Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
File:                     1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft (raw, json)
Hash identifier:          1rwqm49gXSAvvTMxR9Fr/cBo1Jo6STTASuyO7vg6tMw=
Subject key identifier:   B5:13:67:97:0F:4B:F4:57:BC:35:28:A5:D9:75:80:56:BD:47:BE:99
Authority key identifier: D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1
Certificate issuer:       /CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1
Certificate serial:       01A0E5F5D69D826288801323FF4FA867F6A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
Manifest number:          055C
Signing time:             Mon 28 Sep 2026 03:01:28 +0000
Manifest this update:     Mon 28 Sep 2026 03:01:28 +0000
Manifest next update:     Tue 29 Sep 2026 03:01:28 +0000
Files and hashes:         1: 1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl (hash: If5/8PsThVy9sC+RsGyqAx9ZB83pvj4FA400wv1FDTY=)
                          2: qMQrhVdpokolQWUOh4o5Ri8JueU.roa (hash: kVKK0WjFieFltJV66QufbgDou6/7+zDDk1pZJHeL88k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 03:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:f5:d6:9d:82:62:88:80:13:23:ff:4f:a8:67:f6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1
        Validity
            Not Before: Sep 28 03:01:28 2026 GMT
            Not After : Sep 29 03:01:28 2026 GMT
        Subject: CN=b51367970f4bf457bc3528a5d9758056bd47be99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4b:0e:c2:83:24:ab:93:45:c8:d9:8d:cf:94:
                    20:45:4a:99:f2:87:fd:c6:ea:13:a1:f7:61:cc:de:
                    18:f8:d0:79:a3:4e:01:58:e1:4d:4f:d6:73:4a:a6:
                    9e:15:23:40:9e:94:dc:a7:ab:be:2d:a5:2d:64:91:
                    98:f8:41:b8:75:c8:cf:7c:8f:e1:1e:ad:6a:70:11:
                    1e:2e:39:5f:1d:86:a8:ed:6c:5e:35:c4:7c:77:af:
                    bb:92:41:fc:5f:a5:cb:83:f5:05:46:f5:b1:b3:53:
                    cd:d6:6e:17:9e:e8:a6:ef:d4:13:4e:ad:97:1c:69:
                    bf:23:23:ae:81:61:f8:69:1b:2f:aa:0e:fa:26:d4:
                    8c:e6:8e:7d:21:b4:99:57:20:60:9e:d9:dd:8b:68:
                    1c:58:05:3d:48:c8:62:6c:75:fd:a9:c3:ac:3c:b3:
                    5c:99:dd:af:03:6f:8f:a0:bf:f8:8c:02:19:44:88:
                    63:bd:e4:97:cc:52:60:45:a5:14:60:1b:ec:48:46:
                    1b:70:55:d9:28:42:ac:1d:81:96:fb:d4:4d:f1:ed:
                    76:3a:c2:1a:c9:2b:4a:64:2f:77:0b:2b:da:2b:c9:
                    57:c1:4b:10:83:7d:cd:3d:da:9b:e7:9a:a3:65:66:
                    63:36:d7:58:23:02:b0:a5:1e:46:45:86:9a:b2:cc:
                    9f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:13:67:97:0F:4B:F4:57:BC:35:28:A5:D9:75:80:56:BD:47:BE:99
            X509v3 Authority Key Identifier:
                keyid:D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:98:ac:45:1c:e3:00:55:e7:75:7b:9a:bf:fc:17:5c:1b:17:
         f2:f2:fb:21:98:1b:12:2e:95:95:51:fb:61:4e:d0:5d:02:25:
         f8:2a:bb:f1:75:14:cb:93:c3:f8:12:85:79:d9:d8:0d:17:8f:
         12:db:c4:33:ac:6b:14:55:be:1b:67:4b:11:d1:e0:2c:3a:f1:
         03:53:6b:a5:8a:c9:bb:9d:a4:6a:fd:a1:24:39:16:78:b7:3e:
         18:79:82:7d:11:d5:83:4c:9d:72:02:c9:ff:73:2d:90:c0:fb:
         ac:71:98:81:02:74:74:5d:79:b3:19:f6:0b:8e:3e:31:13:08:
         7e:cb:9a:40:91:57:7a:9b:64:fa:a8:18:e8:31:fe:3f:8b:34:
         49:e9:73:6a:83:a2:9b:57:fd:51:9f:10:52:5b:ff:e8:e8:3f:
         74:7a:c3:b7:c5:3c:b5:47:86:e2:82:29:1d:d9:b3:b3:14:5d:
         59:36:65:80:44:d0:77:e8:e3:6c:13:5a:ee:e0:95:98:09:a9:
         3d:88:ac:44:dd:9e:d7:e0:2d:dd:22:0b:33:56:43:e2:8a:9e:
         17:7c:0c:c0:fa:95:07:18:48:4e:56:db:56:9f:53:63:97:f9:
         d0:05:d9:51:03:20:d9:27:c8:01:d4:98:db:40:4d:39:59:47:
         b4:c9:15:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:27:52 2026 by rpki-client