Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File:                     FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier:          yNI1Vro4/gK4PfJ4HWwB+kEVDnVEEj/vCPsCJLdQxWM=
Subject key identifier:   A5:DE:6E:07:10:6A:65:67:A0:9A:1E:41:91:D2:31:06:F8:B6:19:95
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer:       /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial:       01A1032486B11B8D12C938523691F1A0FA7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number:          182A
Signing time:             Sat 03 Oct 2026 19:01:27 +0000
Manifest this update:     Sat 03 Oct 2026 19:01:27 +0000
Manifest next update:     Sun 04 Oct 2026 19:01:27 +0000
Files and hashes:         1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: deDjJsDYqYB3znite1kPOwVt68BZoYB0OvMfVOICrTw=)
                          2: PAWQJ--pyQDWqisMk27pgjU-VTo.roa (hash: LFkt5XtALwLDqGdtvqPz4gaQ669NVQcvwDZAzQf4rZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 19:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:24:86:b1:1b:8d:12:c9:38:52:36:91:f1:a0:fa:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
        Validity
            Not Before: Oct  3 19:01:27 2026 GMT
            Not After : Oct  4 19:01:27 2026 GMT
        Subject: CN=a5de6e07106a6567a09a1e4191d23106f8b61995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:16:d2:54:42:f6:ea:68:5c:e7:22:a0:88:6d:
                    a1:4b:1a:ce:0a:a9:5d:66:33:85:3c:f0:d6:fb:53:
                    eb:ff:09:18:be:69:df:f0:2f:27:76:ad:87:e6:d0:
                    be:ff:d0:1d:e6:45:67:fb:36:5c:f2:08:c5:c0:5b:
                    b9:f9:ad:b9:97:4d:dd:5c:2b:5c:5a:45:20:92:e1:
                    5d:05:22:35:ce:37:2d:09:f9:65:3d:e6:9b:ca:5c:
                    cd:7f:d0:51:ab:f8:42:51:95:0e:98:4c:2e:5f:dd:
                    7f:bd:81:1d:3c:81:e9:5b:cb:8c:f0:e2:37:5d:6c:
                    00:36:d4:dd:5d:0d:05:17:55:cf:e9:d1:a5:c4:eb:
                    74:91:33:7c:04:e2:22:ee:9f:61:74:81:f9:1b:2c:
                    10:bb:c5:ea:4a:fc:d2:a4:01:7d:40:ed:83:83:1f:
                    d1:a5:12:10:8e:1c:74:a3:e7:bc:4e:a0:2d:c2:95:
                    18:12:f8:5a:9b:cf:60:88:b1:1c:d3:c3:04:10:f0:
                    e8:34:c5:22:b0:19:cb:16:88:14:bb:7a:38:d2:6e:
                    51:7b:65:b0:01:81:03:38:b9:ad:8b:17:ba:ae:57:
                    43:92:25:ff:ef:a5:a5:94:df:4c:b9:67:e4:3f:cc:
                    59:51:f0:a1:25:a1:41:5a:72:d9:c4:d2:a5:69:f6:
                    a2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DE:6E:07:10:6A:65:67:A0:9A:1E:41:91:D2:31:06:F8:B6:19:95
            X509v3 Authority Key Identifier:
                keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:8b:a6:c9:c5:f7:18:ca:9f:f8:d4:bf:da:8c:35:80:24:2f:
         4f:10:41:a0:e0:68:c2:ef:90:d5:ad:8a:ce:ee:fd:13:58:a8:
         45:b4:d6:50:12:0e:6b:ec:7b:f2:27:c4:64:af:2e:7a:38:46:
         a9:82:ae:49:0f:43:b9:3c:7c:59:98:7f:ed:50:eb:5b:e6:41:
         12:b7:b2:b8:ac:84:ba:da:74:bb:c9:8b:aa:0d:02:06:85:f4:
         11:b2:db:3d:73:81:f0:73:1f:5f:4c:f5:eb:e2:98:e2:57:9e:
         8c:d4:c7:48:72:1e:af:61:4c:69:f2:e1:c4:62:4b:c3:b0:9e:
         90:73:cd:cb:98:a6:0a:03:3d:03:ad:72:85:e8:10:aa:88:a6:
         81:0c:9d:22:22:84:a9:0d:20:2d:dc:74:0e:cb:c2:59:41:74:
         c2:6a:37:d5:eb:c3:49:20:db:50:66:98:aa:a5:4b:aa:66:97:
         17:3b:0a:b4:5f:0b:e0:f1:71:8b:6b:67:60:97:d9:dc:b6:82:
         99:53:4d:0a:cd:b6:34:d7:ce:7d:e7:03:8d:f8:56:2c:b9:c8:
         96:42:75:2b:64:93:c5:43:9a:f8:af:50:38:99:da:b5:ba:44:
         48:fe:60:c3:4c:55:f4:28:e5:fe:6b:3f:44:4d:f7:47:80:7f:
         03:b3:29:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:49:57 2026 by rpki-client