Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
File:                     1-msoRBterQGEZTXq8gv9B1LgdkU.mft (raw, json)
Hash identifier:          DY95HsKzc3EdpAFcADJH98k4/xN1JE9bY6Oqopklk4I=
Subject key identifier:   96:61:2E:5E:E3:17:45:66:0C:B6:5F:FF:11:76:4E:D7:B7:24:89:4A
Authority key identifier: FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45
Certificate issuer:       /CN=fa6b28441b5ead01846535eaf20bfd0752e07645
Certificate serial:       01A16B6C98FD39B27574D3E0623C72A4544B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
Manifest number:          0402
Signing time:             Sat 24 Oct 2026 01:00:41 +0000
Manifest this update:     Sat 24 Oct 2026 01:00:41 +0000
Manifest next update:     Sun 25 Oct 2026 01:00:41 +0000
Files and hashes:         1: 1-msoRBterQGEZTXq8gv9B1LgdkU.crl (hash: GEZ9uja8NDkZDk+OGk1LLHHjwH58nHKYEXhTXL1IFSQ=)
                          2: 2798bsS-ftRBFC8OmYwDYZazwYQ.roa (hash: YEsqHt1g8/MDYthWrn0j31l+d4G+HJ7yjiXjTwZ5WJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6b:6c:98:fd:39:b2:75:74:d3:e0:62:3c:72:a4:54:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa6b28441b5ead01846535eaf20bfd0752e07645
        Validity
            Not Before: Oct 24 01:00:41 2026 GMT
            Not After : Oct 25 01:00:41 2026 GMT
        Subject: CN=96612e5ee31745660cb65fff11764ed7b724894a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:f3:8d:4a:f0:82:ab:1b:5c:fa:30:20:a9:
                    ff:bc:a5:f3:95:ec:bf:b8:f4:22:20:8c:b6:54:80:
                    f3:a9:46:22:6d:c7:6c:c9:89:9e:e6:51:79:a1:d5:
                    75:8d:43:8e:19:65:f9:06:3e:44:b7:8b:93:43:bb:
                    68:9a:b4:dd:8f:59:dd:2b:90:5a:c5:72:8d:cc:45:
                    72:33:1a:91:20:21:96:8b:79:c9:6a:39:68:dc:a2:
                    5c:bf:c7:2f:19:68:e6:af:42:77:7f:7b:8a:9f:e9:
                    41:65:29:ba:34:c8:36:23:30:de:59:70:7e:dd:14:
                    03:cc:6a:db:3f:b0:02:57:f6:92:a1:bb:ff:43:af:
                    de:e0:a7:96:7a:ab:a9:5e:97:78:4a:26:b0:b4:22:
                    62:27:4c:8a:38:bf:ae:58:1e:2f:14:c6:27:26:1f:
                    11:65:3e:cc:fc:dc:23:c8:9b:f3:70:4d:a8:82:db:
                    81:5e:ae:92:d3:6a:b5:bb:72:79:39:00:36:44:57:
                    a6:0b:d3:6a:14:4e:15:cc:36:41:42:c7:50:16:ec:
                    d6:9c:02:f3:76:0a:9d:49:1e:3e:f3:c3:71:e0:5b:
                    8b:86:9c:51:8d:d5:ad:b7:d4:df:db:2a:c9:90:89:
                    52:93:21:c4:0d:37:84:94:ae:f1:af:2d:d1:2d:16:
                    d9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:61:2E:5E:E3:17:45:66:0C:B6:5F:FF:11:76:4E:D7:B7:24:89:4A
            X509v3 Authority Key Identifier:
                keyid:FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:86:ee:13:7b:b4:51:e5:d5:0f:c6:9d:1e:b2:0a:34:9f:7a:
         b9:b6:05:e4:63:16:85:aa:68:80:7f:fd:ae:e7:f2:06:90:e8:
         45:62:4b:4b:c9:8d:70:14:f5:e4:e2:42:ef:91:20:76:d2:6a:
         dc:ad:35:0f:c0:1f:2f:3b:1d:72:b8:cc:6c:86:c4:9e:8f:59:
         a2:a3:f1:40:33:02:fc:c4:2d:aa:60:5c:79:af:1b:b3:aa:77:
         46:77:cd:a8:7f:13:78:a3:41:0b:60:d0:df:67:14:39:15:82:
         e2:2a:55:27:d7:cb:20:b8:7b:3a:9c:da:5a:3a:28:c5:b2:24:
         58:15:62:3b:30:26:74:d5:61:56:95:31:d5:41:bd:3d:ff:2d:
         eb:34:da:99:45:0e:1c:53:52:f4:e5:b0:8a:5e:4d:be:b0:c0:
         70:1c:5d:1e:f8:f5:1f:0b:46:ba:eb:62:73:e7:d2:b3:11:7a:
         e9:ff:c9:b2:d6:7b:d4:64:62:0e:07:f4:f1:e6:fc:92:56:64:
         27:b4:e7:91:07:8d:ae:54:62:d4:37:1e:53:10:52:dd:37:f5:
         2e:fd:5d:cf:b9:1d:ea:74:c4:19:2b:87:bb:da:e4:cf:75:40:
         10:7a:eb:5a:ab:46:72:55:8b:45:36:f6:76:00:a0:44:d5:bd:
         cd:96:40:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 06:16:35 2026 by rpki-client