Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
File:                     1mQz-w-93Ml-sBVmko1gcGzMZiM.mft (raw, json)
Hash identifier:          noIXaRiwJ+PrsuYNxl0vEcOLaiikqOCtLHsIopWhlsE=
Subject key identifier:   76:1D:F5:92:A9:AC:10:B4:AD:0E:43:B2:70:22:AB:FA:9A:07:E3:F5
Authority key identifier: D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23
Certificate issuer:       /CN=d66433fb0fbddcc97eb01566928d60706ccc6623
Certificate serial:       01A0D614A781BE221AC5557634C17803CAD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
Manifest number:          0CD4
Signing time:             Fri 25 Sep 2026 01:01:12 +0000
Manifest this update:     Fri 25 Sep 2026 01:01:12 +0000
Manifest next update:     Sat 26 Sep 2026 01:01:12 +0000
Files and hashes:         1: 1mQz-w-93Ml-sBVmko1gcGzMZiM.crl (hash: 6f1e5adtyioZ7R/3JXgTrn8dGD3nFz5y/UCr46tX0Lo=)
                          2: AKAYJxK55ho0_-tu4n3xkwEVy0E.roa (hash: CwiOEuZ5WNXcf/WHMc8X4C6V6miMKO5JICnCl7N0bT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:14:a7:81:be:22:1a:c5:55:76:34:c1:78:03:ca:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66433fb0fbddcc97eb01566928d60706ccc6623
        Validity
            Not Before: Sep 25 01:01:12 2026 GMT
            Not After : Sep 26 01:01:12 2026 GMT
        Subject: CN=761df592a9ac10b4ad0e43b27022abfa9a07e3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5d:d3:6a:60:0e:91:f7:ee:df:38:8f:30:e3:
                    4c:0b:20:88:a9:d3:71:f5:06:04:5e:dd:34:cf:6f:
                    3b:c3:e5:89:f5:bd:f6:aa:a2:98:f1:63:e2:01:9e:
                    ab:7e:ef:c5:97:0e:70:b1:0c:19:1d:3a:70:d9:c8:
                    b1:b2:a3:1a:c7:b4:e2:9b:ee:37:5d:04:00:be:04:
                    7a:bd:ea:93:bc:8a:09:91:12:8b:c8:c0:fb:0b:9f:
                    9c:22:5a:3a:12:e7:d0:93:ac:f8:c1:e3:99:eb:af:
                    9c:b6:90:4b:8d:2b:b5:6c:25:81:49:95:cf:a1:a7:
                    95:c3:81:40:73:a9:ed:68:ae:b7:94:2e:98:d1:72:
                    0e:e7:5a:4b:56:f6:c4:9b:73:ca:56:bf:a1:eb:82:
                    91:72:ad:6a:f9:12:88:81:64:37:31:1c:7d:1c:18:
                    b3:3f:08:64:81:47:0e:a0:43:91:bb:8e:69:24:24:
                    57:a5:b4:0c:5f:5c:81:2f:92:f5:61:2a:b4:bc:7d:
                    9a:fa:18:e8:11:82:51:cb:1d:5f:a4:6f:11:7b:82:
                    6c:f3:9e:d9:e9:17:81:38:c4:81:09:5e:88:5a:06:
                    7e:e2:bf:7e:0c:a5:ee:6b:42:c4:30:d9:dc:82:74:
                    6d:38:c4:3c:49:1d:90:d3:57:0a:5b:1d:d9:1b:28:
                    af:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1D:F5:92:A9:AC:10:B4:AD:0E:43:B2:70:22:AB:FA:9A:07:E3:F5
            X509v3 Authority Key Identifier:
                keyid:D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:74:dd:cf:ec:8c:10:ed:cf:20:e0:b1:3f:05:d3:6c:d6:e3:
         b0:14:60:ee:8b:f8:00:23:cd:ba:50:80:d3:21:fe:54:63:b5:
         fd:a3:15:a4:dc:12:d3:0d:64:f1:8b:e6:2f:43:d4:0e:0b:05:
         52:53:6c:e8:49:1c:db:46:a5:a8:46:2c:f0:38:59:f7:a2:60:
         6f:d9:4d:68:33:41:c0:80:46:cc:96:49:ad:50:87:4a:2a:f3:
         ab:d6:28:4d:f8:34:d0:00:40:16:95:98:c7:de:2e:1f:9e:d7:
         f1:4f:6e:02:ba:15:fa:46:02:cf:a5:dd:12:7e:60:a8:00:84:
         cc:50:61:af:10:0e:58:7c:ae:ac:dd:2e:44:3e:13:56:69:d2:
         68:b3:d7:ee:74:9c:ad:af:ca:af:c3:65:db:92:8a:1d:79:e8:
         6a:3c:f9:8d:11:6c:c7:ca:93:ca:52:c0:6c:aa:af:92:94:e3:
         b5:41:ca:8e:db:9d:31:b3:25:74:3b:dc:2a:ce:a9:a0:ef:31:
         92:e0:28:23:f4:d8:9f:b9:25:bb:d1:2a:62:5a:a3:2f:19:41:
         d3:c2:63:e1:07:f1:7e:f5:20:aa:1a:55:cc:0d:2b:58:09:37:
         79:c1:43:60:fa:5b:d6:28:7d:2f:0b:50:44:75:af:14:76:1e:
         2a:b3:40:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:44:16 2026 by rpki-client