Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
File:                     1-F0E5sULqQb5rBHC51vz9dEEKmI.mft (raw, json)
Hash identifier:          3IK7TLps4Ye/G7DzkdREVIug4RH5S+BXz4pvY8Wi2gY=
Subject key identifier:   DE:12:A1:21:C4:A4:87:D2:D5:B2:1C:7B:C2:3D:DF:BB:BB:FE:99:F2
Authority key identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
Certificate issuer:       /CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Certificate serial:       01A0CD47E8F030E0D957D2551F9C18A4680C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
Manifest number:          1A6E
Signing time:             Wed 23 Sep 2026 08:00:37 +0000
Manifest this update:     Wed 23 Sep 2026 08:00:37 +0000
Manifest next update:     Thu 24 Sep 2026 08:00:37 +0000
Files and hashes:         1: 1-F0E5sULqQb5rBHC51vz9dEEKmI.crl (hash: Ks98e5gQ0ZPeLon+eMI85BQdezCB2+cZ0++zqufNbSw=)
                          2: BoWpyd3JOZi5Y_vkexanhVBW_Ag.roa (hash: TuPfakwU0uajSPw+NwpFbys7R8R7VeHveufD46rtpys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:47:e8:f0:30:e0:d9:57:d2:55:1f:9c:18:a4:68:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
        Validity
            Not Before: Sep 23 08:00:37 2026 GMT
            Not After : Sep 24 08:00:37 2026 GMT
        Subject: CN=de12a121c4a487d2d5b21c7bc23ddfbbbbfe99f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:61:e6:3b:90:e4:0e:08:ec:cd:e7:51:98:68:
                    f8:32:4f:3e:60:2a:05:f6:13:68:06:87:1f:fb:f6:
                    f6:37:b2:92:0d:07:06:d1:3b:43:97:b2:46:12:70:
                    3f:b8:c8:55:56:f3:14:38:d4:94:b6:c5:ba:a1:42:
                    82:16:55:83:a5:d3:48:dc:ea:18:be:bc:28:ba:8a:
                    cb:df:f1:c7:b2:1d:0e:86:9d:6a:2a:84:ca:a5:bc:
                    85:c9:86:f4:ec:cc:27:ce:3f:00:77:ee:5f:18:7b:
                    1a:75:0c:65:05:56:e1:a1:37:33:08:8f:79:22:39:
                    99:15:c5:d3:f3:28:a8:7d:c1:b0:5b:68:ea:2c:cd:
                    4a:69:8e:8e:f4:bd:1d:10:0a:86:0c:c5:5c:79:04:
                    78:7e:11:e0:d3:a9:96:c3:36:cf:fe:d8:24:79:64:
                    06:a7:df:8a:08:19:a4:58:82:99:a3:71:dc:2c:f7:
                    c4:1a:35:a1:2b:23:e6:e1:8a:2a:39:5d:3e:13:a7:
                    91:ed:82:11:22:c9:7f:96:37:3b:bb:0c:e2:f9:98:
                    02:2a:a0:64:88:cb:d4:9e:52:4f:4f:35:4d:4e:bc:
                    d0:d6:ef:21:61:d5:62:a3:66:3a:e7:61:a2:c0:1b:
                    70:01:be:b1:3f:09:38:a8:76:91:ab:df:d4:50:16:
                    93:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:12:A1:21:C4:A4:87:D2:D5:B2:1C:7B:C2:3D:DF:BB:BB:FE:99:F2
            X509v3 Authority Key Identifier:
                keyid:F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a7:78:9d:40:3c:34:f7:41:42:06:43:65:76:ed:bd:67:18:
         da:fd:a4:b4:30:2f:60:78:86:87:a1:99:46:86:91:35:a7:2a:
         a3:6f:98:9c:82:de:47:83:6f:f2:18:19:dc:c2:2d:25:33:96:
         cf:09:d1:62:5f:2b:c9:0c:4e:a3:e6:ac:9e:c0:e0:4d:a9:b2:
         83:51:c8:5b:65:39:1e:a3:be:c8:e3:09:bb:48:91:bd:e2:64:
         ab:a2:6b:8f:0a:c3:a0:63:5f:99:e1:4c:7a:f8:06:fd:c1:63:
         87:f4:46:81:a2:f5:26:ce:79:17:3c:ff:9f:da:1b:c1:de:ed:
         cb:34:bf:b8:bb:9e:3b:76:78:46:8c:11:6d:2e:0f:04:0b:b2:
         92:83:f4:f0:4e:ed:fe:67:48:f5:3a:ac:f0:ec:8d:db:9a:95:
         ac:a4:90:a2:a5:65:eb:bd:e0:80:bc:22:ab:80:cc:51:33:05:
         e4:47:cf:af:1a:5b:47:4c:9b:fc:63:1e:5d:91:a6:4b:aa:50:
         8e:ff:2b:9d:97:4b:9f:c9:c7:c0:28:e1:bd:55:71:a5:ab:e0:
         e8:08:ff:09:70:c2:ec:d2:67:ea:3c:12:2a:ed:44:b3:3b:38:
         fd:7f:f3:a5:38:db:7a:c5:3f:ad:36:18:57:c6:36:3b:fa:8a:
         ea:61:01:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:36:59 2026 by rpki-client