Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.mft
File:                     1-wruDhv4ISwCJeeFs5TwQWuzK7c.mft (raw, json)
Hash identifier:          0J1Scv3VoUajkMaE2fLK0fxo2L3Tx/nPyuVmqoF0dJg=
Subject key identifier:   4B:D4:1B:F4:95:82:C7:BE:46:2F:7A:56:F5:BF:B6:68:58:17:AC:34
Authority key identifier: FB:0A:EE:0E:1B:F8:21:2C:02:25:E7:85:B3:94:F0:41:6B:B3:2B:B7
Certificate issuer:       /CN=fb0aee0e1bf8212c0225e785b394f0416bb32bb7
Certificate serial:       01A0D872A1D7FEE8B2B04537AE411D5D22C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wruDhv4ISwCJeeFs5TwQWuzK7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.mft
Manifest number:          1608
Signing time:             Fri 25 Sep 2026 12:03:06 +0000
Manifest this update:     Fri 25 Sep 2026 12:03:06 +0000
Manifest next update:     Sat 26 Sep 2026 12:03:06 +0000
Files and hashes:         1: 1-wruDhv4ISwCJeeFs5TwQWuzK7c.crl (hash: t1x1wZwWKDX+010ceVlRwNn2tKfqiipTlFnwPu/wEmw=)
                          2: 36whfB4njOea3Mto5n6cVVOBmA8.roa (hash: vmomCyPcTCirzfEz/6j7klMF7GVzmlowJJKMNzXBV5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wruDhv4ISwCJeeFs5TwQWuzK7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:a1:d7:fe:e8:b2:b0:45:37:ae:41:1d:5d:22:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb0aee0e1bf8212c0225e785b394f0416bb32bb7
        Validity
            Not Before: Sep 25 12:03:06 2026 GMT
            Not After : Sep 26 12:03:06 2026 GMT
        Subject: CN=4bd41bf49582c7be462f7a56f5bfb6685817ac34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:99:e3:dc:50:3a:bd:2d:5a:26:42:87:23:49:
                    3f:ba:a1:15:ff:6c:49:39:f1:8e:91:43:68:1c:65:
                    c6:ad:56:2a:e2:9c:ee:3d:5a:a8:71:ad:0f:ab:79:
                    de:db:de:20:38:8d:fd:d2:88:41:40:ff:a5:f7:70:
                    30:b7:44:4b:c4:c6:3f:30:ec:83:48:a3:2d:43:1d:
                    23:f5:e6:fc:13:d4:f7:17:d1:84:2f:2b:a0:d7:13:
                    f5:7c:3e:1c:23:f6:f9:ad:92:53:12:5f:5e:99:92:
                    03:f0:d2:9b:9a:30:fb:33:a2:27:05:a7:04:81:f3:
                    15:68:8a:6d:31:f4:76:8f:e3:bf:d7:5a:5c:3b:17:
                    a3:c2:1a:6f:3f:63:4e:94:74:36:8e:56:cc:a6:f3:
                    47:8e:d0:0c:c2:e9:ff:cf:14:8d:09:4c:48:8a:e1:
                    a2:26:e4:c6:18:47:01:a4:19:c9:6b:c0:02:bb:7f:
                    94:51:9c:6b:d3:5b:0b:35:22:a0:03:df:fc:72:6c:
                    f8:b1:3b:0b:e3:25:68:cc:10:12:ab:dd:c3:fe:48:
                    d5:a3:00:08:0b:37:20:86:a7:f9:30:16:48:4c:db:
                    9d:11:65:be:fb:1b:16:2d:a3:c2:76:1f:2b:b6:c7:
                    7b:01:81:c6:10:cd:04:9e:f7:57:a8:de:54:1c:bc:
                    65:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D4:1B:F4:95:82:C7:BE:46:2F:7A:56:F5:BF:B6:68:58:17:AC:34
