Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
File:                     1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft (raw, json)
Hash identifier:          uFAYrcr7Vx2IWjJEYweVaIj4ZIe5avuoMutcnFtGWew=
Subject key identifier:   4F:42:E4:93:A8:03:4C:F9:10:06:A5:52:87:DC:D8:68:C2:35:7F:DD
Authority key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
Certificate issuer:       /CN=fab796d980fa60fe2514fce62646f45d12c95165
Certificate serial:       01A0CD7EC93D376B8CD227127C40E8D7C0E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
Manifest number:          1A6E
Signing time:             Wed 23 Sep 2026 09:00:33 +0000
Manifest this update:     Wed 23 Sep 2026 09:00:33 +0000
Manifest next update:     Thu 24 Sep 2026 09:00:33 +0000
Files and hashes:         1: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl (hash: WfBDTmZBC2B0LGWjqoJtjyo9dTBCb8No+tf8iYGhShw=)
                          2: YPX4hTijPNtYr9QhjImFgFRXgKg.roa (hash: Uysgi8w4knYDa70kMhClAKgRlCbLW7PT65F4/2d78Bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:7e:c9:3d:37:6b:8c:d2:27:12:7c:40:e8:d7:c0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab796d980fa60fe2514fce62646f45d12c95165
        Validity
            Not Before: Sep 23 09:00:33 2026 GMT
            Not After : Sep 24 09:00:33 2026 GMT
        Subject: CN=4f42e493a8034cf91006a55287dcd868c2357fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dd:45:e4:75:4e:ee:6b:d3:e7:fb:fa:9e:39:
                    b9:fe:95:7e:09:19:28:49:47:81:35:47:27:34:60:
                    e2:eb:02:b1:06:75:3a:64:86:c5:58:b0:08:3d:96:
                    ae:91:a5:ba:b9:16:01:cb:45:27:b1:b0:9d:15:8e:
                    4c:77:f1:da:e4:0e:e2:ca:2c:4a:e8:67:7f:25:f7:
                    13:a8:ef:57:09:32:30:5d:49:94:b4:42:69:6e:19:
                    6a:b0:62:ec:7f:5c:a1:40:95:cc:43:8b:5f:bb:82:
                    cc:42:0e:18:59:ec:5d:45:e9:3c:91:4f:22:ce:c6:
                    55:b8:af:a8:23:bd:5d:9a:a0:ee:cf:19:32:61:da:
                    ab:cd:92:58:8d:3f:d8:c5:45:3f:4c:e2:f2:f7:df:
                    af:42:e4:ce:c4:a2:ec:79:bb:4a:65:10:da:08:85:
                    2a:7e:f9:36:6e:33:fe:96:c2:cc:4e:35:65:db:fa:
                    2b:8e:ea:84:0a:43:25:d5:8f:f4:c7:0a:02:98:70:
                    c3:e1:07:e5:21:49:73:99:c4:21:ff:ac:d5:0c:2e:
                    86:92:ed:6b:a0:7b:36:59:02:09:ed:1f:a4:29:07:
                    d3:ea:82:e0:88:ef:5d:ae:22:ce:91:ec:94:0a:a2:
                    b5:b5:f8:95:dc:11:da:4e:04:60:16:3e:15:ae:db:
                    4d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:42:E4:93:A8:03:4C:F9:10:06:A5:52:87:DC:D8:68:C2:35:7F:DD
            X509v3 Authority Key Identifier:
                keyid:FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b6:98:e5:cb:01:b4:3f:7a:7a:ec:0d:04:98:82:76:fd:94:
         f1:65:bb:74:0e:da:b0:0f:cf:25:8f:ee:bc:ed:03:2e:55:ce:
         de:ad:e0:a2:b0:30:62:18:ca:05:55:3a:9f:f8:d1:0b:3c:2e:
         2d:2c:7e:51:4c:2d:6d:a3:3a:fc:71:d1:69:fe:e5:c1:39:96:
         52:20:ee:1e:55:48:64:16:33:7d:34:51:ae:e3:cf:d2:9b:ee:
         b2:7c:a6:1b:90:7b:5a:d0:ed:8b:d9:12:45:43:ec:f3:c9:fb:
         4c:a5:8e:03:16:81:1a:6e:32:f5:55:1c:d8:81:c3:1c:ef:0d:
         0f:0f:95:52:c7:f0:15:c2:ed:63:33:a1:47:e3:40:ee:9e:68:
         f7:f1:20:92:f6:e4:f3:7d:01:31:3f:af:1d:ce:0a:e3:19:e5:
         d7:d2:8a:dc:d8:c4:48:16:9f:a9:c0:96:0c:73:8b:dd:2f:dc:
         82:b0:86:40:20:99:af:e5:8b:c9:74:93:b1:2f:0a:c7:9e:3c:
         22:a5:fb:36:58:a0:2a:cc:92:70:58:c5:46:c6:25:a1:1e:d1:
         67:79:7d:52:cf:05:d3:24:b2:85:28:2a:6d:e3:84:25:7f:6d:
         aa:81:bc:b8:1d:1c:83:af:0d:ce:cd:eb:d3:65:64:8b:04:53:
         3b:84:ae:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:42:21 2026 by rpki-client