Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
File:                     1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json)
Hash identifier:          GXbjvySk2V53SbabgoCvNPtxagjXF8wxd9JAUnLk2pI=
Subject key identifier:   76:B9:ED:38:15:0C:76:19:0D:29:81:B6:EE:FD:BC:ED:31:41:A5:C5
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Certificate issuer:       /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial:       01A116E1B17D8AA3019334BA84341CA978B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
Manifest number:          1AB2
Signing time:             Wed 07 Oct 2026 15:00:52 +0000
Manifest this update:     Wed 07 Oct 2026 15:00:52 +0000
Manifest next update:     Thu 08 Oct 2026 15:00:52 +0000
Files and hashes:         1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: 9/I1wz4XpWgNFXbXFLyZ+cCAUDRnWkgvmNrd6OdEqz0=)
                          2: sxqFF3SrvGoUsRQZD8fu4--ERqs.roa (hash: 1C32Y1sbpjWSQ+8VoxTVRdY7H3ef9AMyVxgJYOjwRdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 15:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:e1:b1:7d:8a:a3:01:93:34:ba:84:34:1c:a9:78:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
        Validity
            Not Before: Oct  7 15:00:52 2026 GMT
            Not After : Oct  8 15:00:52 2026 GMT
        Subject: CN=76b9ed38150c76190d2981b6eefdbced3141a5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:63:3b:d6:e5:f2:9b:0b:d1:8a:c6:91:fa:30:
                    74:2d:02:7e:d7:90:98:ff:bc:c6:3c:d6:85:94:cd:
                    62:f5:ef:15:94:04:d0:0b:4c:b4:17:1f:81:73:8f:
                    57:f6:8f:90:b8:c7:2b:35:5d:49:12:fa:5a:1c:a0:
                    cd:ca:85:6b:cc:57:f6:e7:25:2a:54:48:48:7a:43:
                    55:88:65:b1:69:f8:31:09:95:97:62:3f:44:b3:74:
                    27:17:d3:fd:41:92:e8:7b:a6:58:d0:5b:8d:9f:a6:
                    34:0b:da:7a:a4:2c:a1:49:f0:2d:0c:44:1d:81:63:
                    71:94:4c:f5:50:66:21:59:85:11:7d:cf:54:c4:b9:
                    84:49:f8:0a:a4:b1:e1:bb:c6:9f:76:6a:8c:2a:99:
                    3d:c8:0c:ba:72:2a:9b:63:24:bc:01:de:36:cd:47:
                    02:20:62:9c:0b:4f:7a:dc:e0:10:33:bf:0a:41:30:
                    c1:a4:bc:b9:38:ee:00:1a:c9:94:0c:47:0c:3b:3d:
                    f1:8a:2b:dc:85:42:68:3e:3d:f8:15:45:2b:b6:e3:
                    ac:3f:d7:1d:2d:e7:62:b8:09:91:42:54:f7:7d:eb:
                    2f:8c:bd:5f:2e:5c:14:1a:c3:3d:74:e9:88:f5:69:
                    a6:aa:3a:4a:f1:92:ae:35:de:72:3d:4d:7c:7c:9c:
                    99:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B9:ED:38:15:0C:76:19:0D:29:81:B6:EE:FD:BC:ED:31:41:A5:C5
            X509v3 Authority Key Identifier:
                keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:79:9d:33:5f:fe:86:bf:38:17:29:28:8f:f0:6c:29:a0:95:
         4a:06:5c:3c:18:c8:c5:4f:49:e1:9e:93:9f:b2:7a:d5:b6:73:
         8e:77:6e:3d:d5:0b:54:ed:ca:38:13:93:cf:08:43:73:45:98:
         52:73:59:13:be:0a:1f:4e:de:99:fc:c8:8a:bf:41:58:42:26:
         cc:fc:c9:4f:5e:8d:a0:e4:5c:51:21:36:9c:38:d7:ce:ba:d3:
         d5:0f:95:3d:52:9b:e8:1d:54:43:56:00:67:44:6f:5b:06:68:
         08:90:a2:2d:12:25:91:83:d1:50:a0:ea:07:a8:bd:12:9f:30:
         3b:fa:30:61:29:47:65:43:b0:60:99:a5:f8:89:6d:c7:e0:5f:
         7f:e2:3b:e6:63:c2:19:d1:f7:b1:63:e9:34:bf:3e:57:8d:22:
         d9:dd:19:c9:26:66:b2:0a:7a:c3:8d:5a:b9:de:0c:79:2d:65:
         03:bb:a4:80:9e:a9:42:c7:02:0b:06:e4:97:de:aa:50:30:fa:
         7b:de:6a:7c:ee:de:9e:6d:4b:a7:84:d7:39:57:d1:1a:d9:32:
         95:e1:5b:b6:1c:bd:46:c9:f0:6b:48:d1:1c:82:5b:c3:e1:a4:
         05:f6:a5:33:17:5b:33:4b:ce:f8:36:3f:cd:bf:42:73:c9:25:
         ef:ec:73:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:56:38 2026 by rpki-client