Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.mft
File:                     1-UPALG97-Xkq7khaM3tMeFLWrEw.mft (raw, json)
Hash identifier:          /Zd/XdyOFunzJlU9lzcQdrCoUUHzz8Ti+WJLl8UNjvs=
Subject key identifier:   18:DD:D3:E2:9D:33:2F:66:B9:CB:AC:97:7C:55:3F:8A:18:A7:C5:D8
Authority key identifier: F9:43:C0:2C:6F:7B:F9:79:2A:EE:48:5A:33:7B:4C:78:52:D6:AC:4C
Certificate issuer:       /CN=f943c02c6f7bf9792aee485a337b4c7852d6ac4c
Certificate serial:       01A0E81CD37B5AA5FFB4D31D42355AFEF8EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.mft
Manifest number:          F2
Signing time:             Mon 28 Sep 2026 13:03:18 +0000
Manifest this update:     Mon 28 Sep 2026 13:03:18 +0000
Manifest next update:     Tue 29 Sep 2026 13:03:18 +0000
Files and hashes:         1: 1-UPALG97-Xkq7khaM3tMeFLWrEw.crl (hash: Z+juTLal49fHFUo6MwVLOELynsL1FGhjx7lm1dvQC10=)
                          2: 87x1D7pYeaB1gXkvbE0BFkgXr-8.roa (hash: Ln5Bb2F89AAwGIw+We1i3J/fjL0LEyPyu8CtB1jNHEg=)
                          3: Z5HQd2VmGvdvOf7t3Ho1pKxlgXE.asa (hash: gfL13FB4bnR0D1Y6SJGLKvYmhF/HLaJxqtVHMWK6VJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 13:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:1c:d3:7b:5a:a5:ff:b4:d3:1d:42:35:5a:fe:f8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f943c02c6f7bf9792aee485a337b4c7852d6ac4c
        Validity
            Not Before: Sep 28 13:03:18 2026 GMT
            Not After : Sep 29 13:03:18 2026 GMT
        Subject: CN=18ddd3e29d332f66b9cbac977c553f8a18a7c5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:01:6a:3c:bb:03:27:db:69:47:32:21:3a:44:
                    d2:39:a4:aa:74:f1:be:c0:ba:8f:e0:e6:4d:31:c8:
                    13:37:3b:ed:98:3a:6a:70:79:6d:80:83:72:a3:a9:
                    f7:02:c8:fa:de:32:f7:e7:ee:31:2e:e0:44:de:c5:
                    a7:71:7e:d8:db:32:37:18:37:1f:a2:26:06:c8:d7:
                    4f:d0:ea:19:4f:11:ff:59:ae:aa:fc:f0:39:cc:f4:
                    b1:58:f0:71:0c:82:9b:6b:f3:c1:ff:a3:a6:34:c5:
                    bd:9b:3c:b4:f8:da:a9:aa:8a:88:af:49:e2:44:35:
                    22:e5:f8:fb:4a:66:d7:0a:fe:1d:eb:24:c2:c0:5a:
                    12:a7:cc:e6:18:1e:cb:f7:d0:dd:3c:5d:1c:59:f0:
                    63:38:0d:3e:c1:e9:c6:b4:6f:95:2d:a9:84:30:c9:
                    a0:8c:33:4a:b7:fa:ff:72:8c:f8:8f:ba:37:4b:9b:
                    5c:9f:9f:ff:2d:c3:9a:79:1a:d2:19:23:9e:ab:9e:
                    49:3f:a8:2d:31:c0:0f:d0:21:b2:da:fc:28:e3:c2:
                    23:8f:1b:84:ed:af:20:68:6f:54:c2:7a:37:d6:a8:
                    fe:13:2c:f7:58:72:54:6f:31:5b:c7:f8:e1:e3:7f:
                    d3:5d:5d:f6:ee:9d:01:ad:7f:a1:cb:ff:92:c2:44:
                    e4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DD:D3:E2:9D:33:2F:66:B9:CB:AC:97:7C:55:3F:8A:18:A7:C5:D8
            X509v3 Authority Key Identifier:
                keyid:F9:43:C0:2C:6F:7B:F9:79:2A:EE:48:5A:33:7B:4C:78:52:D6:AC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:09:4e:14:87:90:35:80:e7:a1:e1:e9:44:af:bb:35:e5:93:
         70:9b:2a:75:3a:42:d2:25:54:76:2e:17:cd:58:e8:8f:ef:76:
         aa:73:a1:82:5a:7a:f3:50:c8:0c:64:eb:52:65:16:7b:51:4e:
         67:a8:5b:88:0a:e3:94:61:f1:b9:d7:07:29:86:d0:6a:ca:94:
         75:29:5f:5c:3e:41:a7:cd:2b:5e:bc:79:36:10:5a:9e:bb:de:
         2f:32:e5:36:cc:1e:bd:6b:ff:fc:30:6c:f5:c7:d1:d4:52:49:
         27:36:cf:04:f4:d1:d2:56:03:3f:56:11:7b:6d:de:f1:7f:0b:
         3c:89:30:27:3d:7d:e1:4b:3b:28:07:aa:b7:d8:61:22:e2:c1:
         52:aa:15:9e:d7:1e:98:fd:13:63:55:46:cc:93:82:71:56:12:
         4f:08:b0:da:b2:0f:a7:87:2f:70:4a:fe:71:46:5f:9c:09:8d:
         cc:2f:52:8f:40:cd:db:a5:0f:49:48:fc:f7:37:e2:23:55:91:
         65:6a:b8:10:83:9c:a1:aa:b3:3d:5a:93:03:9c:a6:e4:c4:94:
         71:96:f9:41:73:b5:93:57:ff:41:bf:39:4f:e9:d5:23:9f:6a:
         fc:64:6f:9f:7c:d0:5e:2f:b9:5a:e6:59:5e:ea:f1:64:10:f4:
         bd:bc:00:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:48:04 2026 by rpki-client