Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
File:                     1-wH_19pe5FD8saZWq_xuCxshw2U.mft (raw, json)
Hash identifier:          QC3vJ28babK88dJMG2OoegkxvH6ucTcoT9Sa6GzdRKQ=
Subject key identifier:   EB:DA:8A:52:83:51:F6:AE:72:3C:FC:59:0D:F8:23:DD:6B:C0:A8:DE
Authority key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
Certificate issuer:       /CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Certificate serial:       01A07CD14221EB1E7F2145A5BADB109FDF97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
Manifest number:          1742
Signing time:             Mon 07 Sep 2026 17:01:23 +0000
Manifest this update:     Mon 07 Sep 2026 17:01:23 +0000
Manifest next update:     Tue 08 Sep 2026 17:01:23 +0000
Files and hashes:         1: 1-wH_19pe5FD8saZWq_xuCxshw2U.crl (hash: aetR2t2VmvHclgD6ITFVDsz/wmf4XelfiF5a5ApI3oc=)
                          2: htjYZ9JBO2eJvDfIw7akHdbswEA.roa (hash: i2ODfKpZOto1cBGwXz5NxaTX+a6SvokP9Jli5HlOhng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Sep 2026 17:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:7c:d1:42:21:eb:1e:7f:21:45:a5:ba:db:10:9f:df:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
        Validity
            Not Before: Sep  7 17:01:23 2026 GMT
            Not After : Sep  8 17:01:23 2026 GMT
        Subject: CN=ebda8a528351f6ae723cfc590df823dd6bc0a8de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f2:19:a4:c5:9c:1a:0f:8a:32:b4:bf:b6:f7:
                    d9:6c:35:fc:ff:39:8f:87:bf:6e:f7:54:6d:7e:89:
                    14:47:1e:74:8a:75:cd:36:94:6e:35:4d:1a:ee:8e:
                    fd:22:f2:ef:ce:2c:99:1d:34:07:5c:73:75:7d:d2:
                    03:70:04:33:75:65:64:0e:d4:86:e3:4e:fe:21:f7:
                    ec:22:36:da:63:91:6b:09:a7:33:a4:9d:11:3b:e8:
                    b1:6f:6d:eb:31:ce:48:95:fb:80:15:2f:d8:9f:40:
                    1f:c9:bc:8a:45:b4:81:7c:5c:b3:90:b9:d9:b3:37:
                    2e:40:87:f3:6b:0d:ba:53:06:c8:96:69:80:f3:d9:
                    4e:b2:a5:fd:05:04:b0:72:d6:29:90:13:9e:74:3a:
                    79:55:fa:2d:a0:52:90:3e:ce:52:09:4b:80:40:d4:
                    05:d6:88:72:d0:63:29:69:b0:6f:8c:0b:ac:e0:31:
                    44:87:0f:f6:1f:bd:04:a9:40:ef:c1:be:64:88:c1:
                    e2:c1:a2:71:4e:86:c1:ff:f9:5c:86:90:64:7b:24:
                    d7:81:23:35:35:1c:36:ee:ed:53:7e:f8:d0:54:53:
                    e0:68:d9:93:fa:e4:99:a7:aa:2a:d7:9a:53:0d:b6:
                    b2:07:1c:c5:3e:38:89:af:4e:1a:da:7b:e1:c7:82:
                    ad:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DA:8A:52:83:51:F6:AE:72:3C:FC:59:0D:F8:23:DD:6B:C0:A8:DE
            X509v3 Authority Key Identifier:
                keyid:FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:32:4f:bc:57:a9:30:71:19:8a:53:f2:91:ab:11:07:d2:88:
         75:7f:65:73:ce:d8:fb:51:86:bb:2f:32:62:70:6b:7f:5f:98:
         c1:0a:0d:0b:60:50:f1:08:c6:69:a5:e8:5d:bf:fb:05:c0:9b:
         93:70:41:5b:ab:ae:12:f3:fa:68:2f:52:8a:3f:4d:74:20:c0:
         39:32:2e:a8:3f:5c:88:c3:15:61:4a:2c:90:c9:01:82:9c:04:
         78:28:f2:e8:6b:62:62:a4:8c:5a:9d:47:e5:a0:a7:c8:a7:1d:
         ea:cc:55:d5:7d:87:5f:ff:18:5e:04:0f:51:aa:ac:f5:30:13:
         34:f0:9b:6f:53:bf:27:a9:b8:df:0f:49:b5:46:05:84:ca:4f:
         78:bd:34:37:86:d1:94:8f:c3:e6:f8:bb:53:49:eb:f9:ec:85:
         b8:6b:09:89:0a:95:2a:50:01:71:0e:90:31:c2:68:15:dc:35:
         56:3d:9e:19:c0:bc:bd:25:39:a7:9a:93:c8:5b:0c:4d:a3:67:
         a3:cb:ef:64:62:31:29:4a:e9:84:59:58:87:20:c4:94:9f:96:
         7a:b1:b8:6f:a6:7a:f8:1c:70:c8:01:cd:6e:48:b8:20:4b:1d:
         98:e6:49:64:c7:be:97:9b:76:f9:be:cc:36:a4:03:03:c7:d5:
         b5:c1:9b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 04:03:59 2026 by rpki-client