Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft
File:                     1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft (raw, json)
Hash identifier:          ehcjE2P+yWTWG6pDuMZX4fIb46hjV17jrINIWkGGTEs=
Subject key identifier:   7E:A9:20:BE:38:A9:63:0F:71:51:89:3E:B0:E4:B6:A4:D5:66:69:E3
Authority key identifier: D4:6C:43:59:92:6A:C7:F3:AC:F8:DC:52:0E:78:7A:36:62:71:38:7C
Certificate issuer:       /CN=d46c4359926ac7f3acf8dc520e787a366271387c
Certificate serial:       01A13ECBC7349EEC8FB0721461A0DB501CF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft
Manifest number:          08A6
Signing time:             Thu 15 Oct 2026 09:01:44 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:44 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:44 +0000
Files and hashes:         1: 1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl (hash: 01iZzWmHRbpPAUcMmhWh3KBAFdXO1tGZ5Xh3nfsMzYE=)
                          2: rdRK4HKKePC5wQDyC11wkiwopqw.roa (hash: qa/S5O84ZAb8y1Kb/hqHJSvhVOMhRujyJpiZNbcCAnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:c7:34:9e:ec:8f:b0:72:14:61:a0:db:50:1c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46c4359926ac7f3acf8dc520e787a366271387c
        Validity
            Not Before: Oct 15 09:01:44 2026 GMT
            Not After : Oct 16 09:01:44 2026 GMT
        Subject: CN=7ea920be38a9630f7151893eb0e4b6a4d56669e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:43:b3:ef:5d:d6:c8:02:00:0a:3f:5c:fd:13:
                    08:91:7b:43:29:13:7d:21:21:9f:d6:52:31:f5:36:
                    41:6e:be:f9:7d:7a:b8:96:dd:40:98:f7:40:de:69:
                    83:a8:d1:ff:cb:77:f2:5b:d8:ca:ec:1e:40:8d:ca:
                    52:a2:64:5e:5a:9d:11:1e:7c:bd:bc:4b:dd:75:f6:
                    36:b5:68:61:63:cf:3f:cd:e3:37:60:b2:08:5d:6c:
                    62:83:f3:8a:1b:42:5e:59:cc:c3:53:c1:d1:1d:4a:
                    90:4f:3a:89:eb:36:46:19:f1:6f:52:be:76:f7:1c:
                    ad:d1:b5:13:4b:bf:2f:dd:0f:d0:0c:16:cd:50:00:
                    f9:50:83:bf:d0:d9:e5:b0:6a:a6:a0:e3:6c:ef:68:
                    6a:c7:6b:78:24:a1:5a:06:ea:e4:29:61:e1:4c:57:
                    ee:c3:1b:10:2d:03:c0:50:22:f3:5c:70:f8:87:53:
                    97:c8:31:00:06:bb:ef:14:f3:98:76:55:6c:53:1b:
                    37:3d:6e:67:f8:91:72:7e:95:72:9e:8d:de:8d:d0:
                    3a:98:a6:af:cc:b8:ea:1d:1a:94:f7:ca:db:be:b1:
                    f1:1d:2a:34:41:48:86:85:f1:d0:ef:29:ac:dc:35:
                    46:02:30:00:dd:c8:3d:bc:df:0c:19:66:66:3d:b8:
                    b5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A9:20:BE:38:A9:63:0F:71:51:89:3E:B0:E4:B6:A4:D5:66:69:E3
            X509v3 Authority Key Identifier:
                keyid:D4:6C:43:59:92:6A:C7:F3:AC:F8:DC:52:0E:78:7A:36:62:71:38:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:03:de:57:d0:9e:7b:39:71:aa:d3:08:8a:57:7b:48:f1:04:
         60:d6:1a:65:39:3b:9e:22:0b:b5:d3:61:4b:71:ae:e2:74:0c:
         43:73:72:a3:5a:a8:c2:69:6f:09:b4:e5:33:de:2d:f5:c5:a4:
         4a:d8:ac:55:63:af:1c:6b:1a:d0:27:e9:ea:9e:33:ea:ba:bc:
         cb:92:9a:e2:c1:58:0b:ed:5c:24:ec:3c:47:99:6d:9c:9b:ce:
         80:04:3d:ad:2e:41:31:0c:75:3f:8c:79:c2:e4:27:07:96:af:
         2d:ba:1e:dd:b6:5d:cb:3c:6d:3b:72:02:a9:31:23:6c:f5:8d:
         74:4e:c0:3d:c9:c9:90:90:e0:76:97:f9:27:92:ff:4c:d2:c6:
         4c:cd:a9:ae:73:0c:18:b2:0b:a1:32:bd:47:4e:8e:a2:c6:50:
         ae:0e:83:9f:25:29:55:4b:29:95:95:82:2e:ee:cb:33:f7:49:
         7e:ff:0d:a8:28:c9:7d:26:11:8f:18:5e:75:d9:03:2a:48:00:
         cb:e8:27:53:5d:69:db:03:b4:8f:a0:45:1d:a3:00:6d:a1:a4:
         4d:46:2f:95:c7:34:00:fc:ff:6b:a6:72:d5:3b:a1:15:0e:7a:
         c6:e5:6f:b1:5a:23:12:af:67:6a:a4:d8:15:45:ef:8a:ee:02:
         e8:f9:b3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:33:04 2026 by rpki-client