Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
File:                     p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft (raw, json)
Hash identifier:          3L7fAe04y2N2n92wdnR0LH3vMFNsuOrVWtlaGfD9HNI=
Subject key identifier:   02:1B:52:D5:75:04:DE:3B:AD:F2:F2:3A:46:0E:00:31:18:04:BB:AD
Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
Certificate issuer:       /CN=a750263823402b83c11c5014d32666dcab111447
Certificate serial:       01A0D0B6C6529B2C0FFA6CC7E964142FC9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
Manifest number:          050F
Signing time:             Thu 24 Sep 2026 00:00:34 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:34 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:34 +0000
Files and hashes:         1: p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl (hash: pq0jA+1YQuQZPOZWqZx/a8k7HopLTfAIuuGgK0v+6nI=)
                          2: uIYw_8iiZTupx6FQ8I2_JU4U5OU.roa (hash: j0RS1RQJQSNrBv7ngDU2LKpRzV2MtQ6zJxmWtahtrSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b6:c6:52:9b:2c:0f:fa:6c:c7:e9:64:14:2f:c9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a750263823402b83c11c5014d32666dcab111447
        Validity
            Not Before: Sep 24 00:00:34 2026 GMT
            Not After : Sep 25 00:00:34 2026 GMT
        Subject: CN=021b52d57504de3badf2f23a460e00311804bbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:3f:df:84:46:51:8a:24:dc:71:97:66:eb:
                    17:93:04:77:ed:7f:96:f9:a5:d4:c1:36:ef:f8:c3:
                    1b:67:b6:8e:03:37:26:2e:a3:f0:69:53:1a:c5:56:
                    a9:48:ab:ec:eb:a7:c1:f7:f4:db:9f:08:56:65:df:
                    1d:ea:f4:cc:1c:67:6e:80:dd:b5:64:bd:c6:08:a4:
                    ff:7b:f1:30:c7:7a:c9:91:88:89:73:66:5e:0e:24:
                    c8:69:74:c7:d8:df:03:9a:d3:48:4a:79:76:c6:ba:
                    92:bc:85:61:ed:31:bc:4a:f9:54:2d:be:e9:37:70:
                    ba:65:e9:7b:36:c7:02:40:bd:75:ba:57:29:99:f8:
                    ac:76:c6:09:6a:2f:bf:56:b2:60:ed:20:5a:53:34:
                    1c:33:87:f7:68:c0:db:97:46:79:28:65:1c:10:1c:
                    0b:bf:d4:ed:a6:c8:be:c8:f1:92:00:5f:44:24:4b:
                    fb:c4:73:ce:51:e2:3d:0c:79:76:d1:b1:46:22:57:
                    32:0b:7c:9d:24:60:a8:33:d3:3c:10:2e:f1:0c:6c:
                    e0:2f:be:bf:36:56:dd:6c:ba:e2:33:dd:2f:52:16:
                    1c:8d:35:15:6d:6a:c4:28:16:d0:68:c7:4c:8e:cb:
                    85:ef:08:f2:bd:0e:ed:28:93:8b:76:55:8c:b7:9b:
                    37:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1B:52:D5:75:04:DE:3B:AD:F2:F2:3A:46:0E:00:31:18:04:BB:AD
            X509v3 Authority Key Identifier:
                keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:32:02:11:a2:8a:ca:b4:fe:5c:5e:b7:9b:5d:0b:72:16:49:
         b3:03:ff:b4:77:e2:bb:a7:d3:17:66:c1:dd:0f:b3:9a:9f:da:
         fe:5e:1d:c6:32:c2:02:77:d5:d8:9c:99:ab:ec:12:0b:27:0e:
         4d:76:e5:4b:42:53:40:e5:ca:16:bb:85:1d:0a:09:dc:bd:70:
         fa:40:03:73:f1:1c:25:69:cd:cd:75:6c:b3:cc:67:d3:3f:fc:
         b3:4a:4d:eb:2f:4b:0c:10:48:30:c9:25:fe:e5:ea:e5:60:5e:
         9c:1c:f6:cf:95:14:40:b6:a4:ae:2c:2a:24:05:17:fb:c6:a4:
         df:3e:b9:79:dd:39:97:d1:2b:4e:ba:bc:01:ce:2d:0a:f1:2d:
         ff:df:6c:ad:d8:59:07:8a:cd:92:f4:13:e6:b3:37:66:ec:08:
         b9:d9:fb:ba:9c:ad:6a:31:a9:57:7f:44:bf:61:84:8e:fe:c1:
         7c:93:09:19:8a:4e:f1:a2:96:b3:49:1d:5a:44:3b:27:20:10:
         b7:14:9c:df:75:e1:0d:3d:d7:ca:55:c7:69:22:b6:9f:d4:db:
         36:fb:78:19:a0:57:7e:15:c1:79:71:05:d7:06:36:42:e4:7e:
         d0:a4:77:40:a3:72:2e:ce:62:a7:d4:31:f6:9e:c4:8d:85:51:
         e7:34:e7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:21:13 2026 by rpki-client