Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
File:                     1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft (raw, json)
Hash identifier:          y0cfJYfCQrMWZ9HkTl4PnaKVmOxkUhXcj90Zs+ZfnFk=
Subject key identifier:   9B:A9:FE:5F:E0:CC:B6:0B:80:10:A3:A4:9C:BC:D0:AC:B3:EF:D5:68
Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
Certificate issuer:       /CN=fad92323d22b44275dcecd4de295b44794623e92
Certificate serial:       01A0D2372F7B1EFB8C3847D7EED63885260D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
Manifest number:          1143
Signing time:             Thu 24 Sep 2026 07:00:26 +0000
Manifest this update:     Thu 24 Sep 2026 07:00:26 +0000
Manifest next update:     Fri 25 Sep 2026 07:00:26 +0000
Files and hashes:         1: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl (hash: bTxzYsz7rt+kD7CouzBxsmQEa9lNLkb9H0SVOyF1kaQ=)
                          2: UL-CgnrNPYQJO2OLIuI1mhSYtDA.roa (hash: GGk+R1Gc40YBitEs0cmNl7DC/ssfY6330gew4Jn1Fl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 07:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:37:2f:7b:1e:fb:8c:38:47:d7:ee:d6:38:85:26:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92
        Validity
            Not Before: Sep 24 07:00:26 2026 GMT
            Not After : Sep 25 07:00:26 2026 GMT
        Subject: CN=9ba9fe5fe0ccb60b8010a3a49cbcd0acb3efd568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:07:ab:3a:94:a5:00:65:3d:72:67:86:0d:
                    8c:76:df:54:60:e7:e3:e0:54:47:35:29:cc:52:e0:
                    a4:f7:19:38:88:10:92:e4:db:df:e3:a5:ee:4c:d7:
                    53:0a:62:fa:7f:26:fa:66:5c:7f:eb:e8:2a:15:e2:
                    cd:d0:27:7a:8b:cb:a6:50:ce:a1:8e:3b:3d:65:61:
                    73:d2:17:6f:c2:e2:78:65:02:ca:fa:8f:a5:ca:6c:
                    12:df:93:f5:03:e2:56:7e:9f:d9:35:5f:80:93:1b:
                    36:f8:d4:b5:5c:24:11:e9:86:6a:4b:ec:9a:05:a4:
                    90:6f:06:04:18:80:b1:46:85:49:b7:80:cf:5e:0a:
                    93:3a:ce:35:b0:50:dd:f4:11:0d:86:a9:b0:01:f6:
                    c7:e7:0d:5d:2a:fd:01:2b:c4:7f:a7:0d:e7:fe:63:
                    37:ff:c4:2d:a9:21:cf:b5:e8:05:10:f8:e8:42:be:
                    9d:e3:3a:ba:ed:bf:c9:69:db:79:65:7b:85:32:53:
                    26:b4:13:5a:23:96:15:a3:5b:8b:a4:e9:52:71:ae:
                    14:fb:b8:bf:8c:0e:8f:0e:38:f2:58:29:1f:01:0f:
                    85:17:bf:d0:15:98:fe:fc:bb:6c:ce:86:a1:5b:5d:
                    1d:bc:02:59:13:36:de:9b:b4:4d:90:bc:b0:6a:f2:
                    e6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A9:FE:5F:E0:CC:B6:0B:80:10:A3:A4:9C:BC:D0:AC:B3:EF:D5:68
            X509v3 Authority Key Identifier:
                keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:06:79:d2:c2:96:14:f2:18:57:9e:a1:bd:75:d5:a3:34:e5:
         09:a6:6c:94:c6:00:18:7b:8a:13:45:01:eb:97:bd:18:e3:38:
         30:38:44:61:ba:2a:0c:0d:24:5f:f0:90:3d:c3:63:25:1a:a4:
         53:0b:88:09:8a:4a:ff:12:45:26:17:bd:6c:5d:07:5a:d7:fd:
         7c:5b:18:6d:6e:e6:26:75:c5:7c:a6:32:72:87:4a:f6:f9:31:
         5c:d1:5b:e1:1b:37:cc:9c:7e:e8:66:41:e4:87:51:37:10:ff:
         0f:62:6f:7f:54:f0:77:e9:70:a8:47:55:fe:63:d5:c7:2e:3f:
         78:06:a6:48:95:0a:af:63:a5:ed:18:75:a5:50:49:24:65:89:
         77:30:ea:6a:e6:78:48:36:66:4e:1d:ef:63:a7:e4:db:6d:cb:
         0b:f8:90:b1:5e:c6:c0:f2:c4:52:4b:8b:ad:63:ad:19:f0:b1:
         d0:f1:49:50:ab:59:f0:cc:2c:0d:01:ab:af:4b:d9:ab:df:da:
         7f:bd:fb:78:16:a9:0b:3a:0b:46:dd:59:c4:fd:b2:c7:dc:13:
         a3:6c:a0:45:78:1f:4e:64:f2:e3:f8:80:b4:5f:ba:96:c4:9a:
         42:c1:cb:3e:57:fd:f0:4e:53:b3:f0:6c:87:7b:76:2d:89:d9:
         35:4a:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:06:20 2026 by rpki-client