Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
File:                     1-zZG-6aQRe3l745cOaL8F_nw0tw.mft (raw, json)
Hash identifier:          brMh5rjkog449q2bo/78CQJghVYpxphjbS6H3KIekjI=
Subject key identifier:   1D:FE:ED:E0:96:EB:8E:D8:D0:2A:6F:B4:89:A4:78:BC:74:0F:F5:2D
Authority key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
Certificate issuer:       /CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Certificate serial:       01A14D2B38AA799CDACEDC35803FA403A368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
Manifest number:          11A3
Signing time:             Sun 18 Oct 2026 04:00:40 +0000
Manifest this update:     Sun 18 Oct 2026 04:00:40 +0000
Manifest next update:     Mon 19 Oct 2026 04:00:40 +0000
Files and hashes:         1: 1-zZG-6aQRe3l745cOaL8F_nw0tw.crl (hash: 5d7UH0Xme6okYPWEgalRZZXlRNdIRHMYkMQHMVC/jXM=)
                          2: LdaZSUyQ2J35WViDp7K4OleiJM0.roa (hash: 8ojGftdjF7z5hU3TazuQkKR65kz8aTFetHlaO3cL+Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:2b:38:aa:79:9c:da:ce:dc:35:80:3f:a4:03:a3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
        Validity
            Not Before: Oct 18 04:00:40 2026 GMT
            Not After : Oct 19 04:00:40 2026 GMT
        Subject: CN=1dfeede096eb8ed8d02a6fb489a478bc740ff52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c1:77:b0:41:7b:87:4a:60:f5:b1:95:88:f9:
                    5d:e0:20:59:c6:71:02:19:8c:0b:60:a9:6b:53:75:
                    d5:f3:f3:b3:9a:de:cf:17:30:04:06:bd:d1:e8:aa:
                    fe:ac:cf:13:ba:80:65:7b:52:33:22:aa:d4:17:4f:
                    fd:ea:d3:ff:28:5a:49:0b:3e:31:f7:c2:27:56:45:
                    82:d6:7c:81:56:b7:27:ff:2e:3d:8c:4b:b5:23:aa:
                    b8:a6:84:52:7d:05:46:a0:8c:0d:b4:64:d2:75:60:
                    94:aa:ca:33:fe:c9:ca:20:4f:b9:dd:f1:65:7d:03:
                    44:1f:38:6b:5c:00:3d:b3:1d:ea:01:b1:d5:36:02:
                    04:3a:c2:12:04:51:25:5e:c3:6b:c4:43:35:03:d9:
                    32:d4:61:09:09:8c:4e:03:7a:f8:51:fe:ad:f5:73:
                    d7:45:e5:92:47:f9:6f:64:1e:56:8d:00:75:7b:94:
                    8e:e4:2f:13:57:4b:03:0b:71:14:78:6b:bb:5c:12:
                    54:85:37:98:36:1b:dd:e5:0d:04:1f:4f:d8:26:25:
                    1c:f0:33:2f:57:0a:bd:7a:ef:9c:cf:f7:a0:1c:b4:
                    43:60:df:cb:9f:1a:e2:4c:68:7a:1d:cb:dc:e6:ec:
                    09:09:1c:0f:c6:0e:bd:48:b5:7f:11:8f:8c:7b:4e:
                    65:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FE:ED:E0:96:EB:8E:D8:D0:2A:6F:B4:89:A4:78:BC:74:0F:F5:2D
            X509v3 Authority Key Identifier:
                keyid:FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:bc:9b:9d:53:88:7b:61:a7:65:d6:a3:40:e4:f1:37:01:ec:
         89:42:99:a1:b6:74:2e:f8:f3:dd:d3:c0:9d:ae:1d:83:a0:0c:
         b1:ba:8a:13:3c:09:0b:d4:35:c1:e1:c7:6e:58:85:3e:1a:a6:
         a0:94:1d:3b:bb:01:70:c2:39:1c:8d:85:5c:fa:b1:62:52:c7:
         2d:da:e3:dc:13:e3:18:7e:18:e2:a1:fc:da:1c:21:17:25:76:
         61:b3:5e:89:02:0a:3b:b8:99:9d:81:a9:9e:d3:35:9e:d9:fb:
         1f:79:b9:94:77:81:f2:f1:24:6f:2a:24:4e:a9:ee:f7:af:45:
         7b:b2:1b:af:ba:a8:be:2f:fe:7a:04:ee:42:67:af:3e:c4:20:
         3e:9d:5c:c3:8e:11:2b:4a:42:82:0f:d1:38:4e:3b:48:fa:94:
         86:e9:f6:9c:4a:21:9b:53:d8:67:8d:a9:ab:f0:8d:a5:f6:f3:
         ef:28:b1:0c:f8:9c:22:14:59:70:77:8d:ff:27:8e:96:04:e9:
         fe:e2:8f:7d:29:59:17:b6:f4:86:69:4a:12:7f:79:39:74:7f:
         5f:a4:1b:6f:4d:2e:01:77:d6:ef:8d:0e:30:5b:bd:95:14:d0:
         30:bd:ea:d4:e2:3b:15:e7:5f:e7:87:48:0b:b7:91:81:fe:23:
         8c:58:9e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:17:30 2026 by rpki-client