Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File:                     FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier:          8rMJfcg4t/QRIVIxQj/boIArFDyKrop+UWKZZL56d1c=
Subject key identifier:   F9:88:C4:62:24:83:1D:E3:D9:16:DF:0F:E7:11:AB:F3:3C:E4:2F:75
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer:       /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial:       01A11A50B2E495174134A84ADE443BA22FB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number:          1836
Signing time:             Thu 08 Oct 2026 07:00:58 +0000
Manifest this update:     Thu 08 Oct 2026 07:00:58 +0000
Manifest next update:     Fri 09 Oct 2026 07:00:58 +0000
Files and hashes:         1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: 2QR7tZ6IGRLSWRgPB9J4sb215ZRN9bYpD4QSxu0Gipg=)
                          2: PAWQJ--pyQDWqisMk27pgjU-VTo.roa (hash: LFkt5XtALwLDqGdtvqPz4gaQ669NVQcvwDZAzQf4rZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:50:b2:e4:95:17:41:34:a8:4a:de:44:3b:a2:2f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
        Validity
            Not Before: Oct  8 07:00:58 2026 GMT
            Not After : Oct  9 07:00:58 2026 GMT
        Subject: CN=f988c46224831de3d916df0fe711abf33ce42f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:c5:ad:b2:72:d3:89:8c:76:45:2c:df:e0:
                    18:8a:17:87:13:c9:a0:d6:58:a4:7a:dd:11:0a:e4:
                    a2:79:b4:85:74:c0:ba:9d:66:c0:3c:39:43:37:bb:
                    06:ee:82:c0:27:1c:33:3c:c2:8a:97:00:93:de:94:
                    9f:a6:14:54:4c:54:fd:a8:b7:6e:6b:72:07:10:9e:
                    c3:27:8d:fe:28:5f:ea:9e:01:41:e9:76:5f:f8:fd:
                    85:52:58:72:98:ae:ba:ea:f7:d3:ed:06:c5:be:8d:
                    dd:b0:08:6a:3a:75:39:93:56:1e:b9:f6:98:a0:94:
                    b0:ce:0f:c2:af:5b:8f:52:93:ab:74:1f:7d:42:17:
                    3e:b9:25:7d:38:59:26:de:1f:ab:14:bc:98:e0:69:
                    f3:c4:a2:ba:0f:5a:bc:fc:31:4d:86:f1:c1:b4:8c:
                    28:f0:ce:14:10:3a:de:f2:00:9c:99:f2:a0:49:45:
                    93:6c:25:6b:d0:4f:b2:0f:04:a6:f4:c4:78:eb:02:
                    8f:de:1b:bc:6d:cb:9d:fd:5c:0c:7d:b9:fa:88:fd:
                    5b:d9:f8:95:d0:ad:20:7f:52:43:85:97:12:d9:34:
                    9a:57:82:96:c2:80:69:40:f7:d6:d5:7d:e7:e4:4a:
                    2c:11:70:65:3a:49:96:5f:3e:bc:3f:d5:36:3e:1e:
                    49:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:88:C4:62:24:83:1D:E3:D9:16:DF:0F:E7:11:AB:F3:3C:E4:2F:75
            X509v3 Authority Key Identifier:
                keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:18:53:5a:ae:09:f8:e3:91:20:bd:ca:d3:e4:a6:1c:58:99:
         e9:54:5b:bd:65:7e:35:ab:10:d3:60:f7:e8:2c:9a:62:7a:57:
         14:c1:84:ed:52:2a:fd:60:95:49:f3:d1:e6:f2:60:9f:c0:ff:
         0a:1d:4e:e7:ed:ab:ac:23:6e:a8:44:99:2c:eb:43:52:16:c4:
         19:bc:30:b8:36:31:90:ae:ce:0f:46:10:a2:39:c4:d5:57:07:
         27:5d:5c:16:ce:72:74:e9:e6:9e:ec:5c:f8:48:3d:3c:fa:6c:
         27:e2:c9:6a:16:d3:51:1c:2e:a8:bb:6d:28:98:7c:1f:cb:f5:
         7e:ca:a5:b3:08:ba:ef:49:51:95:9a:f3:09:a5:33:33:f2:58:
         2a:ce:9f:c8:4f:8c:e8:22:4f:65:f9:a0:2e:bd:14:b1:9a:bf:
         73:03:fc:d7:a7:9b:7f:e0:53:51:59:1d:7e:f7:50:66:81:0c:
         5b:68:5c:28:f7:0c:22:1b:14:77:80:da:24:2e:1b:15:41:aa:
         8c:96:2e:30:76:ce:00:c0:09:9a:1f:db:44:c7:78:08:c4:e3:
         86:b8:ac:8e:f8:6d:bd:d0:b6:56:af:bd:2f:67:8e:20:50:ae:
         2e:56:6d:45:ab:a2:81:81:77:cf:78:be:fc:26:8c:f4:da:bd:
         44:29:54:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:06:45 2026 by rpki-client