Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.mft
File:                     1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.mft (raw, json)
Hash identifier:          jOhoINwntXI6HETXxKPwYgLP9RYCsUpVmfpsBGOSjR0=
Subject key identifier:   6E:DE:26:24:8A:59:4E:C1:27:D4:98:8C:52:5E:18:1E:CA:07:52:10
Authority key identifier: D5:36:C5:6E:94:38:56:6A:67:A5:1A:55:A7:F6:4D:1E:C0:3E:18:8C
Certificate issuer:       /CN=d536c56e9438566a67a51a55a7f64d1ec03e188c
Certificate serial:       01A0D0B6E9C6E924D08EBB4AD40C63DB3F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.mft
Manifest number:          36
Signing time:             Thu 24 Sep 2026 00:00:43 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:43 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:43 +0000
Files and hashes:         1: 1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.crl (hash: hjvhjsXUR/zbDhj2UeqQq8Z/bf1DNGLEHk7H2oj34mY=)
                          2: zk7MjylnCvn-B1kvRqqmUutpFj4.roa (hash: T/X9zuBsRb/KQOzAd2jNr3MosQ+HVKXq0FztU7ekrQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b6:e9:c6:e9:24:d0:8e:bb:4a:d4:0c:63:db:3f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d536c56e9438566a67a51a55a7f64d1ec03e188c
        Validity
            Not Before: Sep 24 00:00:43 2026 GMT
            Not After : Sep 25 00:00:43 2026 GMT
        Subject: CN=6ede26248a594ec127d4988c525e181eca075210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:25:3f:00:b2:fc:27:d8:a7:96:ee:46:20:
                    89:73:63:11:cb:34:3d:d8:05:ba:08:fb:32:ad:6f:
                    ef:17:23:44:82:bc:f4:e0:b4:c4:0e:c4:9d:27:f0:
                    d3:87:fa:14:ea:01:04:48:d1:3e:49:07:44:9f:0a:
                    7b:58:c5:d3:42:a6:7a:80:6b:ad:fc:37:a9:81:bc:
                    40:d9:20:f6:f7:50:a9:35:72:89:5c:23:8a:fc:5f:
                    4a:01:3a:42:ba:5d:a4:6b:eb:7f:3c:a3:cf:d3:62:
                    c1:54:2a:1f:7e:27:4a:7d:de:29:48:bb:67:f6:65:
                    e0:db:89:36:92:a3:76:57:2e:17:75:e7:38:26:34:
                    3f:8c:05:d7:a5:cb:27:c5:62:a7:da:ff:d4:fa:c8:
                    c0:77:51:bc:32:45:fa:da:70:91:ed:b4:ae:fb:d9:
                    84:38:92:72:5e:c0:10:72:10:db:b7:56:6c:00:fc:
                    64:77:e0:1e:7f:6f:50:61:16:a0:46:20:1e:89:f8:
                    f3:5b:35:17:a6:0d:e0:5e:16:0c:81:1d:aa:17:7a:
                    e5:50:22:af:44:a3:ca:f3:02:6b:fa:61:65:1a:b9:
                    1b:5f:7a:f3:6b:99:f9:3b:47:d5:e8:6f:c4:3e:b3:
                    52:6f:2a:d5:49:21:df:78:36:49:a7:9c:58:01:3b:
                    5c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DE:26:24:8A:59:4E:C1:27:D4:98:8C:52:5E:18:1E:CA:07:52:10
            X509v3 Authority Key Identifier:
                keyid:D5:36:C5:6E:94:38:56:6A:67:A5:1A:55:A7:F6:4D:1E:C0:3E:18:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b1:5b:f0:78:eb:3b:4d:0e:e5:b8:77:d2:0f:51:6c:20:a9:
         4a:91:d3:3a:b3:0a:8f:a5:59:51:77:5f:de:f9:52:1e:d8:aa:
         5f:26:65:61:98:72:9c:e1:0e:b6:7d:e2:cb:be:73:37:fb:5a:
         80:c2:b3:ed:a3:2a:11:81:66:54:5d:6b:4e:04:12:a4:3a:ef:
         07:c1:43:9c:fd:74:45:37:fa:01:f5:56:5d:7c:2c:0d:b2:8b:
         65:c6:f1:1f:6e:d2:56:15:07:61:8f:9d:73:8a:63:7c:e7:53:
         07:67:23:6d:d7:90:d8:06:7c:a6:59:81:25:ee:61:b5:39:1d:
         7b:6e:43:f4:46:0a:37:29:c3:63:a2:28:8f:e3:04:bd:78:5f:
         59:85:17:46:b1:c4:e8:d1:94:e1:97:e7:49:91:37:bb:a1:95:
         f1:31:69:6c:55:db:1a:8d:ee:1d:06:c2:49:36:f8:b6:80:3f:
         e0:e8:cd:a7:91:d8:96:6f:b4:ce:07:14:3f:da:ee:83:02:5f:
         08:6e:69:bc:81:b9:43:64:d4:01:03:e0:35:15:de:fa:73:27:
         54:23:13:69:34:2c:d3:e1:7e:bd:b7:55:ef:de:81:d6:91:5c:
         85:04:5c:45:99:23:7b:bf:b4:be:b4:e4:13:95:f7:de:c2:44:
         c3:f3:5a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:23:27 2026 by rpki-client