Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File:                     1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier:          lrQ9YJ63PtzFb5XCPQwB0REKMQv/qvSfqIugAkmI24A=
Subject key identifier:   6B:9D:1C:2C:37:3F:65:93:8B:51:2C:E3:B9:FC:1A:FA:B9:A9:2E:8A
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer:       /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial:       01A06E7043362A83A42F81457CA347511334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number:          16CC
Signing time:             Fri 04 Sep 2026 22:00:46 +0000
Manifest this update:     Fri 04 Sep 2026 22:00:46 +0000
Manifest next update:     Sat 05 Sep 2026 22:00:46 +0000
Files and hashes:         1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: guAIe4Wuj56VdjySTSlG6/VzMYqGcsMinYSF5DxW5jM=)
                          2: 4ZvAi-gn1pF-qrIQmhpNRfK8kj0.roa (hash: fHKVM+9R/f9S25YhWf0k6ch7xqovB3duuxyKCTErDx0=)
                          3: IWwnPa171sfGXqpY2mWfswCRM5U.roa (hash: 6A+J6jDcFtUHVF1QTU8jgrZFLP13CFzG45TXvJZuPBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:43:36:2a:83:a4:2f:81:45:7c:a3:47:51:13:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
        Validity
            Not Before: Sep  4 22:00:46 2026 GMT
            Not After : Sep  5 22:00:46 2026 GMT
        Subject: CN=6b9d1c2c373f65938b512ce3b9fc1afab9a92e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:62:70:f5:4d:c3:71:92:71:4a:cc:71:1a:33:
                    1d:33:5e:95:a7:b0:e4:e7:e8:aa:b9:d5:66:77:99:
                    7c:b9:0a:91:cd:ab:39:c6:e3:9d:ba:27:d8:2b:d7:
                    d6:44:23:90:01:18:68:e0:2c:a8:97:61:67:59:9c:
                    53:0b:c0:e0:ab:20:30:a9:f3:3b:72:68:9d:c3:15:
                    14:17:66:5a:18:bb:43:b1:ba:6a:c3:34:ba:eb:f6:
                    78:b0:1e:be:26:46:1a:76:01:02:38:70:5f:d4:af:
                    c7:e8:fb:47:e6:e3:a8:40:5a:79:4f:d1:79:22:78:
                    d5:88:9c:92:1e:62:3a:9d:87:8e:a9:ca:a2:ef:3c:
                    9c:3d:bb:a6:c4:bb:9b:51:40:8f:8c:77:18:c3:f3:
                    98:80:63:1a:96:22:9a:a5:78:a7:b9:7b:a4:60:8f:
                    f9:c6:8c:26:9a:c9:c4:15:c6:ad:bd:44:ca:a9:a0:
                    0c:31:9e:00:13:3a:56:db:d2:2d:ac:66:91:5c:8c:
                    d3:f3:84:e8:e6:c7:c2:1b:60:57:81:f2:25:cb:3f:
                    91:e4:a0:5c:8e:e4:a2:fd:da:a9:a6:17:3d:8c:55:
                    72:6c:1c:39:8e:10:4d:8c:ed:eb:22:cc:8d:6c:e6:
                    02:c6:34:56:26:70:d6:dd:3b:14:3b:5a:ee:d5:02:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9D:1C:2C:37:3F:65:93:8B:51:2C:E3:B9:FC:1A:FA:B9:A9:2E:8A
            X509v3 Authority Key Identifier:
                keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:dc:eb:4f:e4:fb:e8:a6:da:56:61:eb:51:32:7a:4b:36:72:
         bd:a6:ff:1c:f2:28:5c:8c:d0:72:ac:4d:f5:07:ab:6c:e7:98:
         df:50:2f:99:f5:fe:d4:86:a3:a8:27:83:63:26:42:d9:6a:80:
         95:b3:a1:2c:07:ee:69:e2:65:ba:00:8a:b5:55:b2:87:de:ac:
         80:c3:2b:eb:ef:36:18:0d:07:8a:14:9b:ab:3e:7f:dc:03:7f:
         50:b1:51:0c:02:9a:45:11:c4:25:55:26:d7:16:91:6c:2f:39:
         4b:66:00:cc:f9:42:ba:68:31:5c:3f:5a:bd:58:bc:5b:64:b7:
         b1:78:db:92:a1:24:1f:74:74:e4:82:92:ff:e8:45:3a:43:6e:
         1b:ed:be:c1:d8:70:6a:ee:e9:7a:1f:14:99:47:7b:39:1d:96:
         f9:be:91:50:a8:78:2d:54:24:ba:44:15:73:e8:a5:65:86:a4:
         34:e1:3c:c5:3e:bd:3c:b9:b9:44:f2:1a:56:15:ac:dd:55:dd:
         11:91:8d:e1:86:23:aa:f4:f5:34:8f:ca:2e:89:d0:24:9a:65:
         16:da:43:c3:63:3b:ee:7e:bd:de:a6:27:11:a1:4a:0e:85:d4:
         e1:85:23:cf:55:56:92:d1:25:7b:9f:8b:1c:d7:72:f5:f2:dc:
         19:df:b7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:26:55 2026 by rpki-client