Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
File:                     1-uFrST0qEol8r0dXuxigLuws3hc.mft (raw, json)
Hash identifier:          CZ3aN4sTzkJEMU8HgHMrgfLYdA03IcSlcf3dgIP/QNo=
Subject key identifier:   DE:0F:32:74:69:5A:A2:E2:A1:69:25:22:1B:6A:E7:5D:E7:12:1B:B3
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Certificate issuer:       /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial:       01A0CE2450E53D9CC4B449D103F1A6908461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
Manifest number:          1A75
Signing time:             Wed 23 Sep 2026 12:01:21 +0000
Manifest this update:     Wed 23 Sep 2026 12:01:21 +0000
Manifest next update:     Thu 24 Sep 2026 12:01:21 +0000
Files and hashes:         1: 1-uFrST0qEol8r0dXuxigLuws3hc.crl (hash: oIc28CBpwJzQ3o2cLESD2elUyKv+n3sYbe340ykdkKU=)
                          2: 5K9Oh9VZsr3HOBptEMVsjoP_e_Q.roa (hash: YLy3at+4CK7XbYpoK63TH6Fci1Db7Ppm/QM9MlBVSzc=)
                          3: 7IcPHrXROTuNTf_SahmIzDpYk_c.roa (hash: L5UDzTnOOmL94lsJB5GitXxrT2tqiHBlNusXsGvxUwU=)
                          4: 8MABlsDBV8LP0o72Ps6uS8md-EE.roa (hash: fXmqgSgl411LYZCpGZdGkCF4TgXdZdFuZkTr9EWcmVw=)
                          5: fgjW20ZQ04xgq_qRpAWkrcJGzFo.roa (hash: pmOI3CWB5wHFkABDYT1l6+9Xm8dMktyYSLlosvObWto=)
                          6: kvYtIdmIQzWeY2WuPqJRuov5ET8.roa (hash: zx3Gr9VP3ErTlMy9nzS4kzrfscRLipsAviORigX1SFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:24:50:e5:3d:9c:c4:b4:49:d1:03:f1:a6:90:84:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
        Validity
            Not Before: Sep 23 12:01:21 2026 GMT
            Not After : Sep 24 12:01:21 2026 GMT
        Subject: CN=de0f3274695aa2e2a16925221b6ae75de7121bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2b:0f:fb:ea:56:73:49:82:e3:a9:14:72:cc:
                    8c:9a:ea:8c:a7:0e:7c:54:d9:0c:6b:7b:34:ba:0c:
                    fe:a3:9e:ca:0a:f3:ad:d2:1f:5d:18:9e:14:e4:92:
                    74:27:63:9d:da:31:08:af:9c:4b:c5:d3:05:aa:03:
                    ac:75:af:1a:58:76:ec:74:6b:3b:97:c1:75:e6:c0:
                    47:44:92:d1:15:f5:99:b6:1b:5f:1b:c8:b0:ac:09:
                    88:45:1e:85:7e:3e:5a:72:fc:ea:04:4d:e4:02:1d:
                    67:76:c6:29:48:69:db:41:d4:f8:21:94:69:84:ba:
                    01:c4:41:08:de:cd:d9:08:a7:21:cf:89:51:e3:bc:
                    30:8a:8d:c5:58:88:a2:c3:1b:20:c3:42:d0:72:98:
                    88:b0:91:4c:09:dd:3c:59:1d:e2:6a:92:ec:cd:9a:
                    9d:0f:d2:45:c5:6f:f6:5a:d5:b0:a3:f8:84:a3:16:
                    fd:61:57:f0:ca:8a:c9:4f:eb:1d:98:41:42:55:f7:
                    8f:f7:81:14:ac:ce:08:29:a7:99:f2:a0:f1:95:ee:
                    85:a3:a0:1c:4a:13:5c:6e:87:f7:a7:ac:45:18:94:
                    b7:ab:75:d3:15:55:2e:70:02:5a:14:cb:95:9f:4b:
                    b5:0e:fe:57:f0:1d:d6:b1:85:5b:f4:11:b7:47:cb:
                    8f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0F:32:74:69:5A:A2:E2:A1:69:25:22:1B:6A:E7:5D:E7:12:1B:B3
            X509v3 Authority Key Identifier:
                keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:75:fd:7a:bb:cb:51:74:7a:07:21:94:11:af:19:f6:90:af:
         49:dd:e8:a6:d1:c6:8d:24:e9:4b:1e:a5:be:2c:b4:41:c5:3c:
         99:62:88:dd:10:d9:27:f5:fd:7e:69:96:58:f2:9c:0a:e8:49:
         2a:42:f6:fd:9c:8b:ed:14:08:4b:e9:2c:77:82:1b:9c:7c:4a:
         95:78:4e:d1:ca:05:1a:b0:ca:26:70:83:22:e4:96:b7:a4:51:
         23:d7:32:55:16:36:9b:8a:12:48:64:6b:66:b1:2c:3b:da:83:
         cb:ab:d7:68:a1:a1:c1:5c:5a:f6:6d:cd:51:c6:b8:d5:7e:13:
         56:df:50:fa:9d:fd:e2:f3:c8:67:37:e5:48:cb:74:2b:0c:83:
         5d:61:37:bb:28:e2:3d:61:cd:a1:24:7c:b6:1a:04:5d:de:50:
         a3:fa:89:92:48:63:0b:74:1b:c5:8a:ed:53:aa:4c:37:e4:c5:
         1f:24:56:61:fc:55:b6:f0:32:28:b1:2a:1c:1e:a8:ff:46:3e:
         3b:ea:13:eb:22:58:52:de:d2:04:47:58:c1:f5:92:70:6f:ad:
         71:e2:ed:da:08:68:c6:7e:fc:59:48:49:df:18:a4:ab:91:76:
         05:ab:ce:2b:1e:36:95:e3:b1:32:cc:95:b3:c4:da:d8:f6:be:
         9f:5e:50:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:39:12 2026 by rpki-client