Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
File:                     cLqzJoCFMIofjVcIS52qHr-V4Nw.mft (raw, json)
Hash identifier:          7GwxJQCbvivfFxvEO0cV4k2RNietzKwayIUjFAz3API=
Subject key identifier:   91:5B:1B:67:1B:23:40:D7:99:1B:8B:57:36:D6:63:47:AF:A9:E5:89
Authority key identifier: 70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
Certificate issuer:       /CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Certificate serial:       01A0E69AA2EF17877B8A6C563D166CD6EFB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
Manifest number:          1A73
Signing time:             Mon 28 Sep 2026 06:01:28 +0000
Manifest this update:     Mon 28 Sep 2026 06:01:28 +0000
Manifest next update:     Tue 29 Sep 2026 06:01:28 +0000
Files and hashes:         1: cLqzJoCFMIofjVcIS52qHr-V4Nw.crl (hash: Hpf5Pj0UA5cyz7+o7Cm89zO3GIIvUwU+y0KVmPF6ONo=)
                          2: kU9GqHcXl45RgiPyUS3ISp5Cc_Y.asa (hash: ZmLbO9DmawxzpYBHp5/UPtX0wgTeNFkuZ4t4mqLYLd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 06:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e6:9a:a2:ef:17:87:7b:8a:6c:56:3d:16:6c:d6:ef:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
        Validity
            Not Before: Sep 28 06:01:28 2026 GMT
            Not After : Sep 29 06:01:28 2026 GMT
        Subject: CN=915b1b671b2340d7991b8b5736d66347afa9e589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:fd:cd:73:60:48:77:e2:e8:41:0c:8a:0e:
                    c4:d1:e1:c6:b9:49:36:2d:09:ce:69:73:d7:9f:19:
                    d8:28:05:d0:6d:53:15:3d:63:4f:86:18:02:9f:4a:
                    0b:33:2e:9e:00:60:73:b8:cc:79:47:3f:39:4e:5a:
                    63:fe:66:92:4d:b2:45:27:10:ca:c5:8f:dc:2e:49:
                    07:b4:4a:e8:70:b9:08:e9:d5:93:eb:5a:6c:39:c5:
                    cc:e0:30:84:87:0d:f8:30:8f:50:f1:e3:ec:5b:1a:
                    81:46:e7:7d:7e:06:76:17:e2:f7:6b:68:e7:cb:8c:
                    1f:9b:3c:66:e4:38:c9:e6:fd:45:b8:ab:97:b4:97:
                    bb:8e:36:01:d3:fc:10:f6:25:91:59:9f:e0:84:84:
                    c3:95:86:d9:3d:79:39:b3:d6:00:bd:f9:43:86:e5:
                    b6:ee:93:d0:76:fe:95:f7:e2:ef:7d:8f:fb:e5:f3:
                    12:3f:2e:d9:4a:9f:67:f3:77:e0:15:9e:c9:70:06:
                    b5:59:71:d6:c0:b2:3d:42:60:c7:ba:fe:49:bb:c0:
                    39:df:98:f1:d0:d0:76:c7:39:66:c1:cd:1a:03:90:
                    4f:2b:6b:06:c3:f8:3c:f2:e8:bc:eb:11:56:50:1f:
                    3c:65:3d:36:c6:64:d9:fd:3b:04:03:9e:01:f4:bc:
                    d3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5B:1B:67:1B:23:40:D7:99:1B:8B:57:36:D6:63:47:AF:A9:E5:89
            X509v3 Authority Key Identifier:
                keyid:70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ca:cf:29:21:ec:d5:23:88:38:35:4b:8b:71:8c:f1:bc:e3:
         36:45:c7:6d:24:2b:b6:64:de:a9:ba:3d:ff:66:90:06:29:b1:
         c5:3d:0d:a6:9b:30:e7:cd:35:dd:ae:26:57:00:36:93:4f:a8:
         8e:7f:8b:96:9d:b6:7e:c4:19:c0:3f:b6:7b:d8:c5:a4:77:36:
         20:36:53:3c:1a:4e:6a:8f:81:96:25:a5:df:88:14:58:53:e5:
         52:75:c5:89:de:ab:96:de:38:29:ef:83:a1:4b:05:4d:2a:8c:
         48:4f:cc:c7:5d:68:d2:b0:f6:63:de:1d:c4:fd:ba:40:2c:2d:
         85:fe:a9:4c:56:ba:be:12:db:b6:8c:73:99:4b:01:e3:1c:1b:
         24:e4:72:18:7b:55:49:ca:91:2b:7d:5b:08:f7:12:85:81:ba:
         ce:e8:4f:d3:14:14:75:db:4b:13:6c:8b:0c:c4:8a:de:b3:bd:
         dc:4d:aa:3d:e4:3e:14:a6:93:33:8a:81:c9:e7:21:ae:d9:a7:
         ed:38:ce:8c:15:56:dd:41:f7:00:80:a2:e8:31:e1:9d:e0:30:
         87:7f:ba:81:92:51:76:da:bf:4c:8a:d4:0a:c2:4e:35:ef:a3:
         8d:21:98:42:bb:08:c6:cc:0a:85:35:27:f2:99:1d:0c:80:e4:
         43:b6:02:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:13:47 2026 by rpki-client