Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File:                     1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier:          vzpfV9PQPLingLrDwrRT1PMAM+Ya9gCdL824Ot8Fz2I=
Subject key identifier:   EC:78:0F:10:D0:54:5C:DF:FC:C4:FA:20:C9:87:D4:95:A0:8B:EC:6D
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer:       /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial:       01A0D94CF27B80B67F3E156E6DD699A78712
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number:          1A71
Signing time:             Fri 25 Sep 2026 16:01:33 +0000
Manifest this update:     Fri 25 Sep 2026 16:01:33 +0000
Manifest next update:     Sat 26 Sep 2026 16:01:33 +0000
Files and hashes:         1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: Vbc476R0IblY4tNnvMG8GLBF+ugLtYi4leIcRI90z9s=)
                          2: 6tWtabdt5bSrtsaHQ9QBo4ICycQ.roa (hash: HsNpK7hPj6W6BnASMw5ZiyHooADbT1D1N/LoEYfC8k0=)
                          3: iQJQC_oWujo-15_GL75EM-stwEc.roa (hash: VM81RK3ZU1AzMrmtbRjQdCVVrAt7gS8cQsTq2NJoc+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4c:f2:7b:80:b6:7f:3e:15:6e:6d:d6:99:a7:87:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
        Validity
            Not Before: Sep 25 16:01:33 2026 GMT
            Not After : Sep 26 16:01:33 2026 GMT
        Subject: CN=ec780f10d0545cdffcc4fa20c987d495a08bec6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:f1:62:e0:f1:61:c4:0d:c4:80:e1:5d:a4:
                    f3:a3:de:4a:f7:d4:20:b5:fa:05:ee:5c:14:06:28:
                    00:8a:15:be:43:a0:3b:04:96:0b:5a:58:b2:9e:b1:
                    42:77:86:44:93:47:45:d4:f2:c5:3d:fb:b9:ae:12:
                    b7:fe:e6:45:bb:37:e3:83:b9:79:d3:4d:4f:ec:0f:
                    06:df:77:9b:45:ae:b0:e4:7f:b4:f4:81:c9:32:e2:
                    5b:e3:de:a1:fa:9b:4e:0d:06:39:de:e0:d8:11:31:
                    be:fd:a6:3b:d9:69:6b:a3:82:6e:68:27:2f:ce:83:
                    6c:96:99:31:d6:8c:39:71:d2:33:68:77:df:51:59:
                    8b:8d:09:99:ee:f2:57:6f:6c:d5:df:b6:6c:6f:d7:
                    11:63:b3:1b:70:3e:f1:1b:f3:e1:5e:da:4b:a0:09:
                    76:93:9e:f4:8f:63:47:46:57:0a:bd:28:ad:5a:96:
                    1b:31:83:f2:0b:4c:86:2d:31:e3:69:20:b1:62:55:
                    22:88:04:45:bf:d3:3f:e7:79:dd:fc:14:54:35:83:
                    2e:ca:ab:03:86:8a:aa:37:cd:00:1f:ae:10:ae:ea:
                    ed:c2:3d:d5:50:02:fb:f4:b9:0d:1a:25:37:bc:04:
                    7f:18:51:09:a8:42:74:b0:b5:d0:b0:30:a8:65:36:
                    96:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:78:0F:10:D0:54:5C:DF:FC:C4:FA:20:C9:87:D4:95:A0:8B:EC:6D
            X509v3 Authority Key Identifier:
                keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5a:e0:30:9f:0b:a9:49:15:15:dc:f5:87:e0:90:07:22:03:
         76:a2:ba:70:32:0f:5b:54:d8:76:4b:62:3a:cd:84:46:eb:ca:
         51:55:03:c5:75:9e:a2:fc:d7:4d:de:07:f3:79:86:49:b3:26:
         5a:eb:ce:5d:7b:15:0d:29:18:7d:53:44:e6:ec:87:61:9d:24:
         02:79:1a:20:0f:9f:db:f6:a5:d8:31:2a:f0:24:b8:bf:ec:71:
         56:d0:a3:ce:4c:ae:2e:fe:c2:d6:e0:24:c6:8a:f1:21:5e:7d:
         9c:20:aa:8f:36:a7:18:3f:a2:43:b4:34:07:c5:16:df:da:98:
         c5:3a:bd:cb:01:ef:30:a0:da:cc:aa:d2:af:ac:5a:20:35:fb:
         7b:85:ac:23:8f:4c:c0:8f:52:9b:b0:5e:11:51:0e:be:d6:f6:
         50:ba:7b:90:e7:8a:18:f6:79:80:af:09:ae:b4:05:52:9d:0a:
         f3:28:98:2a:3e:91:ab:cb:b2:30:90:0a:93:e7:a1:a6:52:b8:
         13:0a:99:4d:97:5e:7f:e9:1d:e5:40:20:e0:e7:27:fd:a3:f3:
         2e:1f:71:5f:80:a6:69:e4:90:bf:b8:35:a4:39:9d:95:e7:68:
         b2:48:d0:1a:76:5d:16:d7:83:8b:64:8d:b0:ff:8b:c6:fa:c2:
         65:bf:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:24:15 2026 by rpki-client