Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
File:                     1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft (raw, json)
Hash identifier:          NPikcWT6oQU4CQ6Ek2d1V3ImRT0lvXN7CgYigbBVeAg=
Subject key identifier:   EE:D5:2E:83:63:F0:BA:F3:93:AE:C9:65:75:81:FC:CF:A9:FC:E7:5B
Authority key identifier: D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
Certificate issuer:       /CN=d703ceac906d07f74ca94c446303d954666b583a
Certificate serial:       01A0E02AC6A69DE9F25DC17A73C2E7C44237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
Manifest number:          1A76
Signing time:             Sun 27 Sep 2026 00:01:34 +0000
Manifest this update:     Sun 27 Sep 2026 00:01:34 +0000
Manifest next update:     Mon 28 Sep 2026 00:01:34 +0000
Files and hashes:         1: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl (hash: 3xhoZQHkbA9IMPxsZUp8PjyXesYESEtBN9S4qgQeowQ=)
                          2: 4-k2BQwcooezjDVQqn3GH7FYIyg.roa (hash: u1bK1aC0Jx5hdjBp120tHkvEXpneiYzeiUJqLBrJ+rY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:2a:c6:a6:9d:e9:f2:5d:c1:7a:73:c2:e7:c4:42:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d703ceac906d07f74ca94c446303d954666b583a
        Validity
            Not Before: Sep 27 00:01:34 2026 GMT
            Not After : Sep 28 00:01:34 2026 GMT
        Subject: CN=eed52e8363f0baf393aec9657581fccfa9fce75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:da:1e:58:50:7e:df:1b:05:a6:38:4d:64:
                    38:d3:1f:b7:27:54:1e:ca:20:2a:7f:f3:24:68:22:
                    37:11:fa:b0:12:04:ba:67:63:d8:ac:8b:d9:54:ba:
                    78:0d:ca:8a:63:83:cb:d8:ff:e3:8e:ff:29:f8:99:
                    38:5b:2e:c7:c8:80:99:73:57:99:f0:d1:13:d6:f7:
                    ec:0f:be:a2:f4:d6:f6:f2:2a:67:e6:76:35:ad:c2:
                    7f:1d:21:81:6d:08:3b:d2:3c:e4:f4:b0:2a:ff:67:
                    84:d8:2c:6a:7c:70:3e:d2:ed:8c:ba:c9:00:a4:ee:
                    71:dd:99:ec:77:48:f5:79:6b:77:3b:87:5e:c4:8e:
                    2d:88:0b:0f:51:ed:96:72:ac:50:46:f5:76:df:78:
                    89:fa:2a:f1:d1:8c:0a:1a:ae:a5:5d:d4:ff:03:fe:
                    08:13:89:68:d6:7b:d6:8c:8f:36:c7:d8:5c:fe:fc:
                    67:11:18:33:4f:0e:5b:42:4a:6d:5a:44:f2:23:e4:
                    78:67:04:6f:74:be:ba:1d:07:1a:4e:55:ae:53:6b:
                    e4:b4:19:31:d5:11:c4:7d:e6:00:e7:e5:3d:a9:ae:
                    1e:20:3a:bc:6d:9e:71:44:e6:3c:f8:b6:20:bd:4c:
                    44:c3:a6:b7:5d:20:42:8c:69:16:40:54:3d:65:8d:
                    91:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D5:2E:83:63:F0:BA:F3:93:AE:C9:65:75:81:FC:CF:A9:FC:E7:5B
            X509v3 Authority Key Identifier:
                keyid:D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:de:82:27:d4:38:4d:cb:a5:58:16:5a:1c:31:ff:c4:05:aa:
         65:d6:9e:e4:3b:47:74:c4:da:8e:5e:fb:f4:45:44:5e:a7:54:
         35:e3:9e:c6:c0:c5:31:08:d3:30:dd:a7:e2:9e:e1:02:a6:29:
         34:a8:8d:91:c2:1a:98:e5:02:f6:74:29:ad:b0:4f:25:4f:a3:
         4f:b0:19:ae:53:72:65:6b:c9:00:85:cd:bb:94:d9:08:ae:42:
         70:3a:62:7a:5a:39:95:b8:0a:48:c3:34:9e:f4:00:5d:cd:e4:
         a6:fa:a6:dd:3c:16:ca:90:8a:66:cc:39:47:7b:64:1d:8e:75:
         27:8d:2e:9c:26:4d:bb:e9:05:01:88:64:7c:42:c1:b4:9f:48:
         7b:c3:f6:9d:08:42:7f:c2:96:df:29:45:ba:83:bd:97:e9:90:
         4e:87:f7:0f:b7:74:c9:bb:7f:36:08:31:2d:a8:ff:f4:ab:1b:
         2e:4d:2e:0f:be:56:b6:f0:48:43:be:54:0c:00:7a:4c:f8:4b:
         3c:a9:0f:af:39:8d:23:58:13:4e:5d:b7:a4:97:b5:5d:f3:27:
         4b:6e:88:0c:a6:82:4d:d1:d5:0e:0f:19:81:02:3b:cc:6f:67:
         2f:8a:39:dc:e2:f8:af:62:03:fb:ed:f5:03:d3:64:1c:e0:56:
         a1:40:54:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:49:42 2026 by rpki-client