Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
File:                     1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json)
Hash identifier:          rDVdud/UK/FabZdpAqW3UgGugy2bOubVN0Om185SrHs=
Subject key identifier:   E8:46:E4:D3:AD:8A:B8:60:5D:01:C4:20:42:1D:9E:3F:DA:6C:30:C1
Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
Certificate issuer:       /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Certificate serial:       01A0D45DEA3C1CFFAC87C6B6FE8E1EC547B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
Manifest number:          0701
Signing time:             Thu 24 Sep 2026 17:01:59 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:59 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:59 +0000
Files and hashes:         1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: +Hx8pIBwkiTVAac+BK3hLbtCHjeUZXsp1vcsqPLHdU4=)
                          2: IebKw_yiTfK_V4_z25ukLjaMeWQ.roa (hash: MAvIvWJqafppESV+KP67qNLbvZAyKKXSx7PlRQfGNY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:ea:3c:1c:ff:ac:87:c6:b6:fe:8e:1e:c5:47:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
        Validity
            Not Before: Sep 24 17:01:59 2026 GMT
            Not After : Sep 25 17:01:59 2026 GMT
        Subject: CN=e846e4d3ad8ab8605d01c420421d9e3fda6c30c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c5:16:0c:e0:8f:04:bb:a9:51:40:de:ec:d9:
                    54:58:3d:84:82:c9:bf:14:f2:99:2d:05:ab:07:e2:
                    16:e3:50:4c:6e:01:d6:e4:97:e9:c4:82:40:c0:92:
                    e2:64:c3:f6:13:42:45:65:6d:dc:dd:95:c4:02:7e:
                    fc:62:09:54:77:d0:54:1e:d9:3d:d6:0f:3c:c1:7c:
                    df:3b:f9:07:7e:dc:4b:72:5b:d3:7b:fa:63:8c:34:
                    04:f4:e4:66:39:84:ed:5f:69:35:92:42:bd:f9:25:
                    92:f7:83:79:86:ef:a0:c0:9f:d4:0f:0d:e5:e2:aa:
                    1b:1e:9b:e6:35:7d:2a:34:75:fd:67:52:9b:99:c4:
                    f6:3c:ad:79:8b:cb:ee:b2:b9:4e:00:9a:cd:d7:2f:
                    bf:20:2a:0f:3c:9b:20:aa:21:ea:39:28:fe:c8:29:
                    c4:23:29:ec:53:b0:b1:0e:1d:3d:07:97:ee:53:88:
                    54:be:f5:9b:b4:32:a1:13:f0:72:9e:33:ed:1b:0e:
                    b6:a9:ab:1d:a0:58:96:84:32:f2:57:a7:32:a6:50:
                    a9:e0:cf:81:63:1c:0f:a0:21:7f:8c:1c:83:a3:39:
                    bd:ef:e5:e6:9b:50:bc:da:7e:93:9c:44:25:fb:02:
                    b5:e5:f1:a0:0a:e7:26:22:c0:fe:0b:c2:44:ef:ff:
                    3c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:46:E4:D3:AD:8A:B8:60:5D:01:C4:20:42:1D:9E:3F:DA:6C:30:C1
            X509v3 Authority Key Identifier:
                keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:37:12:2e:42:2e:45:55:01:fc:1d:7a:4f:81:87:35:5b:d4:
         ae:7e:52:7f:01:bc:a7:34:30:04:8d:88:ba:76:38:53:ed:0b:
         c1:b1:81:52:b6:e2:63:dc:74:cb:e2:04:b7:24:d2:93:b5:6a:
         c7:89:e3:52:ff:a1:60:f7:7a:cb:f5:da:bb:48:43:3a:a2:a7:
         5d:3a:6b:7b:cf:27:14:2b:3e:aa:61:39:3a:ff:4b:c7:42:cd:
         a4:d3:34:e8:c2:d5:4f:a6:b8:c5:60:68:8c:7a:8e:2a:4d:04:
         4f:06:47:fe:ab:f2:9f:1b:51:b3:05:22:89:d9:a2:f6:df:ca:
         c5:f3:ec:6f:ee:af:fa:ea:fe:00:44:2c:08:02:03:f4:fc:2d:
         eb:9f:a6:42:76:34:66:f5:45:d8:1c:49:a9:8e:17:34:03:f6:
         d6:34:82:4b:27:d8:21:53:64:16:87:89:16:c8:5c:d3:81:45:
         5e:9b:df:30:51:12:53:98:6e:85:8b:2f:f1:f9:76:9b:cb:d0:
         bc:1c:e8:21:b1:c1:30:b2:72:da:25:6c:39:d5:dc:bf:4d:3d:
         03:32:0a:ac:86:f6:f1:d6:a8:5d:49:92:c3:a2:fb:88:d4:c3:
         5e:fc:dd:a8:23:3b:fd:e1:a2:a6:2c:07:8a:fb:57:02:32:c3:
         c6:ae:9b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:47:00 2026 by rpki-client