Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
File:                     1-w8AoW8RYMy3oFQNkqyohm6YeI.mft (raw, json)
Hash identifier:          70kN3X49ecKJBPAhHCtVK0d1ae+Ugc++sz2Hd++A82A=
Subject key identifier:   30:24:A0:A7:63:82:C9:90:ED:55:5F:FF:2A:28:BD:7A:70:34:C3:6A
Authority key identifier: D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2
Certificate issuer:       /CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
Certificate serial:       01A0D682A00DC7CC983156CD5793432D5BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
Manifest number:          040E
Signing time:             Fri 25 Sep 2026 03:01:19 +0000
Manifest this update:     Fri 25 Sep 2026 03:01:19 +0000
Manifest next update:     Sat 26 Sep 2026 03:01:19 +0000
Files and hashes:         1: 1-w8AoW8RYMy3oFQNkqyohm6YeI.crl (hash: jmT7jV/eVsqPh9tj8LO9n/x4sZ7Pz19H0Ce2LuIPZv8=)
                          2: fGmytEtcKCBxP_COaX3EzxixmEo.roa (hash: 91bs2HcwyIQ9LFJt+Drla5dzPgI0WfHKEyPyA0R0pa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 03:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:82:a0:0d:c7:cc:98:31:56:cd:57:93:43:2d:5b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
        Validity
            Not Before: Sep 25 03:01:19 2026 GMT
            Not After : Sep 26 03:01:19 2026 GMT
        Subject: CN=3024a0a76382c990ed555fff2a28bd7a7034c36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b4:e8:d2:89:60:85:27:0e:66:0f:e7:91:5e:
                    c2:01:75:cf:97:34:1f:b2:87:23:a6:2b:f2:eb:45:
                    52:5d:48:d1:46:1c:32:71:0a:bd:25:67:93:c2:d9:
                    08:14:54:3f:58:f4:74:12:26:70:3c:1d:71:2c:73:
                    3a:00:ff:4a:15:9d:79:d8:cd:4b:e4:45:d7:a5:c9:
                    30:6d:7f:f2:59:cf:9f:2d:b2:0f:a1:ea:82:00:bf:
                    73:af:86:c2:d8:35:2e:b9:5c:32:47:5a:c9:e6:18:
                    cd:d5:90:fe:cb:20:27:bf:44:3b:70:15:04:a4:81:
                    c1:37:d4:1c:9a:c4:fa:d5:42:60:bb:0a:d2:a6:11:
                    48:66:56:84:8d:00:f7:42:ce:58:18:02:2e:81:57:
                    ca:98:58:02:0c:f3:ee:46:bf:86:b9:f9:26:ea:7f:
                    d1:2d:df:04:21:76:05:a2:3d:f2:02:ef:29:f1:61:
                    59:8d:98:21:19:70:4b:71:0d:e0:f0:2f:9d:65:a4:
                    97:34:11:9e:c1:bb:63:4a:cf:10:37:a7:6e:3e:01:
                    63:ce:40:ee:93:bb:3d:57:85:fd:8f:81:55:e6:59:
                    3a:75:24:fe:28:4f:e7:73:87:20:9f:e7:0b:0b:23:
                    a3:8f:82:85:8d:88:cf:c0:60:4d:43:3e:aa:4d:5c:
                    54:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:24:A0:A7:63:82:C9:90:ED:55:5F:FF:2A:28:BD:7A:70:34:C3:6A
            X509v3 Authority Key Identifier:
                keyid:D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:49:b3:6f:02:bd:29:ec:56:28:14:ba:e6:d4:f0:28:b4:9c:
         14:23:59:b1:eb:87:dc:6f:c2:31:af:c8:4e:a2:0e:30:15:ce:
         b7:15:64:8c:60:9e:96:62:0f:1d:3c:f9:b6:20:cf:e5:e4:64:
         40:25:e4:05:e3:26:02:60:de:4c:26:d5:c5:69:70:0d:be:4d:
         e1:f4:ea:5f:e5:e8:12:df:fb:c5:63:1b:cb:42:ad:63:f5:2c:
         b2:25:14:7b:d1:96:f6:d5:1a:17:d6:3b:1b:8d:3a:de:ac:8f:
         fd:17:6b:3d:5d:ff:29:59:fa:12:5f:00:93:9b:30:3a:db:5d:
         52:9d:dd:88:62:92:d9:83:02:4f:3e:d6:cb:6c:a8:18:5e:0a:
         ae:98:93:17:f7:b1:9e:9d:1e:a3:84:87:71:90:dd:1e:d7:1a:
         fd:4f:ae:91:fa:4a:84:b0:53:c4:eb:15:5e:67:2b:52:ec:ac:
         bb:6a:ff:54:be:8e:4d:c2:64:17:20:32:f1:9d:8e:66:75:95:
         47:93:1b:33:3c:55:31:d5:8a:54:8c:c7:bf:a5:66:66:1e:29:
         20:24:a6:bf:7c:1e:41:e2:c4:cc:69:fa:81:0f:18:50:7e:af:
         ad:f6:26:5d:8a:05:2f:50:55:d1:28:b5:e0:73:a1:5d:f1:71:
         7b:e2:2b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:53:07 2026 by rpki-client