Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File:                     1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier:          03c/Ah487VL18GQF04Hxpu7t5mtWTSyKZByMTrq/FYg=
Subject key identifier:   E3:A8:23:F0:32:53:37:E9:36:C6:BA:B5:C8:0D:49:A6:9E:3E:92:2F
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer:       /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial:       01A106CA6C33C5B4F80C8FA4AE883BA8E939
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number:          0B12
Signing time:             Sun 04 Oct 2026 12:01:31 +0000
Manifest this update:     Sun 04 Oct 2026 12:01:31 +0000
Manifest next update:     Mon 05 Oct 2026 12:01:31 +0000
Files and hashes:         1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: i/y2AqPdNxR+hddbjWNxNorFjcLztv8sGTsjHqpdPW4=)
                          2: 453Eh0yOu4NWyTs7TE3bjcioo9g.roa (hash: A5IxuJXRfXNLs2Sl4j7rfwj7i30+ZqNR7cmzpPYYHeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:ca:6c:33:c5:b4:f8:0c:8f:a4:ae:88:3b:a8:e9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
        Validity
            Not Before: Oct  4 12:01:31 2026 GMT
            Not After : Oct  5 12:01:31 2026 GMT
        Subject: CN=e3a823f0325337e936c6bab5c80d49a69e3e922f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1d:e7:99:7f:7b:bb:c0:75:7b:95:61:95:e5:
                    09:de:4e:4a:a5:10:e3:c1:34:b6:0b:c6:3b:d9:a4:
                    f2:44:3e:2c:9a:fd:88:4c:9b:77:3a:42:36:fa:95:
                    d9:5b:fd:d5:c0:0c:9d:82:3b:99:88:fa:20:49:d5:
                    71:9c:1f:4e:6d:0d:44:1c:4d:ae:c9:85:fa:94:5b:
                    b0:54:4f:0f:79:14:11:f8:ac:2a:58:74:64:21:65:
                    57:4a:37:c0:ba:5d:41:db:ac:4a:4c:a3:12:c8:1f:
                    d0:f1:a9:6f:3e:d8:bd:f0:ed:ba:2a:f3:55:69:74:
                    08:9b:28:9b:e5:fb:f5:7a:35:01:7d:04:5c:4d:4d:
                    ca:c9:ba:a6:0b:06:1d:7e:21:e9:08:10:01:51:1b:
                    d6:8f:d3:a0:e5:78:9e:2d:fa:b4:88:6f:14:af:e5:
                    e3:d5:b4:b3:bb:05:c5:d8:d6:c1:cc:8f:47:06:13:
                    54:7d:ab:0d:8d:0b:b1:1c:8e:55:6f:a0:fa:76:a6:
                    0a:1d:e3:19:7f:a5:dd:7e:7e:a7:25:18:91:83:44:
                    bd:3e:30:44:f3:02:53:b7:31:86:5e:21:ea:7e:9c:
                    5e:d1:e5:75:86:6d:8d:7a:49:e4:4c:e8:27:d2:de:
                    c2:8f:6b:17:1b:41:60:02:d4:6f:aa:ec:9d:cc:d8:
                    00:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A8:23:F0:32:53:37:E9:36:C6:BA:B5:C8:0D:49:A6:9E:3E:92:2F
            X509v3 Authority Key Identifier:
                keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:88:6a:c1:8a:fa:6f:fd:89:cb:f4:c5:b1:fc:24:f4:e3:08:
         7a:45:9e:b1:41:ad:63:b2:3a:b1:e3:1a:23:b1:e3:ce:3b:01:
         e8:e3:6d:4a:a0:b2:91:5f:f8:07:97:92:0f:cb:22:f8:1f:7a:
         4e:26:98:1d:35:be:e6:a0:89:25:e9:bf:34:7d:db:da:e4:e5:
         4e:ee:32:a7:43:bd:88:1b:77:2c:31:f5:c3:04:3b:86:73:c7:
         d1:6d:47:6c:af:7a:aa:8a:81:69:7b:14:31:f0:0b:52:d0:69:
         8b:91:5a:70:eb:d7:1e:ca:ca:74:4c:20:ba:bf:8c:4f:95:a1:
         c3:23:c7:34:a8:27:c6:d7:7e:f4:95:6c:16:9a:a1:97:2b:94:
         10:32:43:5b:44:c1:16:e9:74:86:58:20:a3:e4:46:8f:45:fd:
         51:9e:60:51:00:fd:19:67:91:d0:93:50:c0:e9:af:bc:70:1b:
         d7:58:b3:08:58:09:29:55:68:92:75:b3:13:25:34:17:2c:48:
         2d:3d:98:c8:b0:e5:58:26:42:a4:df:50:79:91:82:38:a6:19:
         15:6f:65:e1:bf:3f:fa:56:f4:f0:a1:fe:4b:26:ba:32:24:9a:
         5c:54:cf:48:9a:c9:0e:03:1f:b7:0d:8b:09:1a:1f:78:a2:b9:
         20:ce:3d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:05:33 2026 by rpki-client