Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File:                     1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier:          z0utWXssr6dpXfY1uxxvsE/Qk0GiOxlEeQM2CUzFK7o=
Subject key identifier:   65:66:C0:19:D9:FC:C8:B0:A7:D8:3C:7B:BD:DE:04:36:56:7A:23:EB
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer:       /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial:       01A0D83C3ECF40DD34768946E5C1DC562760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number:          1A6C
Signing time:             Fri 25 Sep 2026 11:03:41 +0000
Manifest this update:     Fri 25 Sep 2026 11:03:41 +0000
Manifest next update:     Sat 26 Sep 2026 11:03:41 +0000
Files and hashes:         1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: irKn3r3j6l887Gp13BLvQFabr1+/jShSSDIEgJ1wBo8=)
                          2: x-xatRQzbMJq2QoB7VpakVl_dyQ.roa (hash: FUFQzFRUVGUSKSoKEZzjy+oCv2v1jEvkTjPlxRoTw4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:3c:3e:cf:40:dd:34:76:89:46:e5:c1:dc:56:27:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
        Validity
            Not Before: Sep 25 11:03:41 2026 GMT
            Not After : Sep 26 11:03:41 2026 GMT
        Subject: CN=6566c019d9fcc8b0a7d83c7bbdde0436567a23eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:1f:12:60:2e:b8:fe:a4:ad:df:d0:d7:5b:
                    ca:21:c6:42:f1:1e:b8:63:31:0b:5c:2f:5f:0c:72:
                    07:33:ec:af:92:c2:b2:71:c4:e8:1a:8c:54:1f:fd:
                    d4:2c:12:f7:6a:3c:ae:4c:be:fb:a1:43:27:88:36:
                    82:65:7a:da:03:9d:c1:1c:e7:dd:f3:d5:4a:05:63:
                    73:43:cc:c2:10:ee:ed:69:77:23:97:01:2b:e7:da:
                    d8:48:c4:dd:4d:f7:9f:1c:18:28:34:f4:e6:fe:be:
                    b4:77:7c:1a:d3:b9:bc:a2:b3:1c:c5:b2:d5:cd:02:
                    18:1d:ac:c9:91:3b:97:6c:ef:dc:5d:d4:65:ec:11:
                    3e:0e:14:d6:4e:1f:f5:8e:0a:1c:aa:74:2d:cf:7f:
                    5a:4c:42:a9:4d:05:95:35:87:24:cf:75:32:5c:93:
                    c0:1c:0b:91:de:0a:91:b9:8a:69:aa:86:be:6c:fe:
                    79:b3:9f:84:68:a6:b2:7c:51:76:05:38:44:c2:d8:
                    a3:86:fb:28:4a:88:d4:a6:69:72:38:30:ef:fc:d7:
                    e1:8f:86:f0:98:ea:93:75:57:2b:03:88:6b:42:61:
                    b9:d4:49:f6:17:a5:c7:0c:d4:06:71:73:98:82:dd:
                    a2:34:fe:58:ff:48:88:f0:e7:cc:45:2b:46:04:16:
                    48:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:66:C0:19:D9:FC:C8:B0:A7:D8:3C:7B:BD:DE:04:36:56:7A:23:EB
            X509v3 Authority Key Identifier:
                keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:0c:c8:3f:86:3d:d2:98:18:ea:a8:63:39:b6:98:1e:da:90:
         1e:f4:93:1d:3e:5f:b8:6c:da:26:44:c1:c6:f9:ef:25:94:ad:
         9f:30:03:7a:a4:3b:9e:7c:c0:22:6a:3a:7c:20:d6:22:65:a0:
         69:e7:e0:70:50:b9:cc:c9:bb:96:de:09:c9:ff:15:f8:60:c1:
         52:e2:6c:ac:7e:42:5c:82:59:d3:b3:63:ce:af:41:ed:fd:bd:
         cc:6e:5c:5e:ca:4b:34:01:5c:ff:81:50:9b:b1:73:f3:0a:d2:
         4b:b5:65:6a:7d:8a:8c:ad:39:de:2d:41:f8:64:75:20:e9:83:
         a7:70:fb:35:47:ff:54:c2:a0:a6:4a:1a:c7:b4:80:18:a2:65:
         7e:77:0b:d3:30:b3:a1:d0:2b:0d:57:7c:27:df:cf:bf:df:86:
         8d:e5:64:a2:4b:d5:61:de:86:5e:5c:ab:43:40:06:62:82:43:
         1c:31:2c:5e:75:86:1d:8c:b2:5d:79:10:d8:99:1a:00:8d:9e:
         ca:30:2a:14:fd:a0:22:25:9c:d9:82:83:d2:5f:49:d4:e7:14:
         66:6c:51:64:db:07:d9:54:cf:02:ae:1e:20:f1:f7:03:61:06:
         42:0e:b7:f2:b6:e7:c9:c7:b4:ec:9d:c5:54:5a:7f:56:92:4e:
         8c:81:6f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:30:14 2026 by rpki-client