Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft
File:                     _CIELXaLE__agpyz8dfSzz--ihU.mft (raw, json)
Hash identifier:          5FCt1S0v6OHtRmnTLVNxqw/9Q/vIHYk1BkaetzuWw+Y=
Subject key identifier:   1F:B9:4D:D8:00:7E:85:02:6D:26:71:16:DB:B2:63:CC:C2:09:2C:CB
Authority key identifier: FC:22:04:2D:76:8B:13:FF:DA:82:9C:B3:F1:D7:D2:CF:3F:BE:8A:15
Certificate issuer:       /CN=fc22042d768b13ffda829cb3f1d7d2cf3fbe8a15
Certificate serial:       01A10249388D23C177D76D7AB0B597630E8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft
Manifest number:          034F
Signing time:             Sat 03 Oct 2026 15:01:55 +0000
Manifest this update:     Sat 03 Oct 2026 15:01:55 +0000
Manifest next update:     Sun 04 Oct 2026 15:01:55 +0000
Files and hashes:         1: 4A6CcXXrSbIURymlP_OiEuUadzE.roa (hash: XB/aS0f5fLagh24RTymZ9tRIq1RWpYe8OmUQeqUA544=)
                          2: _CIELXaLE__agpyz8dfSzz--ihU.crl (hash: IX5m2QHYNn2B7quA7qHrnjB9jdsrL9lxgVghxOvC/Lg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:49:38:8d:23:c1:77:d7:6d:7a:b0:b5:97:63:0e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc22042d768b13ffda829cb3f1d7d2cf3fbe8a15
        Validity
            Not Before: Oct  3 15:01:55 2026 GMT
            Not After : Oct  4 15:01:55 2026 GMT
        Subject: CN=1fb94dd8007e85026d267116dbb263ccc2092ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:6e:c3:39:d6:1b:25:5e:c3:f5:31:8b:4b:
                    2d:c8:df:be:fd:f3:f3:f5:d1:af:98:4a:2d:c5:d7:
                    e2:b7:f0:1c:d9:5a:c7:d9:82:ef:5c:de:b0:c5:2d:
                    40:62:c1:ce:23:f4:2a:20:55:33:7e:db:5b:25:8c:
                    ae:13:e1:9f:32:49:75:1c:95:bf:44:f4:fc:2d:ee:
                    ac:d7:ff:71:d8:95:1c:06:9f:31:4c:18:ca:c1:a4:
                    4e:13:a8:0d:58:46:88:cb:75:77:46:8b:63:03:fa:
                    c6:a4:fa:9a:39:c6:59:b5:40:7d:c7:f1:7e:65:42:
                    75:c8:29:59:0d:a5:14:70:67:13:da:3c:47:13:27:
                    53:b6:84:b2:0a:d7:24:76:85:52:2c:87:5b:02:71:
                    8b:5d:5a:e3:13:b3:77:59:b2:3f:d4:30:7f:3b:06:
                    49:59:ac:29:7f:24:59:02:9c:9e:03:35:24:ec:3f:
                    ac:b9:f7:ab:55:4f:8a:ba:60:b7:b4:2f:03:73:20:
                    8e:88:bc:75:a0:f2:bf:1b:37:1a:fa:98:76:eb:0c:
                    6f:3f:50:89:ea:d4:2c:76:9c:00:9a:72:1e:69:b0:
                    61:73:de:89:11:b3:72:fd:d5:43:02:87:6e:53:f3:
                    ce:e9:7c:a0:66:a5:98:cb:6a:78:fc:71:b8:42:bd:
                    1b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B9:4D:D8:00:7E:85:02:6D:26:71:16:DB:B2:63:CC:C2:09:2C:CB
            X509v3 Authority Key Identifier:
                keyid:FC:22:04:2D:76:8B:13:FF:DA:82:9C:B3:F1:D7:D2:CF:3F:BE:8A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:d2:22:6b:ed:38:8d:a9:c2:b1:63:31:fd:ee:d8:89:7a:ac:
         99:a3:5b:66:59:1a:42:28:d7:8e:98:5d:91:78:85:c3:c4:cf:
         03:fa:7e:e9:31:a9:bd:8c:f4:fa:ee:30:16:ab:7a:fb:5f:d1:
         3c:0d:21:d1:aa:e8:54:5d:8c:59:fd:d0:a8:c8:01:da:97:d2:
         64:33:84:35:fa:22:8b:6c:60:ee:c1:d6:08:7c:99:82:03:17:
         a2:ef:4b:36:ae:a0:d7:a8:19:58:1e:76:83:8a:65:1b:de:f6:
         8f:8a:5c:3e:de:0d:91:4f:21:03:0c:53:87:01:99:08:a0:15:
         ce:67:42:50:5f:0e:75:4c:3c:50:90:59:f3:f4:dc:e0:eb:40:
         27:d3:8c:13:06:d2:70:2a:dc:37:04:42:2d:21:b6:21:81:dd:
         03:af:40:00:5d:47:18:4d:95:82:3f:d0:92:02:6d:b9:f5:5a:
         f9:22:2a:79:f6:e4:6d:56:e5:19:73:76:f5:e8:8b:40:fe:ec:
         0f:fb:fd:24:8f:9a:91:eb:24:e6:88:16:55:3e:f2:d0:f1:63:
         54:e5:c8:e8:df:fc:33:ad:9a:4f:5f:09:52:0d:21:31:60:08:
         91:ca:17:56:b8:2e:e4:8a:3b:8f:73:4e:e8:62:14:10:a7:b7:
         93:0f:2b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:01:23 2026 by rpki-client