Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File:                     1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier:          pqpEKXcrD8KN+zGdOLWzxX3x2KBkMDLSAd9Nwxl1y7A=
Subject key identifier:   66:0C:60:E8:A1:80:AC:43:F7:35:54:C4:7C:09:D1:77:69:D0:A7:C6
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer:       /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial:       01A0D011DC4ADF9997761FED276F8522E80E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number:          1A6A
Signing time:             Wed 23 Sep 2026 21:00:26 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:26 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:26 +0000
Files and hashes:         1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: lx1loA3QSLZZMVCnVOQUuCqI/3+iiiCAzjzqkvRf38w=)
                          2: 3vC4pYqybSvnyiv9AWSFuid8GOw.roa (hash: v8QGywV5eLuGaT2Uqfo+veGfvP9FzA92hTs+zKxoZtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:11:dc:4a:df:99:97:76:1f:ed:27:6f:85:22:e8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
        Validity
            Not Before: Sep 23 21:00:26 2026 GMT
            Not After : Sep 24 21:00:26 2026 GMT
        Subject: CN=660c60e8a180ac43f73554c47c09d17769d0a7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a9:2b:88:80:ae:c0:15:0e:82:65:ba:26:dc:
                    a9:f6:89:bc:7f:8d:a2:1f:b7:90:50:e7:01:89:87:
                    ff:50:c8:1f:ee:07:6d:c3:79:9e:85:fb:4b:48:31:
                    5f:5a:1e:95:08:2a:38:42:80:2e:d5:39:61:15:b4:
                    0c:01:eb:f5:37:1d:e7:b0:a1:ab:d2:5d:f0:a8:73:
                    7d:f9:0f:99:d8:98:6e:83:27:ef:16:9d:8d:87:a9:
                    ed:eb:1b:89:c2:eb:aa:f7:9b:5b:58:94:ee:35:29:
                    9a:c3:f5:6f:83:26:1f:35:e9:ea:a0:97:d5:76:04:
                    f1:e6:c5:e0:dc:4a:98:65:56:40:fd:e8:18:cb:66:
                    98:15:eb:44:68:4f:c1:f8:d0:89:d9:2e:a9:42:b4:
                    b4:f6:58:e1:ac:01:25:15:b1:95:f3:40:48:7b:6c:
                    f2:9d:44:7f:14:99:de:0c:d5:5b:09:05:2a:1d:07:
                    10:ef:2f:8d:b8:61:66:02:7b:20:eb:2a:a4:89:2b:
                    3e:72:a3:20:15:6a:25:ad:d7:c3:4f:d6:1f:cf:0a:
                    88:b2:19:88:b2:2a:1f:8e:ce:87:b5:7b:35:4d:d5:
                    2e:aa:cc:8e:5a:0f:68:e3:76:7e:50:5b:55:ec:3b:
                    9c:dd:81:e2:21:84:64:d4:5a:f4:87:0d:d2:cd:03:
                    db:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0C:60:E8:A1:80:AC:43:F7:35:54:C4:7C:09:D1:77:69:D0:A7:C6
            X509v3 Authority Key Identifier:
                keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1f:48:df:3e:bc:c0:c4:6d:67:8f:51:46:f2:d1:99:cb:da:
         af:54:8a:2c:38:20:9b:dc:a3:64:99:cb:dd:fa:43:70:83:c5:
         3e:92:02:81:e7:50:4e:f1:30:0b:ae:f4:af:aa:39:73:b0:82:
         0b:00:a0:69:d4:8e:01:3e:f4:17:48:60:73:49:b1:17:ea:74:
         dc:5c:4a:97:14:a4:65:46:d8:0e:2a:ba:31:05:d1:e5:b9:d2:
         3b:7d:ed:c0:40:1d:eb:05:2c:6b:0e:01:54:c3:5e:c1:6e:d3:
         74:9e:fb:95:b8:33:61:9e:04:7c:cd:23:13:7e:7d:01:ea:eb:
         dc:11:d6:d5:2c:07:47:7f:fd:8d:70:9c:b6:0c:79:44:07:91:
         75:aa:1a:dc:0f:30:6d:74:da:09:28:2b:a9:f1:ef:bf:e7:a7:
         ac:6b:9a:36:98:f0:ef:9f:da:6b:bb:2f:d1:e1:d4:a1:5d:a4:
         01:bb:95:29:66:9d:cf:4a:96:5c:1c:0f:76:be:19:bd:77:da:
         98:42:69:ed:a0:ff:19:4a:97:dc:cf:f8:ed:c4:22:29:99:b2:
         b8:e8:81:fe:45:23:53:1e:f5:7f:f5:34:8f:cb:44:9d:cd:7f:
         b5:a1:7d:b5:92:a9:fa:a4:b7:47:15:5c:74:f4:51:04:a1:1e:
         5f:13:4c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:51:42 2026 by rpki-client