Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
File:                     H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json)
Hash identifier:          HXjxIH7SzEafD3cxIEXLJRIPquAB5bMLz29uJkZ4E08=
Subject key identifier:   5C:A7:AA:1A:E1:14:D4:B4:82:64:8B:D1:50:14:39:32:6E:CD:85:15
Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
Certificate issuer:       /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Certificate serial:       01A126C2E7C8C2C100814BBD4BE24C8F64B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
Manifest number:          03BE
Signing time:             Sat 10 Oct 2026 17:01:09 +0000
Manifest this update:     Sat 10 Oct 2026 17:01:09 +0000
Manifest next update:     Sun 11 Oct 2026 17:01:09 +0000
Files and hashes:         1: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: cb79+JVwWjSR4FYAlleezAMHBkdfTNAKoBtzrUQoXnM=)
                          2: XOOQ9FAgyADXPO_GL-32MuK-1-4.roa (hash: Rqa7wVCVV9KpfmZD61heEG7d6s4LvjlFlafZP5De1nI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:c2:e7:c8:c2:c1:00:81:4b:bd:4b:e2:4c:8f:64:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
        Validity
            Not Before: Oct 10 17:01:09 2026 GMT
            Not After : Oct 11 17:01:09 2026 GMT
        Subject: CN=5ca7aa1ae114d4b482648bd1501439326ecd8515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:81:47:5b:e5:75:dd:84:39:29:1f:8a:7f:
                    0b:41:50:eb:ad:ed:57:c5:f6:50:fb:dc:f6:da:b5:
                    ba:d3:bc:ea:d8:38:97:e0:fe:48:4d:b9:42:eb:23:
                    9b:4b:0a:fc:69:c9:c6:eb:b5:83:fd:67:2a:37:f5:
                    03:d0:8f:a5:dd:c5:14:42:0d:ce:6e:6b:c2:fb:a0:
                    63:6a:92:59:8e:2b:63:9e:9d:01:4a:ec:88:f0:23:
                    33:e4:26:0b:6c:12:6d:7c:39:72:a9:41:e0:93:06:
                    d9:f9:20:01:34:84:1e:4a:f6:a3:95:96:23:e0:07:
                    79:cf:fe:97:09:54:0a:b2:10:6f:04:b3:d9:be:9a:
                    21:d9:6a:52:88:d8:c0:25:41:fe:80:3c:43:b1:1a:
                    c4:ea:f4:a3:6a:05:30:6a:e0:8d:b9:7f:c8:43:ed:
                    77:84:bd:75:9b:56:15:08:de:09:ec:6e:8f:75:39:
                    f3:79:2c:0a:d0:69:52:32:69:22:5c:6f:0e:58:29:
                    dc:ff:d2:e3:f3:6e:54:29:29:45:ef:a4:2f:51:e2:
                    de:e3:37:85:0c:28:c2:ff:e3:d1:b1:6a:39:8b:8a:
                    cf:d3:13:41:b8:d8:9d:36:ca:eb:9c:ed:ea:65:f4:
                    10:76:93:20:9a:19:13:13:52:b7:ac:d5:9c:6d:78:
                    fe:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A7:AA:1A:E1:14:D4:B4:82:64:8B:D1:50:14:39:32:6E:CD:85:15
            X509v3 Authority Key Identifier:
                keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3d:c6:c3:b2:9c:ce:c1:4d:90:2d:fe:24:ef:24:72:0b:a4:
         7d:c3:fc:2d:93:41:99:76:c4:c4:21:74:e2:8f:5a:e0:8a:53:
         14:f9:35:74:58:ee:88:7d:dc:42:e7:2a:de:74:77:b8:be:79:
         1c:c6:e8:1f:1a:fb:a3:20:2b:e0:1e:5c:5f:bd:46:2e:ca:da:
         2f:d4:90:ab:0e:f2:c9:3b:1b:cb:40:95:2e:a5:44:4e:2e:30:
         78:b2:44:ff:cc:c5:e9:6a:58:87:fb:aa:ec:d0:a7:a4:cf:47:
         73:93:05:a3:f9:3f:39:f7:22:23:d7:17:74:9a:10:da:a1:53:
         a5:42:3b:ae:b7:f1:32:f3:ff:08:6f:fb:c5:67:57:37:3c:91:
         68:78:41:cc:ee:19:1f:f2:4a:9a:6e:51:14:6b:26:c1:0b:cb:
         1c:52:03:97:a9:27:3a:64:92:74:1e:1b:84:3b:86:81:4e:bc:
         17:38:22:1a:a3:af:5c:2d:00:9e:c8:f7:07:7d:8a:67:1d:62:
         f5:ac:8e:bf:89:62:0e:2b:b5:15:db:14:41:fe:36:ce:ff:65:
         98:02:66:e4:cc:5f:e6:a5:8a:10:a9:7d:7b:00:e8:c9:2a:24:
         57:9b:45:be:4a:fa:a8:03:f8:87:aa:90:31:4f:bb:20:3a:b4:
         18:43:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:09:38 2026 by rpki-client