Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File:                     1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier:          cGYkvxowPInj8N+gMgjffcDfOWVDYi5ynqqr3EeELMc=
Subject key identifier:   7B:B9:7E:A2:E0:DF:7A:1A:68:6A:E2:71:CC:49:EE:F3:10:2C:FB:58
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer:       /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial:       01A13FA7D2842AD3D4BFC3E8B86F5CFD3986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number:          0EFE
Signing time:             Thu 15 Oct 2026 13:02:05 +0000
Manifest this update:     Thu 15 Oct 2026 13:02:05 +0000
Manifest next update:     Fri 16 Oct 2026 13:02:05 +0000
Files and hashes:         1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: wMp/axd5crvGvsrfq8U9LGio5A4dFKpmqTwSe+gHvLk=)
                          2: 3hEZWyItuy9dwAtzmZ-AFWLhT5w.roa (hash: L+BYsmG/Ibo7acCTPtDZVtgHekYwJ5+kmxxZnt4e2i8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:d2:84:2a:d3:d4:bf:c3:e8:b8:6f:5c:fd:39:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
        Validity
            Not Before: Oct 15 13:02:05 2026 GMT
            Not After : Oct 16 13:02:05 2026 GMT
        Subject: CN=7bb97ea2e0df7a1a686ae271cc49eef3102cfb58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:16:bf:8c:07:ea:00:74:30:75:ad:98:26:
                    dc:28:ea:23:e4:9e:86:64:04:73:1f:1e:7b:e0:19:
                    51:7b:aa:e7:49:10:36:c2:af:5c:2b:a7:5e:a8:ba:
                    cb:c4:25:e8:b3:86:8f:ca:69:0f:5b:b2:de:d2:94:
                    db:fa:31:15:38:20:2f:59:53:5a:cd:60:21:32:af:
                    3a:71:39:c2:1b:5c:13:11:80:31:5e:bc:f9:1e:db:
                    7a:a0:fa:79:c5:ea:08:a0:67:ac:ba:4c:53:06:ba:
                    00:b7:b9:81:cc:a4:8a:af:41:99:86:58:89:5a:5e:
                    44:a3:85:ae:8c:58:15:5c:84:c2:d0:43:fc:83:a8:
                    cf:31:50:6b:d3:27:0e:6b:17:60:52:4e:44:3a:77:
                    c8:5e:79:3a:b2:6c:4d:83:20:62:d1:82:40:90:38:
                    90:f1:d4:ee:6c:df:f9:01:38:6e:36:03:a1:7c:50:
                    13:37:a1:fb:90:ce:b7:4a:28:dd:a2:fe:83:22:f8:
                    09:fe:8b:2a:bb:b0:e2:33:88:ad:89:cb:8a:9d:a1:
                    7f:17:6d:f3:f0:6b:9a:eb:a9:b7:c3:ab:ea:6f:53:
                    35:93:c6:fa:ed:b6:fd:33:ec:bc:d8:5a:1d:91:a9:
                    ed:04:64:11:4d:5c:e3:bf:da:cd:22:6b:2b:a7:d9:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B9:7E:A2:E0:DF:7A:1A:68:6A:E2:71:CC:49:EE:F3:10:2C:FB:58
            X509v3 Authority Key Identifier:
                keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:16:75:a0:6a:ac:1f:4f:6f:de:3a:f7:e1:b7:78:19:5e:79:
         1c:42:c4:0c:99:74:2b:5b:87:4b:de:2e:4f:c8:6f:83:35:72:
         58:15:1f:17:7e:d1:08:31:fe:08:d4:cb:20:ed:62:ab:09:42:
         62:68:e2:2f:a6:3c:9d:13:1c:33:ad:3a:fb:67:12:6c:ef:52:
         f5:dd:ec:6c:4f:ab:4b:9a:f0:a6:17:45:62:d0:76:07:3b:a9:
         e4:b5:e9:39:4f:eb:fe:99:36:90:5f:f0:d0:e6:0c:ab:8d:87:
         68:a0:04:fc:79:7e:54:00:0f:cc:ff:67:9a:33:70:c2:6e:72:
         93:ec:af:0c:bc:0e:01:b2:47:21:e6:5e:f4:b8:5c:fc:95:1c:
         35:ee:6e:cb:5e:fe:9d:b6:66:80:ec:b7:2b:58:21:4b:45:b5:
         a7:d8:59:2f:4f:e4:9a:dc:6c:7b:09:ee:8d:a1:8d:66:e1:41:
         69:dc:0e:8b:05:f3:9d:d6:e8:80:08:7a:f4:2c:2d:76:54:a4:
         8c:96:25:2d:c5:72:29:24:9b:c1:c7:59:92:e0:db:e5:af:c6:
         15:7c:4f:6c:62:0b:d9:64:2a:b1:fc:2f:9f:f5:0c:c5:52:4e:
         1a:ed:d4:6d:99:d5:b1:72:a4:18:75:48:8f:38:14:5d:a4:2f:
         51:b8:42:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:26:41 2026 by rpki-client