Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
File:                     1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json)
Hash identifier:          0T0bRk0LpsQ404m/h1agIAacbKLx8GufvavgXLRDYWE=
Subject key identifier:   34:A0:2D:CD:39:3F:E2:54:6A:46:96:EF:C7:33:DB:83:9C:66:C4:96
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Certificate issuer:       /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial:       01A11598CD4ED516DE1D105AB34A83463A1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
Manifest number:          0C44
Signing time:             Wed 07 Oct 2026 09:01:37 +0000
Manifest this update:     Wed 07 Oct 2026 09:01:37 +0000
Manifest next update:     Thu 08 Oct 2026 09:01:37 +0000
Files and hashes:         1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: ePDcXXgTmrwKpQjSAEXnSUWuoPTxhCNlJi8NKefWsF4=)
                          2: QjGOkpGhnIHTjcyUOw5HqV889uo.roa (hash: 3L8C74glFccswyHlfz0jSKhqaPXmi+TBnYkBkUnonkw=)
                          3: rsroaei2TqcIFnLEgGYzqyrWcFk.roa (hash: 5AMA9aMta9Csy7KyS+5XAc3h7QHkQnnyf2Wg73Az1uw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:15:98:cd:4e:d5:16:de:1d:10:5a:b3:4a:83:46:3a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
        Validity
            Not Before: Oct  7 09:01:37 2026 GMT
            Not After : Oct  8 09:01:37 2026 GMT
        Subject: CN=34a02dcd393fe2546a4696efc733db839c66c496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:50:51:f7:31:fc:19:0d:a0:8f:41:bf:e6:
                    b5:41:9e:56:90:43:7a:cc:0d:f0:08:dc:c5:82:22:
                    cb:27:aa:11:43:a7:97:8a:a1:b1:f0:7d:8b:66:4a:
                    db:cb:27:e0:af:d8:8e:95:ac:c8:f8:ab:31:77:01:
                    ef:85:fd:d4:63:5a:c2:ab:08:ae:f1:56:b7:cc:83:
                    29:48:50:b9:14:dd:83:3d:11:34:c5:f6:fc:d0:42:
                    77:4e:c1:2f:2b:a3:9b:25:c0:ef:ae:96:bc:70:cd:
                    25:db:13:13:b8:22:48:e3:82:b4:96:52:9f:ee:14:
                    0a:0f:b7:86:aa:37:13:1a:43:b1:84:9c:33:de:49:
                    b7:7e:b8:90:5e:84:1a:a8:67:e5:c0:8b:84:b3:ec:
                    31:68:31:f0:19:ca:24:24:73:5b:92:15:af:13:55:
                    5c:17:64:71:55:2c:1c:63:7a:90:60:35:a8:e1:e6:
                    f9:5c:76:90:86:58:69:c3:52:1a:d5:7f:d4:9c:06:
                    02:4b:66:a4:c8:09:00:a4:6f:6b:d2:28:03:0f:77:
                    95:47:87:2d:8f:7b:78:ac:c7:d2:24:31:ad:bc:2b:
                    08:59:b2:6c:fc:76:a6:75:45:2b:25:f1:e8:53:80:
                    c7:37:f9:55:77:41:32:61:ee:71:92:a8:09:11:3c:
                    cc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A0:2D:CD:39:3F:E2:54:6A:46:96:EF:C7:33:DB:83:9C:66:C4:96
            X509v3 Authority Key Identifier:
                keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a5:e3:d9:04:c5:25:aa:af:10:85:5e:95:2b:91:33:6c:ed:
         fc:25:60:bc:4a:2e:e8:dc:c3:40:18:87:99:a5:dc:f2:e1:50:
         33:df:f4:e2:c6:60:78:bf:a3:04:df:07:c7:23:44:81:03:3a:
         99:f9:24:37:c0:51:01:02:b3:3f:0d:34:2e:48:aa:81:c1:4f:
         de:46:5e:25:a9:d3:ab:84:5d:a6:0b:45:cd:90:ac:1f:79:67:
         65:56:b7:84:bf:c1:99:0f:95:54:3f:5f:7c:e9:5a:f1:24:2a:
         79:a2:b7:d3:70:37:3e:5b:63:9c:c3:8d:98:40:73:d4:08:62:
         a7:eb:c1:1f:62:20:09:05:05:d8:a5:5b:f2:ba:16:df:79:85:
         9f:f5:50:68:39:30:50:44:79:a4:bb:e3:c2:ae:1f:8c:ae:dd:
         0e:6e:03:b0:1d:d3:e3:1a:38:a5:41:26:6f:b5:17:5d:10:7d:
         49:b1:c5:46:d5:08:a7:d6:a1:c6:eb:3d:6e:a6:b3:25:9e:ec:
         03:9e:ed:63:1b:bb:07:4a:4b:21:21:ab:f7:28:ed:e5:17:9c:
         06:25:f2:9b:2b:d2:b4:a6:8e:57:9c:ef:3c:55:4a:cc:96:17:
         40:98:6c:8e:fb:2c:a8:b3:63:8e:93:68:d4:e3:69:e1:57:20:
         c3:5e:d6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:26:54 2026 by rpki-client