Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
File:                     1-J4in4YLBY0j_SiikmFhuHhjMMY.mft (raw, json)
Hash identifier:          GR8gN7iVPkBNR3h/M5pRYuVAD+zRORRChBpTPIXqsdE=
Subject key identifier:   53:F1:3D:A7:B7:30:F5:18:77:CD:35:18:BC:30:8F:2C:C8:3C:D5:08
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Certificate issuer:       /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial:       01A0D8A847D661B59360F1FA8CCFDD1281DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
Manifest number:          1336
Signing time:             Fri 25 Sep 2026 13:01:41 +0000
Manifest this update:     Fri 25 Sep 2026 13:01:41 +0000
Manifest next update:     Sat 26 Sep 2026 13:01:41 +0000
Files and hashes:         1: 1-J4in4YLBY0j_SiikmFhuHhjMMY.crl (hash: 3h9iN8XCGtjq01RkHsPgCeQkfSHQnEFmy0Uhzf/4r9s=)
                          2: fSxv-fa820aQ4S9EYgBkeHgJYUs.roa (hash: K47nAqoGk2oEUNxR6ydvT1zDvrh8m0EYPg1t6S3F6ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:a8:47:d6:61:b5:93:60:f1:fa:8c:cf:dd:12:81:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
        Validity
            Not Before: Sep 25 13:01:41 2026 GMT
            Not After : Sep 26 13:01:41 2026 GMT
        Subject: CN=53f13da7b730f51877cd3518bc308f2cc83cd508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:16:47:a0:0e:c7:3a:da:21:f4:47:6e:d5:a1:
                    ac:86:42:3b:89:72:33:44:42:c6:d9:85:28:84:48:
                    11:1a:cd:90:04:36:6d:b6:b8:8d:1f:26:d5:bb:bb:
                    f7:1d:67:ff:c5:c3:ab:c5:7e:2d:70:de:5a:76:35:
                    e0:36:a6:24:6b:55:18:93:81:fa:0e:29:32:fb:98:
                    5b:ae:ac:07:71:a8:4a:6e:b4:48:ad:b8:b2:83:5f:
                    c0:4b:8b:b9:16:85:0d:f3:5f:c5:0c:d8:49:fc:79:
                    80:cc:5b:71:d0:bd:81:95:04:2a:50:40:9e:1e:04:
                    da:b4:fd:8a:c3:14:41:9c:23:fa:8f:25:f6:4a:a1:
                    32:1d:90:55:e5:22:7d:b2:19:48:3f:4a:b8:61:9e:
                    57:41:ac:74:b4:ca:fc:fd:4a:59:f1:3a:fd:f4:3c:
                    14:82:a5:9f:4d:16:51:a0:3f:70:f9:09:d3:d3:ea:
                    46:0e:df:ad:7c:d8:3a:63:bf:43:95:ca:a7:a1:50:
                    1b:c3:56:f5:67:0e:14:9d:f0:f4:bb:f9:98:81:88:
                    93:c3:f7:00:f8:32:0a:10:8d:e9:bd:1a:e7:05:8f:
                    84:ee:97:1f:28:ef:bf:80:72:83:9f:4e:a0:27:d6:
                    3a:69:83:4e:82:0c:f6:f9:b9:dd:13:e2:8b:36:05:
                    0b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F1:3D:A7:B7:30:F5:18:77:CD:35:18:BC:30:8F:2C:C8:3C:D5:08
            X509v3 Authority Key Identifier:
                keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:00:0d:bb:bd:c9:98:55:d4:e4:4c:77:e8:0d:3b:88:67:77:
         16:57:f0:03:f0:ac:c1:3f:16:c5:3b:e6:5a:c8:1d:e8:42:3e:
         f8:db:5b:21:fd:00:3f:77:56:f6:b8:fa:7f:b8:63:f7:f3:8a:
         31:9f:67:d7:eb:dd:89:35:c2:eb:ee:7e:24:20:23:e1:2a:40:
         a3:af:a3:c9:a3:ba:3e:7b:e6:77:37:55:02:02:8a:e3:bb:eb:
         0b:c2:df:31:cd:ff:05:a3:ca:65:3b:ae:89:52:29:24:6a:62:
         17:a9:18:3d:3c:19:a2:1a:28:ee:d8:76:ea:bb:fa:64:e7:7c:
         3c:7c:a2:45:40:0e:7b:80:12:af:aa:c0:16:58:b9:ff:75:38:
         ad:89:63:52:70:2c:c7:8b:3c:83:dd:aa:40:ec:79:d7:d9:fa:
         1e:5a:e2:9f:62:d8:55:89:e3:db:cf:13:29:56:79:07:56:3d:
         e1:e8:cf:f0:12:93:f1:45:8c:22:32:c7:ee:81:d2:7d:9e:62:
         39:ac:11:da:6e:5e:82:ae:6d:14:d8:39:ae:60:ad:4e:cd:f3:
         40:a8:d0:59:c8:a3:e2:c6:49:a6:86:6b:44:64:20:c5:e2:69:
         f4:ca:34:aa:05:b1:97:b7:98:db:7d:7f:19:2a:ba:03:58:68:
         2b:4e:e2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:38:53 2026 by rpki-client