Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
File:                     m1WmQjec5XjznsDRBgPc-oP2404.mft (raw, json)
Hash identifier:          YJdEj+KZCs9PsOT0Qht8e8Qi7/XOkzyqf3RiXe+iG3A=
Subject key identifier:   1B:1A:41:B9:E1:DE:E7:68:EC:4C:8F:33:89:5B:58:6B:84:8B:D0:1D
Authority key identifier: 9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
Certificate issuer:       /CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Certificate serial:       01A0FF47D3935F216095FCB66AF71A7E4632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
Manifest number:          1665
Signing time:             Sat 03 Oct 2026 01:01:32 +0000
Manifest this update:     Sat 03 Oct 2026 01:01:32 +0000
Manifest next update:     Sun 04 Oct 2026 01:01:32 +0000
Files and hashes:         1: m1WmQjec5XjznsDRBgPc-oP2404.crl (hash: D4f1IaYITlsjLiwjs6pIIOA+roJmugnuHx+oxlhB1Gw=)
                          2: uvET6Zdbf1uExwxmzflEOezn8Rc.roa (hash: OoCVZM5zRZmB6p+N+tNq0XseSeQIYStS8UgtYXAi4Xk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 01:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ff:47:d3:93:5f:21:60:95:fc:b6:6a:f7:1a:7e:46:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
        Validity
            Not Before: Oct  3 01:01:32 2026 GMT
            Not After : Oct  4 01:01:32 2026 GMT
        Subject: CN=1b1a41b9e1dee768ec4c8f33895b586b848bd01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f4:88:1f:5a:14:00:30:5a:77:d4:c4:30:51:
                    cb:e5:f5:b2:84:38:f8:0b:4e:92:a6:61:31:41:30:
                    b0:6b:59:a7:c3:1c:47:1b:b9:35:6e:23:63:16:8c:
                    a4:53:37:87:ee:a0:f1:fd:b4:cd:b7:be:5c:65:f2:
                    a4:df:d9:c4:03:8d:fb:46:4e:97:96:6f:73:32:53:
                    3e:1b:62:9a:ad:b1:fd:4f:63:bd:29:19:ac:77:29:
                    5f:fc:42:eb:87:dd:ce:a2:c6:6f:cb:e2:60:21:df:
                    8e:c2:35:65:c8:fb:3f:64:8e:68:b9:5b:a7:6d:82:
                    b2:3c:72:6e:63:07:7e:e1:b2:06:44:cb:87:20:3e:
                    37:19:0a:2a:8e:ff:20:21:c3:09:68:de:52:af:42:
                    aa:02:d2:f8:0c:c9:ba:fc:73:a6:37:36:c6:9c:5c:
                    9d:fd:5c:03:e2:87:7c:c9:f6:ff:2a:57:6a:7f:85:
                    5f:4b:22:63:56:ca:d5:47:f6:cd:68:85:7a:22:6a:
                    49:54:fa:59:c5:7c:b3:ad:1c:0c:e1:d6:d5:9d:b5:
                    be:58:eb:44:20:05:22:c6:e5:4b:e9:d4:94:f3:40:
                    a3:48:1e:83:74:66:26:bc:e6:05:f9:d8:bb:26:8e:
                    83:c3:72:9a:45:37:76:20:28:32:f0:ce:80:0f:d9:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1A:41:B9:E1:DE:E7:68:EC:4C:8F:33:89:5B:58:6B:84:8B:D0:1D
            X509v3 Authority Key Identifier:
                keyid:9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f7:54:a0:8d:68:e8:b6:84:79:89:df:f9:1a:17:48:38:58:
         8d:5f:dd:a9:75:90:f4:a2:38:3a:13:0f:4e:80:47:70:32:9d:
         a3:7b:6d:e0:e6:73:49:35:3b:f1:1e:da:94:60:b6:02:8f:6e:
         25:74:e3:67:f1:36:9e:40:6a:1c:f2:39:b8:99:91:36:19:ce:
         17:93:88:a4:9e:fb:55:8a:66:8d:c0:aa:77:00:82:70:42:4f:
         5a:75:28:7e:0e:d7:54:aa:35:c2:13:cc:3b:88:86:25:fe:ba:
         cb:24:06:48:05:96:3f:80:53:4b:93:7a:23:6f:0f:17:b7:d9:
         a0:9d:67:9f:29:51:1b:26:06:6d:3e:2a:14:9c:5e:68:1e:88:
         41:de:3a:78:50:19:4a:db:9c:25:46:cd:02:d3:d3:34:b0:08:
         67:93:de:6b:6a:5d:74:d8:9d:32:67:10:7b:45:6f:22:c6:f7:
         01:b0:41:5c:5c:7a:89:51:66:c5:69:4f:08:cc:c5:2e:06:e8:
         a5:13:39:1b:ea:a4:65:a1:a1:71:a5:19:a7:cc:ec:a3:78:a9:
         56:6e:f1:c8:cf:08:3e:5f:40:e8:0f:1e:a7:29:01:54:0a:f4:
         42:6d:36:12:32:08:c1:dc:14:a1:35:f9:97:cf:10:d1:8f:bd:
         24:3b:a6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:06:28 2026 by rpki-client