Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
File:                     0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft (raw, json)
Hash identifier:          wGxeMxDg4Dru7BZB7CqtY6edV22xDfVRatIAEYiQOZo=
Subject key identifier:   71:1F:EE:DD:A4:A5:A3:B0:73:2D:C5:72:DE:E5:B6:94:C3:50:5D:1C
Authority key identifier: D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1
Certificate issuer:       /CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
Certificate serial:       01A0D5702F62D1344F5DD386C2F4CAAD0117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
Manifest number:          1794
Signing time:             Thu 24 Sep 2026 22:01:34 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:34 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:34 +0000
Files and hashes:         1: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl (hash: V+pQQnADH4sKtFbn5fwJmVT5RqEOrexhliiAs4SSIj0=)
                          2: g6AUdtBKbxSolGFU2rOSyRaiZMc.roa (hash: coGf1wAtr5fsslkJ4IB/mKoERpi+xwxfE7T7e7sR0vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:2f:62:d1:34:4f:5d:d3:86:c2:f4:ca:ad:01:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
        Validity
            Not Before: Sep 24 22:01:34 2026 GMT
            Not After : Sep 25 22:01:34 2026 GMT
        Subject: CN=711feedda4a5a3b0732dc572dee5b694c3505d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:99:b2:3e:fe:b3:ee:d3:45:3b:bb:f9:c5:
                    c7:f8:63:2e:a9:ff:90:44:7b:c2:b0:05:32:53:3f:
                    58:9e:df:af:22:11:91:1c:c4:26:16:18:f3:64:c6:
                    15:7b:4e:4c:51:54:aa:d1:de:39:46:a8:7b:98:88:
                    33:94:6e:22:01:9e:c8:e4:0c:db:06:a0:9e:0d:45:
                    35:f9:62:38:c5:58:54:85:4a:14:b8:de:9b:93:49:
                    d0:9e:99:07:5e:31:e6:56:11:ee:f7:1e:b8:31:44:
                    13:c4:56:e9:1d:a1:46:7b:65:ff:76:48:43:d6:67:
                    77:d6:67:d8:e6:0e:8e:af:8d:07:60:a5:8b:54:7d:
                    3e:13:b9:c5:d0:72:9d:02:dc:85:dc:aa:f5:88:4c:
                    8c:2b:b5:13:df:95:09:0c:61:87:cb:56:ad:f4:56:
                    12:c5:32:51:f1:27:b8:a1:5a:b4:03:61:0c:84:49:
                    0d:e2:15:23:94:8a:97:dd:72:b4:5b:1c:62:4b:25:
                    db:c1:26:9d:ca:6f:45:9d:33:ac:70:7d:a7:1e:de:
                    ba:9a:e9:92:6a:45:74:04:1e:b8:b6:95:c7:b2:cc:
                    02:5b:50:89:03:30:2e:3a:41:40:bb:fc:f5:32:51:
                    61:53:cd:33:be:43:56:d5:d2:96:04:be:57:b8:5c:
                    ba:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1F:EE:DD:A4:A5:A3:B0:73:2D:C5:72:DE:E5:B6:94:C3:50:5D:1C
            X509v3 Authority Key Identifier:
                keyid:D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:08:d9:0d:85:4e:95:75:b0:80:69:eb:48:3c:ee:cc:81:b0:
         51:ac:92:82:fa:22:b7:a2:e5:37:0b:04:b7:14:93:7a:7e:59:
         cf:17:54:ae:12:c8:2f:8c:80:6a:5e:3c:ec:12:08:53:bd:01:
         63:b8:00:a2:e6:40:7f:c4:71:fd:e4:7c:9f:8a:89:84:ad:91:
         36:34:20:d3:b9:f1:74:f1:db:a1:74:f5:4b:4f:ac:b9:82:bc:
         70:78:01:e7:5d:01:4d:ad:74:e4:4f:9e:b2:48:c1:97:76:5f:
         3d:38:d7:f7:7b:c0:79:57:a0:5a:66:2b:b8:bc:a1:09:52:8e:
         ac:0e:69:6e:3b:a9:e6:62:4a:40:4c:be:bc:72:0e:02:b5:db:
         bf:7a:98:ed:02:f4:fc:28:5c:b2:ce:50:dc:35:97:a8:c1:f6:
         e2:95:7d:d5:3e:b1:47:79:60:4c:6a:11:88:82:30:f3:c1:f7:
         3b:8d:6a:20:dd:46:e9:ab:ff:38:be:b5:98:cc:b7:84:50:d5:
         63:93:f8:a1:2d:88:05:02:db:f4:ed:61:d8:a4:92:17:6d:8f:
         48:a3:c2:ae:7f:35:21:e5:43:4a:54:e8:41:9e:37:ab:a6:d4:
         7d:4c:04:2f:f5:8f:db:f3:3e:4d:c8:ce:31:f6:c0:a7:60:ea:
         01:86:09:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVcC9i0TRPXdOGwvTKrQEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYmQ2NGNjOTRhNGE4NTE4YTcxZjk2ZWY4Yjc3NjI1YWZh
NTI3ZDEwHhcNMjYwOTI0MjIwMTM0WhcNMjYwOTI1MjIwMTM0WjAzMTEwLwYDVQQD
Eyg3MTFmZWVkZGE0YTVhM2IwNzMyZGM1NzJkZWU1YjY5NGMzNTA1ZDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvziZsj7+s+7TRTu7+cXH+GMuqf+Q
RHvCsAUyUz9Ynt+vIhGRHMQmFhjzZMYVe05MUVSq0d45Rqh7mIgzlG4iAZ7I5Azb
BqCeDUU1+WI4xVhUhUoUuN6bk0nQnpkHXjHmVhHu9x64MUQTxFbpHaFGe2X/dkhD
1md31mfY5g6Or40HYKWLVH0+E7nF0HKdAtyF3Kr1iEyMK7UT35UJDGGHy1at9FYS
xTJR8Se4oVq0A2EMhEkN4hUjlIqX3XK0WxxiSyXbwSadym9FnTOscH2nHt66mumS
akV0BB64tpXHsswCW1CJAzAuOkFAu/z1MlFhU80zvkNW1dKWBL5XuFy69wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEf7t2kpaOwcy3Fct7ltpTDUF0cMB8GA1UdIwQY
MBaAFNG9ZMyUpKhRinH5bvi3diWvpSfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTct
MDgyNmYzNmZmMjhmLzEvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTctMDgyNmYzNmZmMjhm
LzEvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwjZDYVO
lXWwgGnrSDzuzIGwUaySgvoit6LlNwsEtxSTen5ZzxdUrhLIL4yAal487BIIU70B
Y7gAouZAf8Rx/eR8n4qJhK2RNjQg07nxdPHboXT1S0+suYK8cHgB510BTa105E+e
skjBl3ZfPTjX93vAeVegWmYruLyhCVKOrA5pbjup5mJKQEy+vHIOArXbv3qY7QL0
/Chcss5Q3DWXqMH24pV91T6xR3lgTGoRiIIw88H3O41qIN1G6av/OL61mMy3hFDV
Y5P4oS2IBQLb9O1h2KSSF22PSKPCrn81IeVDSlToQZ43q6bUfUwEL/WP2/M+TcjO
MfbAp2DqAYYJOQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:27:31 2026 by rpki-client