Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File:                     1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier:          2VNEjDawe8ARUHXqTDtczw6B2UeZphYioa9a+P64iVI=
Subject key identifier:   C2:4A:87:3A:77:0A:93:AC:08:8A:B3:AE:AA:52:F2:56:23:D0:85:3D
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer:       /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial:       01A0D15C39F8AACBF5A92093866C33BE71B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number:          1A6E
Signing time:             Thu 24 Sep 2026 03:01:17 +0000
Manifest this update:     Thu 24 Sep 2026 03:01:17 +0000
Manifest next update:     Fri 25 Sep 2026 03:01:17 +0000
Files and hashes:         1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: sOFUDwEc7T5juGWK96Y0K1ZkebclDUKvlX6eDIkjhbg=)
                          2: RBLs6_JEMpJ2-E4f-zbgq3OA94g.roa (hash: YtzTgnRD0gPLAxf3Gvly0Fh3NIAfS3kf5OMJ5xYDEXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 03:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5c:39:f8:aa:cb:f5:a9:20:93:86:6c:33:be:71:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
        Validity
            Not Before: Sep 24 03:01:17 2026 GMT
            Not After : Sep 25 03:01:17 2026 GMT
        Subject: CN=c24a873a770a93ac088ab3aeaa52f25623d0853d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d3:9a:41:8a:8d:fd:80:cb:cb:d9:47:ec:da:
                    aa:18:d4:e6:cc:d4:80:15:3a:b5:e8:9c:d8:3b:ac:
                    27:a7:4d:a6:25:05:ed:2a:72:32:f7:51:37:b6:77:
                    d6:c6:2f:59:ea:61:32:df:1b:d8:f7:cb:38:e3:61:
                    93:d9:ac:45:5f:27:77:9f:49:77:7a:66:5b:70:f4:
                    0b:a5:38:d4:1d:6d:54:7a:71:ed:2a:31:54:54:46:
                    91:f1:d9:66:c5:f3:6a:29:7f:d3:44:7d:8e:2e:29:
                    26:a1:f3:62:e0:b9:eb:57:ce:54:1d:b3:93:86:2e:
                    a6:a2:12:3e:c9:72:de:c3:db:e9:43:16:b9:f7:f9:
                    68:cd:3a:06:c3:f0:73:7d:5c:33:ff:cb:d4:f6:5b:
                    58:a7:60:59:f9:15:23:f5:26:a1:e2:99:a0:4d:3d:
                    21:2c:9c:c8:43:2f:00:c1:d9:ee:b3:48:63:78:2d:
                    49:7e:0a:0a:ed:28:a5:ff:4a:e4:bc:9d:c9:73:ae:
                    16:41:a5:4b:22:b4:6f:1a:27:68:28:69:87:f8:4f:
                    f0:3b:bc:80:d5:aa:8e:8c:b4:00:3b:a3:39:bb:be:
                    23:06:6d:82:b6:36:30:92:fd:9f:24:f3:25:0b:c6:
                    3f:2a:96:d0:85:6b:5b:55:b2:e6:4d:23:8b:de:69:
                    3c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4A:87:3A:77:0A:93:AC:08:8A:B3:AE:AA:52:F2:56:23:D0:85:3D
            X509v3 Authority Key Identifier:
                keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:61:6a:f7:a6:12:1e:64:b1:6c:af:0c:96:48:b5:4a:c6:e0:
         64:c7:83:a7:94:f7:43:51:e4:c9:97:22:a8:15:12:60:e8:09:
         5d:36:79:4e:ef:73:09:72:82:be:8d:e2:39:e5:25:57:80:ff:
         d6:f6:82:a5:bd:05:44:73:ec:ac:92:8e:55:44:82:ae:25:d0:
         de:e4:e6:4d:2e:4f:9a:09:fa:7f:dc:4c:74:f2:85:8c:24:c5:
         86:ca:a5:21:cd:e5:4d:71:64:7f:39:2d:4c:65:f7:07:6f:87:
         08:cf:90:10:3c:d0:d1:aa:2b:ea:65:72:06:16:81:c9:d7:d0:
         7c:bf:fc:c3:59:87:f1:df:40:83:9f:2a:9d:12:1f:e1:85:6b:
         86:f9:f3:35:7f:f0:d7:e4:2e:a8:9e:89:69:e0:6f:e3:9a:cf:
         da:ce:ab:7a:a0:dd:39:16:68:52:e9:74:c8:b4:b4:58:ff:61:
         37:b5:c5:d8:97:c1:85:70:3f:a6:12:ca:b4:72:ca:9e:f7:aa:
         7a:3d:01:a0:83:95:7a:6c:f5:82:f5:67:f6:13:db:af:33:8f:
         fb:7f:f4:eb:71:05:6d:ed:72:21:b6:a5:cb:77:d1:98:7a:fd:
         d8:4b:8b:d6:ab:ff:d2:52:1c:95:e7:0a:02:e7:c7:ee:72:95:
         81:00:b8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:37:33 2026 by rpki-client