Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
File:                     1GbRcMgQujTELpIOhNQmKEWXf4U.mft (raw, json)
Hash identifier:          L3jLAd/99iel/dCO2c3ipzLT5fEN/AtvtpWXATybH+U=
Subject key identifier:   28:59:89:98:9F:EF:B7:59:DB:6D:51:75:DF:CD:77:0D:78:6A:4F:97
Authority key identifier: D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
Certificate issuer:       /CN=d466d170c810ba34c42e920e84d4262845977f85
Certificate serial:       01A0EAE5127C6C540D91EAA947DC13A77128
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
Manifest number:          098D
Signing time:             Tue 29 Sep 2026 02:01:15 +0000
Manifest this update:     Tue 29 Sep 2026 02:01:15 +0000
Manifest next update:     Wed 30 Sep 2026 02:01:15 +0000
Files and hashes:         1: 1GbRcMgQujTELpIOhNQmKEWXf4U.crl (hash: HR3o4iPfRjUXjgdRgwk9b/POuWUx+Nm6elHmerd5kp0=)
                          2: XyvlakrX669O27yJ8vUEJgcOTBA.roa (hash: bXnP/tpzRgnQjjCGNcc58oyJ9DS3aNnplVA7Ww2qw84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 02:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:e5:12:7c:6c:54:0d:91:ea:a9:47:dc:13:a7:71:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d466d170c810ba34c42e920e84d4262845977f85
        Validity
            Not Before: Sep 29 02:01:15 2026 GMT
            Not After : Sep 30 02:01:15 2026 GMT
        Subject: CN=285989989fefb759db6d5175dfcd770d786a4f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:85:23:ae:61:77:06:d2:38:92:e4:9b:c8:
                    a2:53:1c:17:21:5c:e8:30:5b:3c:c1:0c:4c:83:7b:
                    2c:10:89:26:02:b3:b5:c5:a0:c2:9a:90:5d:ff:89:
                    c5:a4:ec:5b:23:61:bb:41:fa:6c:d7:75:df:53:8b:
                    3d:8c:d0:66:15:2e:0e:32:fb:6b:e5:85:cf:44:05:
                    a3:eb:2c:bd:ae:fa:3e:1b:54:81:94:2c:85:a7:92:
                    a3:04:f7:02:bb:5c:d7:bc:86:5b:38:0b:23:9d:0e:
                    99:e1:ad:0e:0b:51:d2:10:41:d9:1e:13:8f:2b:ac:
                    c0:01:a7:da:b5:5f:1f:e7:72:93:47:4a:ff:56:84:
                    a9:5a:36:19:49:23:72:ff:cf:f9:9b:53:69:5a:0e:
                    56:d2:c4:3a:01:64:6f:26:f0:d6:cc:59:28:44:3c:
                    7d:8c:c4:1d:f0:65:dd:0c:92:bc:0b:fe:a9:b5:7b:
                    ed:e7:10:1d:e8:ab:30:ae:be:df:20:ee:2b:80:b4:
                    d1:11:f2:52:cd:0f:25:9c:f1:bc:fe:91:cf:aa:e4:
                    2f:8a:7c:44:ed:d7:f4:7d:31:d1:10:62:ac:22:69:
                    30:6a:85:57:47:a7:2a:a8:24:6b:45:f7:60:2d:94:
                    f4:b6:f7:dd:06:2c:f3:a5:d6:7f:4f:44:e2:81:bb:
                    cc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:59:89:98:9F:EF:B7:59:DB:6D:51:75:DF:CD:77:0D:78:6A:4F:97
            X509v3 Authority Key Identifier:
                keyid:D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:1c:d3:7d:e9:53:6a:86:83:ac:ef:75:de:99:36:43:ba:6b:
         a0:de:98:03:43:00:01:97:97:66:aa:fc:1a:8c:1b:db:d0:43:
         0a:9a:d9:47:c8:d7:03:63:e3:bf:43:0a:c9:9e:f9:e9:7e:ef:
         39:39:06:a6:74:d9:8e:b9:44:b8:75:ab:3a:32:65:2b:81:c7:
         e2:dd:ed:2f:e7:10:35:1e:b7:e9:d8:60:90:59:27:f2:bb:35:
         23:b9:42:63:5c:1a:f3:f3:eb:83:1e:56:47:a9:75:18:1c:50:
         49:75:0a:4c:c5:db:f4:e8:92:c5:e4:4f:f9:cb:16:16:02:71:
         61:64:06:93:6a:f4:b8:7c:99:46:e1:67:6c:ee:4c:6d:14:fe:
         c0:dc:8a:ec:f9:3e:3b:b2:67:38:d3:40:72:c6:b9:3e:b4:01:
         86:04:97:a5:6a:26:5b:9c:09:ac:cf:de:92:63:46:9c:cf:33:
         bb:a6:1c:91:af:77:84:e9:5b:c0:e6:6f:e0:e3:2d:80:a1:13:
         58:f9:07:1d:54:38:bf:9d:7f:a7:d2:8e:90:1b:ef:91:c5:81:
         4b:09:69:aa:8c:0d:37:91:bb:db:1b:2d:b8:79:bd:4d:3b:a8:
         db:55:eb:37:01:ef:ff:b6:6a:6d:17:61:af:18:16:e2:18:6f:
         f4:2e:c4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:38:19 2026 by rpki-client