Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
File:                     1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json)
Hash identifier:          A7u1JWpJkhgMQuJ5cxNlFr27oxRX+v3aq4FwTwBoVmY=
Subject key identifier:   51:E8:F3:5F:59:5F:56:8C:2C:A0:51:C1:ED:82:7E:AB:D5:F7:3A:A5
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Certificate issuer:       /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial:       01A0D8728CB66E546C01E547D985440A7BB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
Manifest number:          066A
Signing time:             Fri 25 Sep 2026 12:03:00 +0000
Manifest this update:     Fri 25 Sep 2026 12:03:00 +0000
Manifest next update:     Sat 26 Sep 2026 12:03:00 +0000
Files and hashes:         1: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: cltCxVjWDT63kOvpW5soeP1wlfs68k82w8zrVv+wYU0=)
                          2: 3tqIIgWkHb-czJrWJ45mBIkK_cQ.roa (hash: XvC13IkxH0azxvzs9FuTSJdwmaTsmRlyyRpZAdkI6ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:8c:b6:6e:54:6c:01:e5:47:d9:85:44:0a:7b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
        Validity
            Not Before: Sep 25 12:03:00 2026 GMT
            Not After : Sep 26 12:03:00 2026 GMT
        Subject: CN=51e8f35f595f568c2ca051c1ed827eabd5f73aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:14:a5:a9:30:df:29:52:b4:74:12:25:67:64:
                    b0:d4:e8:c9:eb:79:97:c7:57:c8:92:e6:51:d9:d1:
                    f6:22:0b:95:83:27:36:be:74:30:30:e8:20:44:29:
                    ae:54:36:74:57:b0:0f:dd:9f:9a:ac:5f:2a:0d:8f:
                    df:ae:9f:72:c3:57:24:2b:10:f2:c7:37:62:f5:1c:
                    eb:50:40:c7:ad:73:a4:fe:88:5f:6b:53:67:21:e6:
                    84:14:50:31:ea:6f:9b:3e:02:57:e4:9c:83:b1:a1:
                    0f:9d:65:eb:fe:d8:32:1d:dc:2f:37:47:d1:da:2a:
                    95:3e:aa:e1:09:f9:b9:dc:0c:27:4d:5c:7c:9e:b1:
                    c0:07:eb:d9:48:bc:29:13:3b:53:ae:ab:14:5b:45:
                    9c:ba:86:82:5b:61:d1:c9:8b:a8:25:02:7a:54:fa:
                    eb:77:27:0d:36:6a:a4:66:7d:a4:0e:49:fd:54:80:
                    f6:fa:a3:ec:ff:48:3b:b2:bb:bb:38:d8:79:ea:b4:
                    34:d7:02:b8:91:b7:94:28:14:ad:da:ca:d6:b8:ba:
                    bd:3e:3e:d9:d2:f2:95:7b:74:c9:50:38:a0:9c:5b:
                    be:72:dd:95:4c:5b:79:ac:9b:35:54:12:15:c5:e4:
                    40:c7:75:dc:6c:9a:5d:65:e9:ac:95:67:82:71:26:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E8:F3:5F:59:5F:56:8C:2C:A0:51:C1:ED:82:7E:AB:D5:F7:3A:A5
            X509v3 Authority Key Identifier:
                keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e1:be:7f:5a:ec:c9:06:8b:2b:91:ec:1c:15:93:1f:45:17:
         7c:7a:af:3a:3f:6b:e0:b3:5b:d8:e2:66:95:6a:95:6d:61:ae:
         b2:8f:6d:66:09:c2:09:b0:2d:a0:0d:ed:8e:95:7e:23:95:87:
         f8:a2:2a:cb:97:a5:d7:25:c1:e8:7c:5c:ce:1e:cb:d6:86:ba:
         69:c4:52:55:97:16:30:fe:9c:8f:cc:8b:88:30:7c:4a:42:4c:
         60:a8:86:16:ad:b9:3e:5e:5f:6c:ae:97:89:9f:82:9e:6f:05:
         a6:f2:1b:32:eb:0a:ca:29:ee:64:c5:58:d7:c9:66:58:96:c6:
         bb:7d:c5:37:3f:4b:36:33:73:3b:1f:36:1f:64:da:d2:c1:e2:
         7d:2f:85:2d:5a:79:3e:bc:56:2c:33:d0:c5:87:8a:72:3c:79:
         ba:c8:e4:a7:55:b2:48:05:9c:ba:48:fe:99:1f:76:13:15:40:
         ea:24:d9:cf:81:49:17:2b:aa:96:14:d3:db:45:d1:b3:26:28:
         29:64:26:d4:6d:21:58:00:5c:cd:f4:48:04:05:60:ee:8a:24:
         87:04:93:82:57:18:8d:b6:f1:e0:12:16:aa:2f:82:e3:8f:59:
         3c:8a:b3:56:7b:b6:0c:14:87:2c:24:18:c6:d5:af:bd:1b:30:
         c7:2f:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:48:53 2026 by rpki-client