+9d9yFhAyX8N34lspoO3p1yJ5svbvPkp/LqXI=)
                          2: 6L2DF24h5kP__h0ZXcHhhgUtOHE.roa (hash: k3rPz38ZgJPfjpSFDtarFqrK6I1kr4U/pIOZrMPrf6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:f5:35:2c:9f:97:e9:bf:3d:f4:de:50:88:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
        Validity
            Not Before: Sep 23 03:01:23 2026 GMT
            Not After : Sep 24 03:01:23 2026 GMT
        Subject: CN=b1480fc06c4ab3f3783cc8b59f24ce7fe613f928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:c4:14:1d:2c:16:c0:b2:f4:d8:42:40:77:86:
                    c0:ca:eb:00:a1:2e:f3:ac:1f:d7:86:a7:27:bd:ec:
                    85:28:1d:47:3a:ec:2f:32:53:dd:12:61:9e:31:e2:
                    f6:5a:fa:67:7a:a3:09:75:a4:b5:31:70:5a:84:a8:
                    d0:89:a9:2d:24:d3:c9:a3:e7:f5:88:30:fd:74:7f:
                    1a:39:18:f5:07:5d:23:01:1b:8c:61:f6:24:b0:9a:
                    09:88:37:61:2b:9e:a4:d5:ed:d5:72:ae:4e:21:20:
                    9b:c9:ea:c8:6d:00:2e:6a:3b:7b:60:fb:9f:02:ec:
                    6a:da:4b:a1:13:fc:3c:c2:60:bc:54:bc:35:56:f4:
                    48:70:7c:61:f6:3a:4a:d9:85:4c:9b:07:02:80:88:
                    28:e4:23:31:56:46:a3:09:56:e8:cc:1f:9f:d1:84:
                    ee:4c:31:cc:60:9b:fd:f3:a4:d6:38:d6:f6:6c:35:
                    56:a3:78:64:ab:7c:b9:97:47:60:8a:bc:c7:20:fe:
                    93:91:95:3a:bc:35:4c:23:28:b1:bd:79:df:70:ad:
                    ed:74:e6:99:79:26:af:01:7b:ba:2c:94:27:6d:c4:
                    6d:98:ff:f2:90:7f:e2:f6:29:5b:2d:37:5b:97:74:
                    ad:0d:b3:dc:76:17:64:b5:d3:47:17:5e:d7:71:fb:
                    85:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:48:0F:C0:6C:4A:B3:F3:78:3C:C8:B5:9F:24:CE:7F:E6:13:F9:28
            X509v3 Authority Key Identifier:
                keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c8:0f:67:4a:00:63:8d:9a:f0:53:1e:31:af:3b:6a:d5:96:
         9e:38:a2:da:55:c0:23:e3:2e:12:57:1a:06:6e:e9:ea:30:bd:
         57:8a:94:bb:b5:ee:43:d3:32:a9:70:7c:c9:7f:a7:39:f0:c1:
         ed:1f:6b:90:c6:e2:9c:f7:6e:90:af:bf:6d:6d:f1:73:96:73:
         ce:26:05:c4:3c:3d:ce:54:a0:89:24:93:0e:e4:82:5c:3e:50:
         8d:21:d3:a2:04:7a:e3:0b:a6:f4:89:8d:6c:c8:84:a5:b6:f8:
         f8:7d:b8:13:06:37:f8:d9:16:58:c2:b3:6b:35:ea:b2:2a:85:
         4e:e5:90:35:e4:2a:eb:d2:e5:8d:da:ef:fb:84:7b:6f:f3:14:
         11:e9:ca:bb:eb:17:b7:4d:ef:e6:98:69:e2:a2:22:0c:14:66:
         88:f4:87:c4:ae:31:84:d6:85:28:d8:9a:53:f9:f3:64:bb:9a:
         d0:ea:9c:73:86:9e:b4:67:bc:ad:c7:ec:dc:11:3a:bb:dd:42:
         0f:40:43:73:d2:d1:ff:ec:d0:70:b2:b8:8e:c2:48:ad:2d:82:
         f5:a7:8f:cf:47:e9:3c:07:ea:56:72:6e:0b:16:1a:93:f3:65:
         ea:0a:7f:ea:76:04:56:26:f4:d3:10:aa:3f:d4:f8:7f:3c:84:
         86:b8:5c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:17:33 2026 by rpki-client