            X509v3 Authority Key Identifier:
                keyid:FB:0A:EE:0E:1B:F8:21:2C:02:25:E7:85:B3:94:F0:41:6B:B3:2B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wruDhv4ISwCJeeFs5TwQWuzK7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9c:72:18:c9:12:ae:a6:44:6d:c0:84:0d:f2:03:44:48:c6:
         39:b8:03:7b:a0:ec:ed:85:da:5f:2f:1b:48:eb:eb:98:22:73:
         10:0d:db:a2:4d:11:10:89:d6:54:4d:63:fc:68:b3:22:79:04:
         be:50:36:99:15:93:3a:a6:93:3d:5b:29:eb:b7:36:6a:dc:e0:
         b3:f9:1a:3a:d4:09:d6:06:9e:65:ca:da:9a:be:68:f6:d0:39:
         49:06:eb:9d:dd:8b:06:55:83:ac:f3:8c:8b:21:78:ab:a6:54:
         4f:8e:c4:8f:62:f2:6c:27:75:5a:dd:4f:dd:e7:89:7b:67:ea:
         3f:f0:ca:52:59:e1:d2:35:d9:f2:b8:e1:de:2e:9c:0b:9d:1b:
         9c:43:52:cd:55:b4:ca:ec:de:e4:d9:c6:66:2f:cb:fb:86:53:
         68:51:23:1f:16:3f:51:2c:ac:b8:ef:a4:fa:81:c9:b7:0a:2b:
         72:c5:26:64:35:83:77:d8:f7:f0:16:b9:d4:05:2d:31:27:ca:
         3b:fc:78:ed:30:b9:62:8c:24:77:58:ef:07:06:8e:43:0d:4b:
         56:a3:55:aa:07:52:0b:81:1b:ba:29:64:7d:13:f1:b3:6e:95:
         c8:51:62:78:8d:19:a8:ee:8b:4e:b4:57:1c:9b:98:3e:98:01:
         dc:20:50:81
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDYcqHX/uiysEU3rkEdXSLGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMGFlZTBlMWJmODIxMmMwMjI1ZTc4NWIzOTRmMDQxNmJi
MzJiYjcwHhcNMjYwOTI1MTIwMzA2WhcNMjYwOTI2MTIwMzA2WjAzMTEwLwYDVQQD
Eyg0YmQ0MWJmNDk1ODJjN2JlNDYyZjdhNTZmNWJmYjY2ODU4MTdhYzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZnj3FA6vS1aJkKHI0k/uqEV/2xJ
OfGOkUNoHGXGrVYq4pzuPVqoca0Pq3ne294gOI390ohBQP+l93Awt0RLxMY/MOyD
SKMtQx0j9eb8E9T3F9GELyug1xP1fD4cI/b5rZJTEl9emZID8NKbmjD7M6InBacE
gfMVaIptMfR2j+O/11pcOxejwhpvP2NOlHQ2jlbMpvNHjtAMwun/zxSNCUxIiuGi
JuTGGEcBpBnJa8ACu3+UUZxr01sLNSKgA9/8cmz4sTsL4yVozBASq93D/kjVowAI
Czcghqf5MBZITNudEWW++xsWLaPCdh8rtsd7AYHGEM0EnvdXqN5UHLxl1wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEvUG/SVgse+Ri96VvW/tmhYF6w0MB8GA1UdIwQY
MBaAFPsK7g4b+CEsAiXnhbOU8EFrsyu3MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13cnVEaHY0SVN3Q0plZUZzNVR3UVd1eks3Yy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvMDUxZjg4LTg1N2MtNGU0Yi1iZDNk
LWYxYjg5Mzg4Nzg4NC8xLzEtd3J1RGh2NElTd0NKZWVGczVUd1FXdXpLN2MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzc4LzA1MWY4OC04NTdjLTRlNGItYmQzZC1mMWI4OTM4ODc4
ODQvMS8xLXdydURodjRJU3dDSmVlRnM1VHdRV3V6SzdjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpxy
GMkSrqZEbcCEDfIDREjGObgDe6Ds7YXaXy8bSOvrmCJzEA3bok0REInWVE1j/Giz
InkEvlA2mRWTOqaTPVsp67c2atzgs/kaOtQJ1gaeZcramr5o9tA5SQbrnd2LBlWD
rPOMiyF4q6ZUT47Ej2LybCd1Wt1P3eeJe2fqP/DKUlnh0jXZ8rjh3i6cC50bnENS
zVW0yuze5NnGZi/L+4ZTaFEjHxY/USysuO+k+oHJtworcsUmZDWDd9j38Ba51AUt
MSfKO/x47TC5Yowkd1jvBwaOQw1LVqNVqgdSC4EbuilkfRPxs26VyFFieI0ZqO6L
TrRXHJuYPpgB3CBQgQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:09:25 2026 by rpki-client