Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
File:                     F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json)
Hash identifier:          bonqtMGMvW3tD3oenFookz7soGP1Dxzz+N8fOBDfrP0=
Subject key identifier:   7A:71:24:1D:30:12:87:A9:F9:BB:84:2C:9E:59:96:56:D0:F7:DF:5C
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Certificate issuer:       /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial:       01A089431B88D5C3551686770CD79F5FC09D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
Manifest number:          1A55
Signing time:             Thu 10 Sep 2026 03:01:11 +0000
Manifest this update:     Thu 10 Sep 2026 03:01:11 +0000
Manifest next update:     Fri 11 Sep 2026 03:01:11 +0000
Files and hashes:         1: 7QjRRYA7jcCFNync-7ZqAYQ9Lvk.roa (hash: Ww9Vf4lv8aoiNND6Ah1rgZbAtQ03hE7wpG+7oWtfpX4=)
                          2: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: aDdhFANiJbtQ8BcgCjEDx8+VkfS0d+kl3RPkQlJ4CiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:43:1b:88:d5:c3:55:16:86:77:0c:d7:9f:5f:c0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
        Validity
            Not Before: Sep 10 03:01:11 2026 GMT
            Not After : Sep 11 03:01:11 2026 GMT
        Subject: CN=7a71241d301287a9f9bb842c9e599656d0f7df5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0c:87:03:70:83:0d:f5:58:8b:de:35:5e:b7:
                    7e:0f:1f:fe:df:27:f0:ef:45:03:f8:af:46:ba:2a:
                    d0:0b:bd:78:74:5e:1e:f5:ce:95:b5:a2:e9:6f:9e:
                    e1:dd:3f:47:d7:62:f9:a4:80:72:6f:22:8b:88:e2:
                    d2:22:a1:3a:56:bd:c8:5a:1f:48:64:5b:e6:37:72:
                    f7:bc:93:bd:a5:8a:33:97:d5:36:44:b1:c1:08:ab:
                    18:82:38:88:6f:9d:47:ad:bc:8a:56:64:31:a6:e2:
                    66:79:7b:a1:08:58:bf:94:43:64:ce:b8:73:25:ea:
                    2a:3e:58:ff:7a:40:2b:8c:bb:4b:b4:9c:ab:a8:de:
                    91:a4:d6:4d:c4:04:75:08:c4:fa:3a:39:cb:1e:28:
                    ad:67:11:cf:36:2c:4e:41:bd:ae:1d:60:c1:9a:30:
                    f5:66:97:40:77:35:1c:96:a1:11:e2:c3:1b:a5:68:
                    ca:4f:a2:62:a1:69:1d:f4:e1:1a:8e:76:3f:6e:ce:
                    44:2d:fa:e4:40:15:0d:7d:d8:10:0b:26:a3:6e:03:
                    ca:28:b1:33:87:12:21:a1:18:5d:20:5f:14:77:f8:
                    bc:52:99:f9:3c:e8:8d:92:c9:d0:6e:2c:a2:58:07:
                    f9:74:8f:d3:df:2e:04:56:95:67:4e:45:8d:4d:ac:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:71:24:1D:30:12:87:A9:F9:BB:84:2C:9E:59:96:56:D0:F7:DF:5C
            X509v3 Authority Key Identifier:
                keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:29:25:7d:85:35:fe:6b:e6:92:39:ba:c1:fe:c8:37:40:70:
         1b:74:2a:68:ca:25:90:ef:76:5f:37:19:f2:2e:40:f9:4a:02:
         4c:b8:b8:0c:f3:75:57:3a:56:c9:69:a8:4c:8e:e5:1f:ae:3f:
         67:cd:b4:25:f6:af:19:de:38:09:19:98:0d:f7:c8:e2:fd:89:
         9b:eb:b0:a1:a5:67:5a:20:03:a1:b6:1d:f1:3b:42:e5:9a:da:
         98:78:26:77:5f:c4:e3:fc:42:18:be:a4:f7:1f:68:e6:f2:59:
         1f:e1:58:2c:30:3c:d8:7b:69:6c:56:9b:1c:5f:19:db:ce:d9:
         7a:02:7e:90:79:62:a8:7d:a0:a0:72:63:54:75:75:0e:38:cb:
         c2:13:fe:16:62:cd:18:78:60:52:1b:df:b0:ab:d8:48:36:3a:
         9f:ad:db:d7:a6:f5:64:65:69:7a:8a:f1:bf:b6:ad:a4:96:75:
         e4:5b:05:35:2c:e3:a0:dc:ac:ce:e5:77:2f:f3:70:d8:50:1f:
         05:1e:6f:1a:7d:26:c4:20:e3:03:02:0c:4b:3b:21:7d:dd:15:
         43:b5:d4:47:4f:8f:c0:76:fb:d2:53:2a:96:c4:e8:b8:72:44:
         23:8e:f7:06:fe:03:d2:12:bc:7a:05:bd:bc:96:e9:fa:67:11:
         a6:ae:d1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:14:11 2026 by rpki-client