Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File:                     1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier:          Je9bNSBqQ+lLDV7BwzdoqYudN+E392XUchXzr6hcNDg=
Subject key identifier:   F1:BF:B8:B5:DB:81:9C:A3:07:B2:B3:83:77:E9:B7:D5:3C:5B:50:FC
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer:       /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial:       01A13E26DBAC69DABD7541B3675F73D82124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number:          1189
Signing time:             Thu 15 Oct 2026 06:01:36 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:36 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:36 +0000
Files and hashes:         1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: r0+f9b+xkO4NtQemWnIP3/+5AI3Y4eKapT7Qz3xMpaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:db:ac:69:da:bd:75:41:b3:67:5f:73:d8:21:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
        Validity
            Not Before: Oct 15 06:01:36 2026 GMT
            Not After : Oct 16 06:01:36 2026 GMT
        Subject: CN=f1bfb8b5db819ca307b2b38377e9b7d53c5b50fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3a:58:5f:e4:e6:d4:d8:e8:72:21:63:c3:7e:
                    65:93:b9:26:be:b1:4d:41:05:c7:ad:c3:e3:46:f1:
                    50:17:9a:1f:a7:0f:b8:fd:12:ea:09:c2:00:51:b5:
                    72:5d:3a:12:51:19:cc:92:97:59:b6:0e:93:13:c3:
                    50:a4:e8:f4:e5:3d:08:4a:17:7a:50:4f:7d:23:99:
                    c3:c2:8d:25:d8:bc:35:a1:0b:4d:05:98:0b:e4:49:
                    92:a6:04:a2:40:8b:a6:48:80:4f:b5:e3:f5:af:c8:
                    62:de:17:ae:ba:76:16:06:b1:95:27:6e:d9:36:4a:
                    f3:62:b7:1d:e6:76:80:16:99:42:71:0d:00:7b:30:
                    da:15:66:b6:9c:ba:56:6d:01:37:a1:d4:bb:a9:24:
                    a9:6a:70:e6:56:37:2c:8f:fc:5e:7f:92:43:8b:c8:
                    92:11:4b:0c:84:a9:69:22:07:44:b9:c2:94:24:12:
                    c9:1c:b3:17:b5:cc:63:67:de:1e:41:e4:bb:56:84:
                    b8:bd:6c:6d:5f:6c:4b:f4:f4:c0:18:f5:17:74:fa:
                    8b:bc:77:29:62:af:47:95:06:3a:2e:72:fc:94:a9:
                    5f:17:e7:db:a4:90:70:94:a8:7d:cf:38:70:f4:2b:
                    23:3b:64:f6:aa:82:24:cf:ea:60:1a:b9:15:d3:86:
                    1b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BF:B8:B5:DB:81:9C:A3:07:B2:B3:83:77:E9:B7:D5:3C:5B:50:FC
            X509v3 Authority Key Identifier:
                keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:66:d5:96:3d:60:79:d2:e9:79:70:13:a5:e3:80:fb:05:dc:
         2d:d7:58:1e:2d:09:61:47:f8:99:6d:d0:05:38:a3:28:bd:51:
         92:e5:25:b8:74:8d:59:ad:c3:f2:47:ba:97:20:f9:4f:db:31:
         ea:c4:6c:c6:86:c0:fe:58:cd:7b:7a:ac:9a:7a:e4:be:74:d6:
         57:b2:a9:a7:0a:60:a4:53:74:e3:ed:e2:71:91:c9:cc:b3:23:
         40:2f:5c:49:7e:2f:4b:7e:4b:b2:0b:a6:0f:5b:69:9b:3c:57:
         38:b6:5b:2a:f0:22:dc:93:a9:01:23:b6:f7:b8:78:1e:85:aa:
         ff:f2:3c:57:53:10:d1:d2:e9:d8:93:4d:b6:d3:ea:28:e7:e7:
         ac:de:36:44:06:57:92:f7:2e:9d:46:f7:63:0f:30:59:7e:ce:
         a5:f2:54:b2:fa:ad:4c:8d:91:c9:17:f8:6b:19:70:56:0e:6c:
         cb:86:df:8a:4d:8f:18:fd:14:c3:b4:27:9c:b3:95:93:3e:21:
         07:f8:ad:91:12:5d:db:50:1d:67:ff:9f:9e:b8:97:e1:1f:8b:
         3a:f9:87:48:d7:e4:2d:6b:7e:3e:dd:74:42:f0:12:6c:3e:7e:
         f7:d5:2d:12:28:27:37:d3:6e:84:c8:19:ad:a2:46:6d:23:ba:
         06:67:56:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:45 2026 by rpki-client