Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
File:                     1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft (raw, json)
Hash identifier:          ZxA5VIExNSQ0hDP9ylD/8o4j1zxrUT9FM2sDEMZ54+Y=
Subject key identifier:   73:08:5D:4C:EA:A1:50:78:32:30:C3:95:E6:18:E7:1E:BD:28:94:43
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Certificate issuer:       /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial:       01A0B5089235B1300988422C3868C253864F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
Manifest number:          1687
Signing time:             Fri 18 Sep 2026 15:00:32 +0000
Manifest this update:     Fri 18 Sep 2026 15:00:32 +0000
Manifest next update:     Sat 19 Sep 2026 15:00:32 +0000
Files and hashes:         1: 0uyZF4hqCFblriuhdFvB97CSvjE.roa (hash: F5N4p/+NGVHw75uzEq/ujSUpO10EhoH/RBzsn4VqeFg=)
                          2: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl (hash: XOIIWAl4fpr2KCXPiwZQY5+l6RJRZyou1PsdZGs7rtE=)
                          3: HEYOxnvlLCOWsnSS_6it9qLhNIs.roa (hash: 6D1EaOUZTiXuJWqZZr2E8iZjtev1Lso+FFHwbrAgIes=)
                          4: OUe9Gs1ZfjOio8GPiClkO1rK7Co.roa (hash: 9zzu21yZwWAMdvzRS8JS72fLpBxbfgfEMRdYkP6CTaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 08:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:08:92:35:b1:30:09:88:42:2c:38:68:c2:53:86:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
        Validity
            Not Before: Sep 18 15:00:32 2026 GMT
            Not After : Sep 19 15:00:32 2026 GMT
        Subject: CN=73085d4ceaa150783230c395e618e71ebd289443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ca:c8:bb:dc:1e:85:0f:80:dd:24:57:e3:e6:
                    6c:94:34:84:31:a1:23:11:92:c7:6a:09:ec:ad:49:
                    91:84:e3:58:48:0d:ac:b7:e2:49:2e:ea:65:97:7f:
                    69:d7:95:c5:de:c0:0f:16:f4:0b:2b:24:85:3e:63:
                    73:fa:e5:c4:df:6d:aa:a8:4c:12:93:fb:74:63:b1:
                    c2:ab:2a:96:9e:89:b6:a7:a3:c3:e6:78:06:92:16:
                    cf:f3:f0:23:48:9a:ee:ed:55:95:5e:03:65:45:21:
                    81:06:cb:c5:f6:7a:8e:f1:9e:be:59:d4:93:6f:7e:
                    be:c0:8c:61:a4:b8:6a:57:3f:a6:8a:d9:c5:1d:82:
                    ab:b3:82:77:92:5a:0e:0d:19:ef:49:77:c7:76:67:
                    ba:a6:8c:c8:e1:37:72:1b:03:32:2e:b3:bd:a5:37:
                    c1:5c:4a:8a:1c:61:c8:02:72:db:1b:35:1b:65:cb:
                    47:58:1b:59:4f:a4:38:c2:87:01:a8:7a:24:e1:2a:
                    54:45:01:19:64:d7:f3:d0:25:04:a4:6f:f0:da:8f:
                    0c:3b:03:3b:31:fa:a0:92:e5:f5:78:8a:4b:cf:ed:
                    dc:f0:9a:d7:20:ca:57:3f:99:81:8f:98:5f:ec:6f:
                    9b:41:3e:3b:df:c4:cf:7a:77:b6:74:aa:69:dc:27:
                    80:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:08:5D:4C:EA:A1:50:78:32:30:C3:95:E6:18:E7:1E:BD:28:94:43
            X509v3 Authority Key Identifier:
                keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:2d:e7:6f:cd:ce:a2:88:2d:de:7e:36:af:e4:db:03:b6:ba:
         0d:4c:c5:c3:7f:ca:8a:a4:89:8d:08:75:bb:62:cb:4c:08:31:
         82:49:40:01:74:f3:8d:98:ce:ad:b7:0e:64:f9:af:ba:3e:81:
         db:60:de:7e:95:fe:71:d0:3e:e5:97:32:b5:4f:c2:05:28:64:
         fc:07:e4:42:12:c2:c0:6e:5c:9b:90:db:65:8d:b0:03:4b:6b:
         2f:a6:3b:63:24:45:7f:e7:21:37:fa:84:dd:01:a5:d1:30:0a:
         3a:56:1d:eb:1a:1a:65:b3:f7:f1:ab:7d:1b:65:b1:4e:86:7b:
         45:88:a3:63:ed:95:72:75:86:0d:2c:78:a8:85:1f:9e:37:1c:
         d7:b8:ab:35:2a:50:dc:83:93:da:a8:db:69:c6:41:cc:89:fd:
         02:2d:0c:2d:15:83:41:89:20:cc:2e:d6:6a:6b:27:3d:e8:13:
         e0:50:ee:b5:43:00:03:fd:8f:69:b4:e2:d4:33:f6:fb:4d:14:
         56:47:e1:d6:ee:1c:bc:39:db:16:8c:c2:5f:63:6f:4f:2a:56:
         fc:29:b5:5e:ac:bd:3f:5c:6f:98:ec:a1:a7:17:11:86:62:d5:
         55:65:b3:54:0b:9b:22:c3:3e:a7:c5:62:35:41:f8:1b:65:d0:
         0c:36:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 17:07:17 2026 by rpki-client