Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File:                     1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier:          HWI3PVE87Jy2zwQW0Br0ookPSzmAMIdyxgNaZyxfSQU=
Subject key identifier:   8D:27:75:83:C6:83:A2:4A:A3:26:5D:62:80:AB:91:47:EB:0C:68:EE
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer:       /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial:       01A13DB81B09DCC11765C69305C85F052177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number:          1AA6
Signing time:             Thu 15 Oct 2026 04:00:38 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:38 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:38 +0000
Files and hashes:         1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: IopGgP+i/LJkPQKdSVt1rN4sUU1J59Z6PJVsjxYAn5k=)
                          2: _WoEsqjGda06FNvYzNcE2_IEZYM.roa (hash: goW3pvaXPQUMEleV0Ier3m35JeMofiuKmtRcD80IT5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:1b:09:dc:c1:17:65:c6:93:05:c8:5f:05:21:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
        Validity
            Not Before: Oct 15 04:00:38 2026 GMT
            Not After : Oct 16 04:00:38 2026 GMT
        Subject: CN=8d277583c683a24aa3265d6280ab9147eb0c68ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1d:53:66:42:43:ad:a5:a7:6a:e8:07:f0:c0:
                    e3:06:04:92:fb:fa:d3:d7:40:1c:d7:04:9f:d7:84:
                    a8:07:fe:07:94:35:5d:94:0d:52:21:94:95:2f:ce:
                    72:0c:dc:11:ec:6d:e8:4a:86:f1:83:af:cd:53:92:
                    fc:0e:07:9c:6d:1c:a4:f2:9b:59:7d:fa:c1:b9:e0:
                    db:3c:d6:34:e0:77:2a:91:de:cc:f9:3d:b8:69:77:
                    86:09:6b:6a:65:02:87:a2:1a:89:44:65:fd:7b:b1:
                    e4:0a:06:2a:ae:3b:92:3d:64:f1:4f:4b:05:bd:e0:
                    3b:b0:09:05:9d:88:45:b1:74:bf:dd:d8:06:0a:1c:
                    60:8e:c6:85:88:a0:28:39:e8:e8:0b:d9:13:40:da:
                    28:05:aa:62:e1:45:de:44:dd:03:ef:3c:2e:fd:fe:
                    a2:e0:25:ac:f7:93:a6:9e:4e:7e:e8:06:ff:39:d4:
                    dc:6f:c5:5b:e0:16:e8:e0:11:71:f5:a1:df:13:8a:
                    75:ca:09:75:19:12:bc:e4:b4:10:64:48:f7:45:6c:
                    c0:c2:f1:87:e4:d6:26:d5:62:1a:f4:c3:13:21:20:
                    07:85:78:2a:70:c0:35:7e:a4:1b:20:79:5b:4a:9d:
                    39:8e:52:3a:15:45:8f:91:c2:4e:9b:df:eb:64:c2:
                    22:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:27:75:83:C6:83:A2:4A:A3:26:5D:62:80:AB:91:47:EB:0C:68:EE
            X509v3 Authority Key Identifier:
                keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a0:33:48:c2:40:a7:d7:8e:1d:8f:fc:82:37:51:a7:ef:19:
         e4:37:a3:38:7b:d9:4b:0f:f7:1d:18:7c:2d:21:a5:e8:fa:ac:
         34:3b:17:f6:0c:b9:cf:4d:e3:61:5b:59:4e:a8:a9:a5:38:54:
         cb:5a:c2:df:b7:f5:24:45:a4:bc:50:f9:19:c8:e2:1f:7e:a6:
         d2:53:40:37:a1:02:91:23:78:6d:ee:ba:c8:cd:08:b1:e7:1d:
         cc:9b:93:2e:0b:36:41:3e:aa:66:8f:d1:cb:8d:a8:f3:0c:eb:
         89:ff:d0:bc:c4:b3:d4:9c:04:74:83:5b:2c:1f:9b:0c:01:5e:
         35:a5:0f:74:2e:66:b2:0e:ff:90:ff:09:20:bf:dc:c0:2c:54:
         fd:c1:15:57:8e:f9:c2:03:a5:ae:f2:9b:03:8b:3b:84:95:ec:
         03:16:09:f1:e6:c9:63:1e:fd:00:76:0a:d3:d3:8a:22:29:0a:
         e7:71:46:90:af:3f:19:13:ef:83:43:28:ab:f4:63:49:5d:f4:
         17:87:01:ca:f9:5d:33:e5:8a:1d:b2:52:9f:02:db:55:56:0d:
         07:42:09:85:66:b8:26:6a:ed:ac:8e:48:e5:5d:d6:d8:05:46:
         56:f7:21:ec:83:a6:c6:87:52:04:4e:68:9c:46:af:fe:ec:44:
         b3:7a:5b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:19:56 2026 by rpki-client