Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File:                     1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier:          AMxnoPr8NDau8atvv6GrbteI2H4YRNTwwsKXe2kh9kU=
Subject key identifier:   3D:63:15:40:5A:73:A7:2E:2A:92:31:BE:7D:B6:5F:1B:9B:2A:4E:1B
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer:       /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial:       01A140F16C4B50A54774CF58A9B973702E78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number:          11F1
Signing time:             Thu 15 Oct 2026 19:02:05 +0000
Manifest this update:     Thu 15 Oct 2026 19:02:05 +0000
Manifest next update:     Fri 16 Oct 2026 19:02:05 +0000
Files and hashes:         1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: ACd9wkQgmC3WrEVqwIaHbT6Hqn3L+9Y0x0PlCkPKQN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:f1:6c:4b:50:a5:47:74:cf:58:a9:b9:73:70:2e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
        Validity
            Not Before: Oct 15 19:02:05 2026 GMT
            Not After : Oct 16 19:02:05 2026 GMT
        Subject: CN=3d6315405a73a72e2a9231be7db65f1b9b2a4e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:27:5b:15:37:ef:73:bf:b2:67:89:c6:1c:80:
                    1d:51:f6:93:3a:f4:4c:29:a9:f9:0a:25:de:d7:15:
                    63:f0:7b:e8:be:fe:ff:3e:9d:e0:48:a6:be:3d:ae:
                    a5:51:04:ec:ee:ae:6b:00:4a:3c:72:08:fc:19:44:
                    cb:37:b2:81:74:dc:e1:68:13:9b:77:34:23:06:85:
                    1a:88:aa:9b:06:a2:9f:ec:d1:9a:d1:fd:9d:dc:6e:
                    04:1c:55:86:35:96:c8:4f:d0:c9:95:b8:38:fe:45:
                    5e:d0:18:bc:bd:14:5d:79:c2:e4:dc:99:8b:0b:fc:
                    ca:8a:94:42:60:25:7f:09:71:e3:89:6b:bf:3e:32:
                    06:b0:11:b2:84:fc:aa:f5:52:28:21:36:05:13:68:
                    ec:a3:05:b1:1e:31:d4:2c:c2:d5:a7:76:b8:66:42:
                    16:ca:4e:e8:cd:6f:ea:db:c7:9a:53:9f:44:e1:5c:
                    3e:15:3d:2f:9c:d6:18:14:59:2f:24:8b:38:db:61:
                    4d:8f:89:3a:42:8e:f3:d5:13:7e:bd:7e:e2:a1:12:
                    88:33:c4:6b:e1:ef:95:0b:36:e0:39:4a:56:fa:1b:
                    c6:9e:0c:b9:5f:b7:bf:1a:a3:ba:de:f6:07:63:20:
                    53:64:ea:6d:e6:6a:a6:11:7b:a2:c3:46:82:da:a8:
                    37:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:63:15:40:5A:73:A7:2E:2A:92:31:BE:7D:B6:5F:1B:9B:2A:4E:1B
            X509v3 Authority Key Identifier:
                keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:36:f4:dc:ec:61:23:3f:24:2e:dd:4d:1d:9c:f8:b2:f1:90:
         3e:96:aa:c1:f5:44:f4:d9:ac:26:cf:96:1d:42:10:41:8c:98:
         43:c5:30:ad:86:a9:28:87:1d:9c:7f:ea:5c:b0:fc:76:99:62:
         c6:25:9d:e5:6e:bc:52:80:e3:d8:2a:f1:44:d7:5f:45:88:3b:
         a6:5c:10:7b:ff:1b:b6:0f:dd:88:e2:50:9f:44:22:05:de:1e:
         ea:89:52:cd:6f:3c:64:63:8c:c3:7a:9f:18:54:27:b3:15:d9:
         73:fe:d8:1a:59:bc:60:b9:cf:48:21:cb:0c:e6:a0:8b:0f:85:
         0c:fc:76:f9:07:cc:6e:61:04:6c:53:dd:75:5b:3f:f6:b5:5e:
         37:5a:5a:6f:ac:f5:43:f7:38:b4:dc:5c:3d:09:1a:5d:6b:38:
         2c:77:d3:03:98:71:1c:f9:64:cc:01:76:6c:28:14:64:f4:b8:
         75:19:cd:2c:cc:fd:a0:71:8c:96:25:1f:f8:4e:0f:86:34:1d:
         f1:57:97:3d:13:be:b3:8f:47:28:93:e3:9d:ca:01:95:bb:77:
         2e:81:18:9c:aa:a6:d0:7b:b9:36:2e:2a:b0:02:46:22:ad:d8:
         40:bf:0e:7d:c5:98:15:fd:1c:f4:46:12:70:76:ea:9c:80:60:
         9f:7c:89:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:19:57 2026 by rpki-client