Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
File:                     1-3nCbzFXU0UVnIQO0nioeKklZhU.mft (raw, json)
Hash identifier:          4ENmNfKAkrhZFNA8lz/A93OAfh6WoUjOGCJboKjdrGM=
Subject key identifier:   AD:27:BF:A7:56:CF:06:FD:E5:C0:33:40:CA:4B:4B:55:60:1E:59:A5
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Certificate issuer:       /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial:       01A116AA42D2312046430394EF6496484F5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
Manifest number:          1A99
Signing time:             Wed 07 Oct 2026 14:00:19 +0000
Manifest this update:     Wed 07 Oct 2026 14:00:19 +0000
Manifest next update:     Thu 08 Oct 2026 14:00:19 +0000
Files and hashes:         1: 1-3nCbzFXU0UVnIQO0nioeKklZhU.crl (hash: T5F1EHKPQ+yBF6KSB2S5EdIKfuSuWYArHDrDm+YhFOc=)
                          2: 5yW1J3G-SRoAia8ARctoGLWzIYc.roa (hash: X09RAO+Iokxl6DD0+XywUvUr2qss8psh9a8kzzRJ8CA=)
                          3: BuRUOF7mMOX9LaFv1V3QhA-5u7w.roa (hash: Jk587wQ/RfxSBQigyNcTI8jkJxFSiSHzC0v2gfYkHEo=)
                          4: KfwY1j22Ax4UScL4SqchoS6Z8Bo.roa (hash: lfrpyk1o29ncs3GeyAV8veuvMaUhtX2qKzwSKrcBWAo=)
                          5: KnVR_9VrWrMYjNqmZyI3AyOyCfQ.roa (hash: smZSmUpd6ByBf72zK69AbaDDhM3Jk9l+boOyjSHXOmU=)
                          6: RIk8mcO0XUHeY1yE3bLpyK41RDc.roa (hash: 7ot83Q70csEm6+GFN6TqnACE6Bsk3KoPtGK0mmsksq0=)
                          7: UCM287_6vaVTmxRbaeLhFXJu-zI.roa (hash: Dd8R2yXONvmf0J4ib+h5UGhtmlZ7wExXG0YcP5XCyOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:aa:42:d2:31:20:46:43:03:94:ef:64:96:48:4f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
        Validity
            Not Before: Oct  7 14:00:19 2026 GMT
            Not After : Oct  8 14:00:19 2026 GMT
        Subject: CN=ad27bfa756cf06fde5c03340ca4b4b55601e59a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:0c:81:f8:ed:71:19:77:b8:fc:a3:1c:42:
                    80:9d:5d:f9:fb:ce:16:8f:83:c0:33:01:d5:d8:32:
                    f5:5c:9a:b0:53:06:6a:22:1d:00:44:b4:60:df:b0:
                    54:ee:b5:e2:8c:29:89:2e:75:e8:17:ee:7d:28:de:
                    7d:37:47:b5:7a:65:64:35:4a:61:05:ea:fa:89:b5:
                    86:68:65:19:08:5e:79:48:e4:7e:99:3d:6f:e3:8d:
                    1d:95:cb:e3:0c:08:83:07:28:f3:46:63:2a:9e:31:
                    ad:f9:e4:34:9d:49:a5:e8:a8:96:2f:0b:0f:db:eb:
                    a5:ce:a0:b3:fd:cc:b8:3b:63:68:a4:1f:3a:10:2a:
                    3b:0f:18:35:dd:2e:13:66:a8:22:ff:63:55:48:7b:
                    15:4b:f8:29:7b:47:88:f2:16:63:8b:ac:72:f0:13:
                    ff:2f:a6:1c:69:3b:98:15:4f:82:21:85:54:16:c8:
                    e0:57:8c:01:d5:51:96:c3:49:3d:f0:80:35:6d:05:
                    9d:ae:04:32:33:0a:c6:65:17:c2:c6:35:63:37:a3:
                    28:d1:a1:4a:7d:9e:0f:ec:8f:7d:2e:eb:f7:f9:02:
                    b1:cd:4d:c9:44:c6:7b:ad:1c:3f:43:ba:69:86:c6:
                    e6:d6:02:8c:e1:68:93:bf:06:8f:a8:5a:94:c4:4b:
                    62:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:27:BF:A7:56:CF:06:FD:E5:C0:33:40:CA:4B:4B:55:60:1E:59:A5
            X509v3 Authority Key Identifier:
                keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:75:69:72:cc:97:3a:86:12:48:1c:80:48:fa:86:cd:87:82:
         f4:aa:2d:ef:77:74:6a:14:f8:09:a8:a1:43:b2:52:e8:1b:1b:
         d4:78:68:a8:91:6d:a5:f1:6a:ae:36:72:4e:f0:04:89:44:32:
         1a:70:4e:92:b6:75:fb:49:d8:d7:26:ed:87:fa:93:4d:be:e3:
         a1:7e:a8:5a:ca:51:a4:1a:a3:0c:29:e5:a9:9a:c2:53:85:bc:
         6d:75:71:2d:20:ce:26:cc:33:ac:32:02:ca:69:48:06:fc:ac:
         07:93:20:be:96:83:bb:d5:e9:c5:c0:06:0b:12:01:85:af:85:
         7c:53:00:fe:9e:f5:40:36:ec:e4:b1:86:2b:26:30:fe:ae:54:
         6d:b2:4f:e7:e5:33:91:ca:cc:f2:4d:02:d2:aa:52:5c:64:f6:
         bb:4e:14:a9:e5:43:5c:89:4b:34:64:8b:f7:f8:8a:f7:c0:5b:
         6e:2c:8f:f7:d1:1c:33:a4:44:95:c6:38:f4:f2:57:2b:cd:c9:
         37:be:ce:d2:ae:85:2b:ba:93:a5:be:24:91:00:60:15:31:8a:
         f2:cc:d6:da:f5:93:29:0a:78:49:88:de:e2:65:2e:5c:d3:c5:
         18:ef:60:0b:10:1b:f8:59:4e:f9:1a:d4:f0:58:98:8c:32:5f:
         45:f1:a9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:57:38 2026 by rpki-client