Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File:                     1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier:          +aQ0YLeu65xkdQ3bkHs4hHhI1JXS59Z7kzJbhVqI8lo=
Subject key identifier:   90:B0:40:73:C4:CD:10:C4:AE:78:D4:4B:F9:5D:DF:FF:C5:70:F4:69
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer:       /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial:       01A0CB9007796A66D03980FC9DECC895F7CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number:          1264
Signing time:             Wed 23 Sep 2026 00:00:08 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:08 +0000
Manifest next update:     Thu 24 Sep 2026 00:00:08 +0000
Files and hashes:         1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: nr0fJkcrEmsExzsWbwQunk+xEHT/rE1CG6ZneBHNrX4=)
                          2: pNlley5H_9TvcEcVei0jRvY3Yrg.roa (hash: QEIb7mVWibyhq5IzgmoR4hHBvXp2za6yX/i3UZRSIgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:90:07:79:6a:66:d0:39:80:fc:9d:ec:c8:95:f7:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
        Validity
            Not Before: Sep 23 00:00:08 2026 GMT
            Not After : Sep 24 00:00:08 2026 GMT
        Subject: CN=90b04073c4cd10c4ae78d44bf95ddfffc570f469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:69:a9:bd:51:e6:a8:49:50:78:07:55:18:
                    cd:87:e8:b4:3e:09:e0:61:eb:c4:d5:a1:c6:28:70:
                    31:ca:b9:9e:2d:d7:1b:4d:d8:c9:b2:fa:d4:b7:67:
                    b6:a3:d0:3c:85:df:43:d8:65:ca:ac:1f:ce:38:e0:
                    90:60:10:4f:ee:46:32:77:03:15:5a:79:9f:b6:75:
                    be:aa:ac:62:9e:9b:5d:76:ad:46:31:c6:32:41:d8:
                    ac:82:68:10:3c:2f:59:08:ae:de:57:1c:98:af:a2:
                    96:b8:a6:9e:7d:f6:16:a5:38:59:aa:ba:72:cf:6d:
                    2d:8c:a3:bb:9b:fb:4e:f2:6c:1b:70:ba:e4:34:5e:
                    99:c1:e2:4f:3d:ce:d2:d3:d7:3c:cc:1c:43:db:15:
                    5c:5a:2c:8b:30:25:62:cb:8c:83:47:de:75:1c:ee:
                    c4:cd:46:8a:8f:19:dc:7a:c3:a3:f8:62:16:e0:3e:
                    05:d2:e8:cb:3a:b6:85:0a:a7:1b:56:15:77:07:ed:
                    b9:e1:32:d9:4a:3a:b0:7d:5e:c9:08:2e:d9:45:72:
                    b3:d8:ab:da:d7:a0:5e:63:a5:a7:20:54:7a:0e:f9:
                    a4:7f:c6:cf:37:f2:e7:53:8b:2d:64:4d:09:c7:8c:
                    fa:7f:15:ef:43:4c:db:c0:d2:73:38:df:c6:6e:d1:
                    50:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B0:40:73:C4:CD:10:C4:AE:78:D4:4B:F9:5D:DF:FF:C5:70:F4:69
            X509v3 Authority Key Identifier:
                keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:fc:6e:64:5a:e7:79:85:ff:7b:ee:5d:a7:07:a7:77:fb:4b:
         9e:4b:80:ab:d5:be:ad:c8:89:27:4e:32:58:44:e8:dc:1b:c4:
         7f:d0:82:2d:24:89:06:48:66:c4:d6:58:45:9e:0c:db:70:13:
         ae:e7:a1:af:aa:a7:e9:53:1c:78:3c:33:b1:1a:8a:cf:09:b7:
         69:11:5e:1d:5a:8c:87:80:52:30:5f:2e:28:eb:d1:a8:fa:6e:
         cd:f0:f3:74:0d:37:e2:d1:e9:a7:dd:b6:1a:d4:14:71:de:a1:
         9f:a1:50:76:a8:50:cd:7a:ac:02:6e:18:f3:f9:4c:69:6e:bd:
         d6:a0:01:d3:ac:04:50:72:8f:86:20:e7:65:f8:85:fa:61:82:
         07:77:8b:19:d6:98:2b:82:20:e5:d8:a5:1d:e9:87:1f:18:60:
         2d:94:ea:3b:30:3a:d2:87:05:e5:ea:3d:f6:b0:28:d1:08:46:
         46:f0:73:5a:25:dc:f9:59:ec:55:28:d2:7c:95:4e:ce:78:e6:
         55:51:4c:5c:f3:d9:ef:8f:eb:5e:bb:64:2b:01:ba:2e:07:6f:
         c8:df:78:54:82:b6:c5:4e:8e:0f:96:d7:b2:69:48:f0:79:7d:
         10:b9:41:a9:d1:73:01:80:3d:81:06:fd:83:ed:2a:5c:03:25:
         41:06:a7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:18:44 2026 by rpki-client