Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File:                     1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier:          fKivPRSNpFphMahjDTwaPTlb8HADRgTT8xiKRkDF91A=
Subject key identifier:   23:AA:B3:DC:CB:F7:6D:61:32:E2:87:3E:11:77:EF:FD:D4:75:C4:83
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer:       /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial:       01A0021387FDA6D002F4D9837FFBED1722B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number:          0A8B
Signing time:             Fri 14 Aug 2026 21:00:29 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:29 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:29 +0000
Files and hashes:         1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: 3HpkEK8g/MQSZNGXUeex54Yg+2TyUQ/pdF/dAlXQLsk=)
                          2: 453Eh0yOu4NWyTs7TE3bjcioo9g.roa (hash: A5IxuJXRfXNLs2Sl4j7rfwj7i30+ZqNR7cmzpPYYHeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:87:fd:a6:d0:02:f4:d9:83:7f:fb:ed:17:22:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
        Validity
            Not Before: Aug 14 21:00:29 2026 GMT
            Not After : Aug 15 21:00:29 2026 GMT
        Subject: CN=23aab3dccbf76d6132e2873e1177effdd475c483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:3a:4a:65:11:81:78:ef:10:8e:a1:e2:d6:
                    b4:dc:d6:d7:cb:36:db:04:79:77:4e:60:1c:2e:d8:
                    bb:46:0d:90:cd:aa:21:17:52:5f:3d:44:92:d2:a7:
                    2c:19:f6:4f:ab:8c:88:70:f0:17:ad:19:46:c8:02:
                    fb:0c:59:2e:2b:2f:56:cf:01:16:d5:a7:5d:19:45:
                    a5:97:b9:ec:06:1a:7b:75:05:d7:ee:51:8e:77:64:
                    6b:78:ac:69:58:f7:22:0d:fd:51:46:ba:67:a2:6e:
                    c0:4e:f3:15:65:76:a8:cb:fa:ab:3a:1a:ce:48:b4:
                    8c:9a:58:14:5a:28:e4:72:37:0f:54:07:f3:08:12:
                    c8:b4:73:97:8b:9c:8d:40:b5:e4:19:0b:e4:0f:0f:
                    b5:5b:36:50:ed:19:9a:55:2c:b4:98:97:55:43:a5:
                    ac:ee:38:d4:af:06:1f:35:95:8b:0f:43:fb:74:11:
                    85:da:c2:1e:ec:80:22:e0:3e:6f:db:12:52:e1:9f:
                    2e:8d:26:b1:ad:94:3d:1f:c3:60:63:ea:8d:e2:6f:
                    21:53:e7:e1:1a:91:af:04:e7:04:87:09:4c:05:f6:
                    f2:e8:39:f1:f8:7b:b8:5a:55:10:1e:f1:87:a6:e3:
                    fa:63:47:d7:be:23:80:4b:7c:df:7a:d1:28:ed:7a:
                    20:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AA:B3:DC:CB:F7:6D:61:32:E2:87:3E:11:77:EF:FD:D4:75:C4:83
            X509v3 Authority Key Identifier:
                keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e9:99:f3:d5:54:1e:70:79:22:26:18:27:93:76:15:17:44:
         88:23:b9:fd:f6:ec:3c:8c:01:53:56:1e:bc:c0:c8:3a:a3:38:
         3a:26:60:5b:75:01:e4:eb:a5:b5:cc:31:87:61:6f:1a:79:55:
         a0:3b:d4:ae:1a:a9:93:c4:4c:66:39:6c:1a:d4:82:8b:45:5d:
         d1:53:61:be:df:37:f2:e4:4e:9b:ff:fe:f5:ba:ec:06:da:6e:
         a7:1d:0f:1c:de:f3:b3:8c:fa:1c:77:a3:a1:35:7e:c5:16:7c:
         c3:00:02:5d:c2:db:5f:f1:c1:01:b2:b9:88:b3:93:b9:ff:df:
         c0:2b:13:58:41:26:54:17:96:a2:13:5e:f5:2f:07:30:50:e4:
         d4:6c:55:7e:a7:02:b7:ab:df:86:f5:25:f4:98:d9:ad:0c:54:
         8a:34:c0:f2:62:72:94:2a:1d:94:38:fa:54:b7:59:45:1b:3f:
         d1:e7:4f:5a:9b:d9:92:1c:a0:f7:4e:dd:48:ee:24:a3:04:c0:
         b3:a4:32:68:0c:d8:0a:b3:77:71:2b:9f:3b:b4:31:68:ed:30:
         5f:c2:a3:24:db:80:97:59:8c:49:bb:43:46:0a:b5:94:15:b5:
         23:a0:42:29:64:d4:da:95:be:7a:d3:53:68:6c:12:d4:8a:1e:
         3d:c9:d6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:53 2026 by rpki-client