Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
File:                     _Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft (raw, json)
Hash identifier:          W/o0WB3ah93XPvSfFdqhyLhDoT6AfudWBxjmz9JIPUM=
Subject key identifier:   C1:8A:57:0A:BD:65:EA:CC:24:D0:15:00:62:58:AD:B9:AA:DF:E2:BC
Authority key identifier: FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
Certificate issuer:       /CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Certificate serial:       01A0DF862B4E23CEEF8DBBD550D6D8AB6C26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
Manifest number:          1A07
Signing time:             Sat 26 Sep 2026 21:01:47 +0000
Manifest this update:     Sat 26 Sep 2026 21:01:47 +0000
Manifest next update:     Sun 27 Sep 2026 21:01:47 +0000
Files and hashes:         1: 9h49lJWwF1PdYlUFcV2QXMYgM9o.roa (hash: GCIawhjOg95GqWKJazHKfaZHhHNmcBK7aJ3Mw2UEcAc=)
                          2: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl (hash: OJjnyTkT8cAHuheh/u7cnPMJiovuV1SqKpKRSezKdlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:86:2b:4e:23:ce:ef:8d:bb:d5:50:d6:d8:ab:6c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
        Validity
            Not Before: Sep 26 21:01:47 2026 GMT
            Not After : Sep 27 21:01:47 2026 GMT
        Subject: CN=c18a570abd65eacc24d015006258adb9aadfe2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:81:55:5f:dd:d1:9f:74:22:72:16:da:0f:04:
                    8d:2e:c3:9e:cb:f9:61:c0:11:f6:df:d0:b1:6e:a4:
                    fd:62:d7:25:0e:99:fa:d8:88:7a:c7:00:85:44:ca:
                    b2:96:66:a0:84:80:7a:2f:44:60:2c:c0:5c:b8:dc:
                    0d:5d:1a:99:c3:ff:34:77:46:47:f7:1a:b2:96:f8:
                    51:93:12:94:05:52:1a:b5:ea:f5:81:d7:7f:eb:cf:
                    e3:65:58:45:78:f9:45:f4:ec:00:2a:4c:25:b9:dd:
                    d8:fb:2e:e1:bb:c1:f8:ff:7c:be:81:de:22:2c:de:
                    0f:14:e3:cb:1b:be:17:c3:38:0b:63:32:fc:f5:da:
                    34:4d:7a:8f:f7:7a:a3:3d:25:23:44:12:4f:76:41:
                    e3:99:f5:a6:cd:22:0e:28:f5:b7:28:75:a5:61:3a:
                    c9:14:a9:2a:c8:f9:fc:4d:87:d5:b3:be:64:78:34:
                    0c:42:ac:79:11:fb:fd:1e:ab:ad:d5:7e:aa:b7:95:
                    25:79:8b:a7:ac:60:64:77:e6:cb:86:5a:59:7b:8d:
                    d5:ff:a4:f7:c9:1b:64:c2:c3:9f:21:d4:b1:a4:b3:
                    f3:f9:ad:a0:2f:46:8a:29:82:03:f9:80:4b:eb:b9:
                    56:b2:f1:fd:a0:87:2f:b9:24:82:8b:e3:af:b2:7f:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8A:57:0A:BD:65:EA:CC:24:D0:15:00:62:58:AD:B9:AA:DF:E2:BC
            X509v3 Authority Key Identifier:
                keyid:FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:bc:7b:64:76:8b:09:23:ef:fa:11:77:55:96:55:74:24:19:
         87:e8:fb:f6:bc:56:ea:69:c6:ae:b9:b7:95:29:b3:4c:c3:20:
         2c:e9:c2:7a:ec:8b:53:26:17:0b:f3:4f:4a:96:7d:1c:7e:64:
         66:73:6f:31:6d:15:e4:c2:3e:db:56:d0:75:9d:b4:9d:65:2d:
         61:7f:9e:f3:24:44:c4:4d:b4:55:9b:7c:5a:1c:77:ba:bd:fb:
         41:23:3c:b7:0b:79:54:5b:6b:c1:16:ad:0e:3d:9c:28:75:a9:
         9e:5f:72:8f:13:e9:0e:55:25:32:9c:65:08:51:f4:d1:5b:04:
         eb:65:1b:4b:62:fa:1f:ee:31:09:d3:c8:7e:3f:f9:83:5e:7c:
         1f:db:1e:f9:7e:a7:a6:94:2f:16:22:9f:d4:27:a6:41:b9:6e:
         a6:ac:7a:4c:56:14:01:96:83:78:54:18:95:ba:04:5c:af:cb:
         2f:93:db:30:ec:f9:b0:3d:73:9a:ce:a1:3b:d0:0d:ad:87:0d:
         22:2b:60:26:a1:34:6d:e6:63:f3:f8:44:b1:33:f9:68:71:21:
         9f:80:89:ec:bd:9c:ad:59:2c:10:cc:3f:b8:a5:ca:00:a9:12:
         fc:14:f8:62:54:64:fe:e4:10:ba:92:eb:db:04:b2:16:54:9a:
         ea:b2:23:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:53:34 2026 by rpki-client