Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
File:                     97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft (raw, json)
Hash identifier:          9Asnx9I2jmoSq+SshqoEU/gTbXrUY896CPY6/ZytYR8=
Subject key identifier:   10:DD:7E:B7:04:B2:6E:45:82:5E:86:58:83:87:59:20:D7:84:80:9A
Authority key identifier: F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
Certificate issuer:       /CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Certificate serial:       01A103C9D283BC43E375FE8FA439CA23648D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
Manifest number:          1A18
Signing time:             Sat 03 Oct 2026 22:02:00 +0000
Manifest this update:     Sat 03 Oct 2026 22:02:00 +0000
Manifest next update:     Sun 04 Oct 2026 22:02:00 +0000
Files and hashes:         1: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl (hash: 611TYvpP0++MFhxLBaqCx7Zmt++FSIU1tTMj1WyDDck=)
                          2: iEGrmEBr_XYHG10FFaz1pHlElzU.roa (hash: Cm2PlN0NZyKWye3mjv4O21ycHAo7BA8ZMRSr0N03Zos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:c9:d2:83:bc:43:e3:75:fe:8f:a4:39:ca:23:64:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b7c2e8453ed4c0929c7504baf046043159d105
        Validity
            Not Before: Oct  3 22:02:00 2026 GMT
            Not After : Oct  4 22:02:00 2026 GMT
        Subject: CN=10dd7eb704b26e45825e865883875920d784809a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:e8:59:aa:36:a2:a2:8b:7c:b2:da:7f:fb:
                    fd:4f:64:2b:74:19:6b:f3:9f:c6:6a:a5:e8:a2:56:
                    73:62:91:61:27:89:52:e5:fe:77:c1:c7:6b:6a:62:
                    ad:41:ff:b6:05:c8:04:bd:3d:ed:d2:6c:d3:c6:92:
                    43:d0:26:05:d5:7e:88:fa:60:e2:c2:c5:35:4b:ab:
                    b6:fe:80:1f:15:0d:ba:97:b8:1f:a2:94:8d:28:7f:
                    d9:fa:53:6c:1d:a0:33:ad:e4:c8:98:bf:e1:4b:86:
                    fa:e9:99:b2:d3:87:21:e9:a6:5f:59:8b:7b:05:1c:
                    80:71:5c:12:e1:81:f7:8c:ec:a0:ee:79:19:54:32:
                    e5:54:ea:a2:80:7b:f4:09:3e:53:20:6a:f7:34:be:
                    17:7e:55:c4:7a:ff:87:9c:74:bf:4f:10:2d:64:d9:
                    1a:01:9e:0b:f7:63:91:e3:04:a6:aa:1c:86:c8:46:
                    28:53:a8:c5:c8:8e:be:34:d6:96:bb:0d:d4:de:28:
                    de:6e:bd:e3:cc:1a:2c:db:8c:68:7a:3a:6a:a4:50:
                    bf:dc:ea:b5:a7:f6:93:87:9c:48:28:32:14:33:39:
                    40:2a:c3:b4:c1:82:0d:52:2f:cd:c2:d0:f3:a6:f0:
                    c8:46:a5:83:c3:69:a8:f5:03:1b:fd:80:f8:aa:6f:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DD:7E:B7:04:B2:6E:45:82:5E:86:58:83:87:59:20:D7:84:80:9A
            X509v3 Authority Key Identifier:
                keyid:F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:63:f0:0a:cc:b9:14:ef:fd:b4:2a:b1:02:ee:cb:4f:b7:c8:
         7f:b6:e8:8e:44:85:a3:46:e6:9c:72:51:74:87:63:89:75:76:
         f1:cf:c8:42:d0:86:bd:78:fb:88:77:d9:d7:48:7e:3b:7e:c9:
         f4:cd:0d:d0:19:db:5a:6d:2e:6a:7b:ca:72:5f:00:24:6a:08:
         9c:f5:f8:a0:a0:e6:d5:d8:df:c6:52:0f:75:56:ab:48:50:59:
         bb:17:54:04:1c:26:bf:30:43:cb:e2:a7:b0:09:a7:b2:be:54:
         19:e8:be:2d:db:20:bf:ff:6b:09:17:10:b8:db:25:f3:76:dd:
         27:ea:5c:3f:d5:98:1a:d4:b8:89:13:8b:10:c4:01:19:fe:96:
         75:d6:3f:06:43:54:11:e2:4f:21:12:19:ec:05:49:80:17:35:
         f6:81:46:8d:0a:31:1e:73:81:f4:08:10:e6:d1:75:55:21:65:
         b5:71:d8:51:2b:58:ea:de:ed:9b:9c:c8:a9:ed:20:00:6e:d9:
         7c:45:8b:2d:0c:75:b1:f9:d7:2b:30:72:df:a8:ff:88:f2:5b:
         db:76:b3:d6:8f:13:57:c3:f9:b6:02:78:1c:fc:85:16:db:a9:
         4f:30:46:6d:17:a6:e4:d1:ae:5b:42:25:0b:3d:42:48:ff:d1:
         24:4b:27:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:37:46 2026 by rpki-client