Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.mft
File:                     1-yRF-erKIIDmV0cEBQkMzOxxhRg.mft (raw, json)
Hash identifier:          Ri3m4YfDtxp3bnLOz/VE4fC6XvvJ492ynFdn5ne5+J8=
Subject key identifier:   29:28:F4:C6:06:83:93:BC:7B:F8:12:36:DC:7B:44:E2:95:E4:5A:3F
Authority key identifier: FB:24:45:F9:EA:CA:20:80:E6:57:47:04:05:09:0C:CC:EC:71:85:18
Certificate issuer:       /CN=fb2445f9eaca2080e657470405090cccec718518
Certificate serial:       01A040F2C52763A2FEC4E60C00BAF2995AF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-yRF-erKIIDmV0cEBQkMzOxxhRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.mft
Manifest number:          010D
Signing time:             Thu 27 Aug 2026 02:00:46 +0000
Manifest this update:     Thu 27 Aug 2026 02:00:46 +0000
Manifest next update:     Fri 28 Aug 2026 02:00:46 +0000
Files and hashes:         1: 1-yRF-erKIIDmV0cEBQkMzOxxhRg.crl (hash: zAzGToNQpdqyxGCgGpK6GBdJldKQxsbvXV3AKMp68Fo=)
                          2: x97mdtKpGTOO1cukgJmsPeM4jMg.roa (hash: P9iY2nb7fkn1P2NTqzyagvrr9TTLD7Tmn6hSWIxyZHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-yRF-erKIIDmV0cEBQkMzOxxhRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:f2:c5:27:63:a2:fe:c4:e6:0c:00:ba:f2:99:5a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2445f9eaca2080e657470405090cccec718518
        Validity
            Not Before: Aug 27 02:00:46 2026 GMT
            Not After : Aug 28 02:00:46 2026 GMT
        Subject: CN=2928f4c6068393bc7bf81236dc7b44e295e45a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:60:64:6a:e7:83:c9:14:ba:0a:46:ab:31:34:
                    5d:62:83:cc:04:3d:1d:01:2e:da:c2:e8:a9:6c:06:
                    16:4a:33:31:31:98:17:7a:a6:24:3c:f4:fc:df:4f:
                    1d:8b:c6:cd:b5:0b:a5:9e:e0:e8:05:b6:58:86:f5:
                    48:dd:94:f3:e2:cd:31:3c:dd:a4:ed:97:44:22:3e:
                    a6:82:7f:ab:9c:33:db:d9:23:83:df:de:a1:3f:fe:
                    1c:3e:70:15:76:01:8a:54:9e:60:69:7f:2c:06:51:
                    13:c0:d7:34:54:f4:22:f4:33:99:fd:59:f8:7f:43:
                    f3:9c:06:ef:82:99:a9:bf:fa:a2:40:18:60:17:01:
                    ab:65:ba:ad:be:c9:a8:d1:e0:9a:08:0f:7b:c8:60:
                    03:d4:be:c1:04:8d:76:9e:9c:67:45:9f:af:e1:75:
                    b7:9f:bb:82:98:76:81:7b:26:d8:14:3c:25:0e:2f:
                    e1:18:70:ae:b5:33:88:ba:ce:e2:34:d3:01:42:95:
                    df:85:e1:60:5d:22:9c:ab:81:c7:d3:0c:e1:51:82:
                    cf:24:fc:d4:ad:97:7d:ee:f3:a2:3f:48:c7:75:3a:
                    16:19:6f:16:e8:e8:81:39:ff:3a:a3:78:f0:25:9a:
                    6e:98:d2:db:0a:06:0f:f5:c9:df:87:af:25:22:95:
                    2a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:28:F4:C6:06:83:93:BC:7B:F8:12:36:DC:7B:44:E2:95:E4:5A:3F
            X509v3 Authority Key Identifier:
                keyid:FB:24:45:F9:EA:CA:20:80:E6:57:47:04:05:09:0C:CC:EC:71:85:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yRF-erKIIDmV0cEBQkMzOxxhRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d4:bd:de:f1:1c:9c:1c:af:ee:99:0f:b2:65:f5:13:20:c5:
         e5:24:ca:53:10:1a:d6:07:65:7d:61:4a:9f:f4:5c:63:c5:a6:
         e1:2b:40:f7:e9:e3:50:d1:9c:15:16:f1:b7:45:9c:87:03:10:
         f5:fe:32:d2:4a:c3:88:6b:38:5c:4a:b7:ca:ba:7a:f7:e3:f3:
         8d:ca:35:13:7a:8c:0e:7d:32:21:3b:7b:6d:e0:9c:ea:7d:fe:
         3b:8f:68:ad:07:d4:5b:73:43:de:0e:30:b2:bb:0f:f0:a5:09:
         72:b0:1f:c9:ad:54:2a:0d:21:3e:4f:e2:50:da:94:50:e3:e6:
         94:b5:d9:9d:ce:cf:56:46:ac:30:f3:56:b4:9f:7c:8a:b7:38:
         0b:4a:3d:8c:c1:ad:9b:85:ac:86:f4:42:d9:4b:9a:52:ef:8f:
         76:11:99:43:37:66:8f:6f:bf:72:8b:1b:47:1f:7c:81:dc:b3:
         f0:e1:d3:e0:ff:a4:e9:fa:ce:ca:3a:06:79:5c:07:4a:84:0d:
         0c:ca:eb:02:6b:24:6b:ba:55:37:22:f1:1d:bf:b1:22:da:db:
         3c:e2:82:26:4a:24:0f:4e:cc:1b:0b:a8:19:97:c0:c0:a2:4e:
         42:1f:05:ef:4c:5b:56:fc:36:32:2e:ba:2b:c2:8b:1f:88:6d:
         af:16:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:04:29 2026 by rpki-client