Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
File:                     1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft (raw, json)
Hash identifier:          OL5z9Ja2z1YSny+2qikdjV8ve/4qDuUu35tPnAARr54=
Subject key identifier:   15:04:52:B8:0C:AE:10:9D:BE:BC:1E:92:5C:23:C8:C7:04:53:B3:F7
Authority key identifier: FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56
Certificate issuer:       /CN=fa7cfac6af108660d94e2fced61e61ff219c0a56
Certificate serial:       01A0D049180CFBD9AC6F7FD2B53275013105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
Manifest number:          056F
Signing time:             Wed 23 Sep 2026 22:00:46 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:46 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:46 +0000
Files and hashes:         1: 1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl (hash: CDIf8KHir+A8xEOpQaIdOLQy6hwDm0CCOBppW+jkvmo=)
                          2: 7twlBQNrZ6FCrFwtrfIHXMy3l3c.roa (hash: eePZ/tFgF04WHH163/PX7/2dODE4iUznTEF+hSYRLTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:49:18:0c:fb:d9:ac:6f:7f:d2:b5:32:75:01:31:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa7cfac6af108660d94e2fced61e61ff219c0a56
        Validity
            Not Before: Sep 23 22:00:46 2026 GMT
            Not After : Sep 24 22:00:46 2026 GMT
        Subject: CN=150452b80cae109dbebc1e925c23c8c70453b3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:69:be:88:42:06:a0:be:06:79:65:02:68:37:
                    56:73:6a:c1:75:f6:f4:5c:3e:70:fd:e6:3f:f6:c6:
                    a8:2b:eb:b2:3f:80:f7:e4:d3:d4:a6:7e:a9:02:17:
                    34:0e:4b:4d:20:f7:f9:20:f5:68:01:18:9e:41:47:
                    70:79:e4:12:06:41:42:e0:a4:d1:c8:77:7f:33:1f:
                    fd:cd:d8:92:bc:64:90:18:53:b6:ea:09:da:ce:85:
                    7d:f1:41:3b:5b:41:ee:d3:0e:ea:fb:57:4a:ae:42:
                    3e:83:62:47:58:84:85:9a:12:aa:10:21:69:d2:37:
                    cc:2a:13:a7:fc:40:49:e1:86:78:86:e5:98:91:48:
                    85:1c:83:04:ab:46:a5:fd:9e:8f:1e:35:80:d4:15:
                    ed:9e:82:7a:c3:63:2c:61:66:67:36:5c:cf:30:3b:
                    61:de:2e:20:63:88:95:1f:1e:85:88:b9:e7:b7:85:
                    d4:7e:f3:fa:55:e5:b6:6f:39:d6:09:c8:4a:bd:df:
                    d4:af:ea:94:52:19:e5:86:75:49:85:a7:40:55:76:
                    6a:fa:61:ea:a1:31:cc:ea:f4:3e:3e:3a:26:6e:23:
                    ee:bd:07:32:ca:73:f7:10:18:c4:83:04:1b:a1:16:
                    b7:bd:00:90:a7:b3:93:c6:67:76:f4:0e:97:42:1b:
                    49:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:04:52:B8:0C:AE:10:9D:BE:BC:1E:92:5C:23:C8:C7:04:53:B3:F7
            X509v3 Authority Key Identifier:
                keyid:FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f0:b5:11:75:eb:f4:85:5d:26:aa:a3:4f:66:c5:ce:8d:24:
         fd:d1:64:a4:a1:75:07:ba:0c:50:1e:80:b0:d6:61:42:ad:11:
         9a:47:4d:fb:6d:c1:fc:ad:5e:87:00:f1:d2:5e:69:04:6d:c4:
         09:e4:a4:90:1f:04:22:d0:fc:3e:2b:ce:fe:00:70:18:77:4a:
         c4:f5:f1:23:be:bb:9d:ff:d3:3a:b8:46:90:d7:b3:bc:d1:8f:
         d8:be:3f:f1:71:e2:57:bb:9d:7e:e7:eb:44:1a:2b:47:89:ee:
         1d:75:0f:01:e2:cf:a9:ea:00:ba:9d:46:e8:11:94:d0:31:75:
         fb:ac:ff:1f:ac:a1:5b:44:49:4e:0b:de:86:81:48:41:f4:41:
         b2:5b:f1:68:44:34:82:be:67:c6:05:22:81:54:b6:58:fa:53:
         8f:d3:5d:38:bc:18:3e:5b:59:72:bc:79:e7:d5:22:a8:0a:f8:
         1e:ba:fe:f6:10:21:43:30:91:32:9f:ae:77:17:64:b1:da:15:
         b0:5d:05:32:27:df:77:1e:38:02:74:5f:d7:f4:ce:c6:bf:83:
         6f:1b:dc:c3:46:55:01:c0:36:7d:fd:5a:8e:91:9b:a1:40:c9:
         d2:22:6b:17:49:2b:f6:85:98:c5:c3:67:56:0c:4a:e5:f4:c4:
         b8:a8:54:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:13:34 2026 by rpki-client