Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
File:                     1-3nCbzFXU0UVnIQO0nioeKklZhU.mft (raw, json)
Hash identifier:          ljV0GOXg9hx14lZ8iUf/xN7PBDfmgZsbE3fUEUj37kI=
Subject key identifier:   DC:36:B8:9F:F7:8F:2D:77:BD:1F:00:A5:8A:01:78:EB:97:56:C6:25
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Certificate issuer:       /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial:       01A0DACCEE8EA57CFB3E832E13EE6E1D50D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
Manifest number:          1A7A
Signing time:             Fri 25 Sep 2026 23:00:58 +0000
Manifest this update:     Fri 25 Sep 2026 23:00:58 +0000
Manifest next update:     Sat 26 Sep 2026 23:00:58 +0000
Files and hashes:         1: 1-3nCbzFXU0UVnIQO0nioeKklZhU.crl (hash: G6IAzcpRwonszEvBmilHhTJp0khXpeqFl/yLSbd1ssU=)
                          2: 5yW1J3G-SRoAia8ARctoGLWzIYc.roa (hash: X09RAO+Iokxl6DD0+XywUvUr2qss8psh9a8kzzRJ8CA=)
                          3: BuRUOF7mMOX9LaFv1V3QhA-5u7w.roa (hash: Jk587wQ/RfxSBQigyNcTI8jkJxFSiSHzC0v2gfYkHEo=)
                          4: KfwY1j22Ax4UScL4SqchoS6Z8Bo.roa (hash: lfrpyk1o29ncs3GeyAV8veuvMaUhtX2qKzwSKrcBWAo=)
                          5: KnVR_9VrWrMYjNqmZyI3AyOyCfQ.roa (hash: smZSmUpd6ByBf72zK69AbaDDhM3Jk9l+boOyjSHXOmU=)
                          6: RIk8mcO0XUHeY1yE3bLpyK41RDc.roa (hash: 7ot83Q70csEm6+GFN6TqnACE6Bsk3KoPtGK0mmsksq0=)
                          7: UCM287_6vaVTmxRbaeLhFXJu-zI.roa (hash: Dd8R2yXONvmf0J4ib+h5UGhtmlZ7wExXG0YcP5XCyOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cc:ee:8e:a5:7c:fb:3e:83:2e:13:ee:6e:1d:50:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
        Validity
            Not Before: Sep 25 23:00:58 2026 GMT
            Not After : Sep 26 23:00:58 2026 GMT
        Subject: CN=dc36b89ff78f2d77bd1f00a58a0178eb9756c625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:65:94:cc:00:8f:80:15:ef:40:19:85:02:
                    51:93:8e:9c:45:e6:ec:4a:e7:47:b6:9a:3e:33:d1:
                    ba:fb:b2:9e:4e:22:27:7e:60:5a:fd:65:4a:af:f2:
                    98:37:58:93:12:a3:9a:3b:5c:05:f7:04:aa:6b:5d:
                    c3:c8:49:8b:e7:d2:b7:25:a8:d7:88:79:b5:b3:e7:
                    5f:7c:6f:63:12:e3:b2:0a:63:06:4d:75:6a:df:77:
                    05:4d:10:17:a5:0a:36:c9:36:04:86:1d:29:f3:a9:
                    de:61:c5:ec:4a:0b:1d:e0:4a:77:e2:cc:68:b8:37:
                    8f:42:14:a4:17:be:c9:1a:b9:3f:f6:65:21:89:ad:
                    b3:bb:fb:89:0e:c4:3c:89:4a:23:bd:a9:7d:5c:46:
                    99:d5:57:1e:bf:76:d6:c4:5a:a0:f3:7a:56:ad:f9:
                    fa:09:9b:d9:a7:3e:b5:49:5d:ff:2e:6e:7e:2f:a9:
                    f1:55:83:8c:22:d5:b9:bf:fe:a6:99:58:cb:3a:87:
                    f2:50:a8:b9:6b:43:d7:2d:e2:4a:72:f2:f0:b1:b8:
                    84:7f:b6:fc:ba:d5:ce:3b:66:c7:ec:b0:95:33:e1:
                    eb:36:c8:8a:db:ee:f4:b2:06:25:8c:1e:01:ed:83:
                    ca:e0:17:03:db:71:b3:ba:f3:ea:87:82:e8:db:12:
                    54:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:36:B8:9F:F7:8F:2D:77:BD:1F:00:A5:8A:01:78:EB:97:56:C6:25
            X509v3 Authority Key Identifier:
                keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:97:90:b2:0b:54:d0:99:44:96:10:6e:30:6c:ce:d5:43:30:
         94:ce:24:18:27:ae:5f:8a:35:a3:f4:69:ef:2e:64:bd:bd:af:
         31:ec:ef:b5:89:ef:a5:0d:27:17:d0:25:72:09:7f:7a:1e:e6:
         28:4e:e7:eb:68:13:d9:44:d8:55:5c:e5:e6:d9:00:0d:17:fd:
         5f:57:e3:10:22:a2:21:b9:77:42:7c:34:c7:b7:b8:a9:e3:e5:
         09:67:0a:36:93:4a:ee:91:ff:c2:29:98:83:e5:72:cf:63:1e:
         33:43:3d:64:d2:c7:02:cd:1a:eb:21:bc:7a:dc:eb:bd:d2:d7:
         36:a8:e0:7f:35:0b:57:42:36:e2:23:1e:f0:ab:87:e0:6f:cc:
         f3:07:e0:cf:52:7c:1b:ab:1d:4c:b6:b8:fc:be:94:4c:f8:6e:
         f2:58:b7:55:2f:34:cd:41:50:42:05:4b:b4:a9:be:dd:57:c3:
         91:12:37:b3:d8:14:51:99:39:7b:f3:84:07:5d:b0:20:37:d9:
         3f:cf:13:2f:2b:83:f7:a5:ec:f3:1e:33:e2:be:6f:58:05:b6:
         2c:16:cb:90:70:f4:97:09:3f:53:1b:0d:f2:47:33:f7:be:34:
         88:45:fd:7b:b6:61:07:f0:28:ac:5b:3e:e0:cb:64:25:c2:c6:
         a3:64:e2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:27:45 2026 by rpki-client