Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
File:                     1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json)
Hash identifier:          AHcc7UVBz7kjuLieruHE5Mbpt4e+J3lSzgHZbIPt8O0=
Subject key identifier:   51:F8:64:57:6B:D9:6F:C4:70:43:21:F8:48:E1:0D:5F:97:5E:DC:2E
Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
Certificate issuer:       /CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Certificate serial:       01A13E5D539F6E9FE57287B1AFEA4CC20306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
Manifest number:          1AA6
Signing time:             Thu 15 Oct 2026 07:01:05 +0000
Manifest this update:     Thu 15 Oct 2026 07:01:05 +0000
Manifest next update:     Fri 16 Oct 2026 07:01:05 +0000
Files and hashes:         1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: nr1frrIjBd3FaLgF5yaFje+yRnfUNRH3O0ikkQbyOfw=)
                          2: Vi82WamhNS_7BkMeH_Obwd9eH6o.roa (hash: /zAtnxefQ5sdQ3fDobW8m7Zl2IYqkGJl44bGBXQLVlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 07:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:5d:53:9f:6e:9f:e5:72:87:b1:af:ea:4c:c2:03:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2
        Validity
            Not Before: Oct 15 07:01:05 2026 GMT
            Not After : Oct 16 07:01:05 2026 GMT
        Subject: CN=51f864576bd96fc4704321f848e10d5f975edc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:bb:b9:ed:20:82:79:60:31:f5:e1:73:43:ff:
                    3e:1d:f8:b4:b3:33:76:0d:d0:c0:0b:4f:6e:ac:4a:
                    b0:a1:5f:ae:a6:61:5c:7f:78:bb:b4:b6:33:ed:d8:
                    dc:c2:d5:eb:fa:66:01:03:94:84:26:e7:36:75:2c:
                    18:26:65:d8:d0:a4:92:ae:45:a2:a9:6d:9f:ec:f7:
                    c8:fc:ed:b2:74:d5:31:de:9a:7b:3d:27:11:9a:23:
                    0e:9c:d4:bb:09:67:6f:16:9e:03:af:56:16:86:e0:
                    27:80:73:9f:26:b0:74:6a:c6:b0:3d:b3:33:a3:2a:
                    8a:ba:3a:76:2a:54:ac:4a:c5:d5:bf:0f:dc:d3:a9:
                    6b:a5:68:51:a9:5d:32:30:62:51:63:21:cc:32:82:
                    da:68:d4:4b:42:29:30:4e:ad:d4:a4:e5:87:10:18:
                    59:0b:85:55:ba:cd:48:05:52:93:dd:6d:45:61:8d:
                    b7:00:b6:27:4c:bc:8b:23:12:58:bb:4d:e6:aa:93:
                    8f:da:2e:ad:ea:06:23:8e:87:64:c9:bc:35:2d:da:
                    0b:b7:cf:62:c1:2a:ed:bd:6a:17:e4:4a:c0:9b:24:
                    ff:64:c7:cd:b3:4a:4c:bd:f8:a5:36:89:95:99:19:
                    46:ff:17:18:4b:32:63:ee:19:d7:3f:03:b9:00:12:
                    b5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F8:64:57:6B:D9:6F:C4:70:43:21:F8:48:E1:0D:5F:97:5E:DC:2E
            X509v3 Authority Key Identifier:
                keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1a:46:3c:69:22:97:35:1d:9a:5f:10:ff:f9:8e:d5:e5:47:
         69:23:1d:88:f1:f6:c1:b7:fd:c5:29:d7:be:93:ff:d6:3d:fe:
         d8:b0:f5:de:81:a1:2f:84:b9:fa:b4:9a:d5:e4:88:cd:34:33:
         ce:c5:d2:ef:8a:c1:71:a3:84:a2:14:86:d9:26:e3:69:68:54:
         38:1c:aa:76:11:f6:0a:65:cb:42:44:9a:ff:38:cf:9e:ac:34:
         d0:9c:98:5d:54:26:6c:f0:bb:40:85:51:e9:43:b3:c3:f4:67:
         4f:17:94:2f:bc:3e:40:d3:2e:78:bc:2f:3d:6a:5d:7d:fb:86:
         24:32:0f:64:e1:a0:2f:3b:b8:a3:dc:ee:64:e4:92:33:72:98:
         89:b0:98:3f:92:ae:eb:e6:17:e6:1c:f7:f9:06:ec:31:98:6f:
         0e:9c:2f:e0:df:0e:4f:19:d1:96:a3:e2:6d:8e:23:70:c5:00:
         4c:8b:7a:5b:e9:b9:c1:c1:11:4e:ca:f8:8e:6f:78:ec:e9:eb:
         e7:b9:69:6c:44:cf:18:c4:59:85:db:72:87:5c:59:56:90:13:
         49:d4:10:ef:34:8c:de:78:bb:31:ee:c7:c7:c6:f4:e0:2a:b9:
         22:e6:7a:83:75:ec:2e:75:67:af:a5:55:3a:5f:2f:38:d3:0e:
         50:51:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:19:00 2026 by rpki-client