Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.mft
File:                     1GWsNiGyJrxpFnBbtbLqm1Yln8E.mft (raw, json)
Hash identifier:          pXadYlGpIb5OPPPFePJj4rXydyWrA+cv+blDU7dIp5U=
Subject key identifier:   BE:A8:E9:10:6B:01:45:92:E7:DE:F6:31:3A:09:5A:E5:E8:C3:83:C8
Authority key identifier: D4:65:AC:36:21:B2:26:BC:69:16:70:5B:B5:B2:EA:9B:56:25:9F:C1
Certificate issuer:       /CN=d465ac3621b226bc6916705bb5b2ea9b56259fc1
Certificate serial:       01A0412ABFAA686CA5DB75B66D59A63DBB57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GWsNiGyJrxpFnBbtbLqm1Yln8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.mft
Manifest number:          9B
Signing time:             Thu 27 Aug 2026 03:01:55 +0000
Manifest this update:     Thu 27 Aug 2026 03:01:55 +0000
Manifest next update:     Fri 28 Aug 2026 03:01:55 +0000
Files and hashes:         1: 1GWsNiGyJrxpFnBbtbLqm1Yln8E.crl (hash: oES5n9uqf4DG+b6x5S94tqNLzPbebjTCsD4+UutLUM8=)
                          2: 8mWPiavSIhHhZrr_OyyIC3ldxIU.roa (hash: 54lDOWiVIqMmT6MqaRlUv+jn9WnmFxvCPORtfhuO2us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GWsNiGyJrxpFnBbtbLqm1Yln8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:2a:bf:aa:68:6c:a5:db:75:b6:6d:59:a6:3d:bb:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d465ac3621b226bc6916705bb5b2ea9b56259fc1
        Validity
            Not Before: Aug 27 03:01:55 2026 GMT
            Not After : Aug 28 03:01:55 2026 GMT
        Subject: CN=bea8e9106b014592e7def6313a095ae5e8c383c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:1e:a6:24:4d:f6:22:25:0f:d6:4f:2d:73:
                    9a:42:79:81:f3:9e:bc:94:22:ed:18:fb:40:99:ed:
                    43:bb:69:20:df:9d:c2:26:7a:9d:7b:0e:9f:e4:93:
                    22:ce:f1:8b:ec:06:0b:24:9d:0a:90:66:b1:91:a0:
                    d0:f6:13:ee:19:6e:b9:82:88:96:cb:f9:f8:d4:dd:
                    ea:bf:6f:f1:f5:ab:8d:93:b7:45:af:0c:d0:46:7e:
                    53:4d:73:45:3e:85:5e:4c:15:7e:b3:d1:41:86:49:
                    b4:c1:36:fa:38:b5:ba:b8:1c:a4:f1:0b:ea:98:b3:
                    37:b1:45:9b:50:2d:4c:cd:42:ee:86:23:72:96:d4:
                    57:44:32:ca:f5:ba:f6:47:98:b3:06:f6:7f:2c:a8:
                    49:10:57:0d:1b:95:a6:58:f0:47:7e:1e:aa:8d:02:
                    c6:11:d6:7f:eb:6a:cb:59:3f:93:16:07:fa:35:05:
                    2f:44:9a:05:d3:a4:49:5e:0d:e9:96:78:5a:2d:97:
                    ae:80:96:89:0c:ac:f9:cf:05:85:24:c1:36:9c:67:
                    b0:fe:ca:b5:89:cf:e8:a0:9b:86:05:5e:11:01:08:
                    cc:eb:ad:55:6f:e9:2b:c2:6f:10:e5:7d:7f:b7:4e:
                    0f:13:f2:2f:e1:fe:90:b0:0d:ff:d5:b9:2c:6b:cd:
                    df:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A8:E9:10:6B:01:45:92:E7:DE:F6:31:3A:09:5A:E5:E8:C3:83:C8
            X509v3 Authority Key Identifier:
                keyid:D4:65:AC:36:21:B2:26:BC:69:16:70:5B:B5:B2:EA:9B:56:25:9F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GWsNiGyJrxpFnBbtbLqm1Yln8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a8:b5:db:61:d8:da:6a:cb:f3:c0:c6:be:f8:6e:2f:65:b2:
         8a:46:3d:0b:7b:d1:86:e0:f1:05:6d:c4:eb:f1:a0:4b:c2:93:
         20:32:43:f8:70:40:77:3c:1a:53:43:20:d9:1e:e1:da:84:8e:
         81:28:5d:e9:22:48:da:c0:5a:5d:73:ab:16:73:71:ad:4f:7a:
         80:be:65:15:6e:79:f5:98:90:d3:c5:81:c0:f7:7b:2a:9e:b5:
         ca:a5:a3:55:5d:66:35:57:c4:e1:75:89:df:bc:21:9f:2f:9e:
         b8:78:18:ed:49:8c:ac:eb:84:7e:24:fa:af:10:1a:d6:fe:ab:
         40:e4:15:66:b1:51:af:61:2a:62:2f:73:86:aa:f0:86:f8:d6:
         42:f1:fa:a9:21:e8:5e:46:b8:55:a6:22:75:33:b5:8d:73:23:
         eb:08:fd:89:12:ec:3f:a4:de:2f:f6:5e:85:15:a2:fc:24:55:
         c1:43:4c:9c:c0:23:04:44:49:af:40:48:25:ea:a9:1e:a9:42:
         d7:e2:2d:b3:58:f7:7c:e5:be:1d:ea:fc:59:bb:1b:46:5f:c6:
         3d:f3:e0:d0:d5:d0:96:c1:b6:65:6e:12:38:9b:f6:96:c5:80:
         bb:3f:ad:5a:e9:80:2f:c1:1d:84:46:2b:fc:6b:aa:fd:4b:99:
         39:5b:b1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:47:35 2026 by rpki-client