Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
File:                     1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft (raw, json)
Hash identifier:          Z6cILy2D1yp1+wnYCYc1AC75+pGJaAYvym3vPrvdgOE=
Subject key identifier:   CD:24:64:13:91:F1:0D:18:13:0F:77:4C:40:0E:D1:37:D2:1C:5D:55
Authority key identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
Certificate issuer:       /CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Certificate serial:       01A0CEC800393F3B4685CD98331AC1A215B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
Manifest number:          03CB
Signing time:             Wed 23 Sep 2026 15:00:08 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:08 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:08 +0000
Files and hashes:         1: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl (hash: 9khLoWUo/8f1NVenRCytxleiHX7ldxeVgzt78WPCpvM=)
                          2: S91SpqjKHj-9za4dXEoQ07MOmwY.roa (hash: mrZK89V5wHR4TTBGwZBPy+vU+mPnk1QYo7P0So8JmRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:00:39:3f:3b:46:85:cd:98:33:1a:c1:a2:15:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
        Validity
            Not Before: Sep 23 15:00:08 2026 GMT
            Not After : Sep 24 15:00:08 2026 GMT
        Subject: CN=cd24641391f10d18130f774c400ed137d21c5d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:21:14:70:0e:b0:19:c6:c9:65:41:bb:38:
                    f3:cd:8d:c9:c0:9e:b6:b0:b6:e0:13:43:1d:04:83:
                    c9:1a:7e:33:2c:4c:73:49:b8:f0:ab:6f:c9:a4:bc:
                    ed:53:31:6e:9a:89:62:e4:d4:7f:12:33:3a:e4:5f:
                    31:78:4f:a3:75:70:15:2b:89:4d:bd:38:0e:4b:90:
                    4f:7f:d3:a7:21:94:36:d0:fa:06:ac:10:89:7d:83:
                    18:0c:e2:ea:92:da:04:c9:c2:8d:37:dc:22:02:c9:
                    58:e2:b5:6d:60:f7:86:85:a5:3c:37:35:20:05:69:
                    67:8a:c1:0a:16:c9:a4:b5:25:af:72:23:bc:99:2f:
                    ab:dd:8d:cf:81:43:a3:43:20:f2:1e:79:d9:e2:69:
                    19:34:81:b1:97:69:c4:37:8e:8f:01:9a:e7:5b:3f:
                    a6:66:13:c7:cb:60:57:60:57:1f:fb:b0:72:cb:77:
                    f1:19:b8:64:eb:c0:a0:a5:45:55:89:bc:15:30:f9:
                    d6:6d:55:a0:69:6a:b6:f4:f5:1a:9b:d7:7e:f3:54:
                    37:e6:cb:87:22:64:d7:12:c3:1c:b7:c2:65:ba:0a:
                    d9:40:fc:27:51:52:c8:d9:8d:de:d0:44:d9:f0:4e:
                    dc:1f:c1:06:14:84:46:f3:77:2d:2c:78:86:e7:0c:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:24:64:13:91:F1:0D:18:13:0F:77:4C:40:0E:D1:37:D2:1C:5D:55
            X509v3 Authority Key Identifier:
                keyid:F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f5:3c:bf:8a:63:f4:35:73:b1:26:0f:a8:35:c5:61:53:d6:
         e0:79:0b:c0:dc:8f:db:5a:06:33:09:59:53:7a:49:51:03:fd:
         79:92:08:90:b5:61:7d:e2:9c:ff:36:05:b8:1a:e9:83:a6:d0:
         8b:90:2e:46:51:dc:f8:ac:c5:5d:3c:1e:46:6e:cb:71:a4:ed:
         3d:c0:98:80:99:79:e7:a4:75:46:45:fe:76:98:e1:4b:ae:98:
         23:1c:06:58:b2:83:b5:eb:cc:03:1d:14:ee:ea:69:79:40:76:
         53:b3:53:75:1c:87:30:30:69:fb:fc:b0:ee:37:56:8e:3c:42:
         88:20:2b:8a:2d:70:5b:a4:b4:6d:5e:af:bd:6f:ee:b9:1b:25:
         4e:2f:fa:10:9d:01:b1:da:8f:ef:69:03:a9:3e:f5:94:77:88:
         96:2d:d7:e0:b8:f2:75:1c:78:f2:df:58:eb:fa:b1:4b:ea:6a:
         37:0a:bb:13:46:b8:ad:92:7b:fa:51:eb:f1:bc:a8:5a:f0:f5:
         37:b9:42:5a:58:0f:11:e4:e2:61:5d:80:c5:28:96:b1:16:4f:
         f2:13:f8:14:ff:e7:56:cf:46:55:49:a2:df:35:d9:c2:6f:50:
         cd:70:19:a1:70:42:44:06:92:37:d8:ff:36:17:ea:7c:75:70:
         89:93:b1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:51:01 2026 by rpki-client