Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File:                     1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier:          8wZTlms9Vf+hs9Ih+dRThGtXVmbDebi3I6JyOyipthU=
Subject key identifier:   68:61:DE:B6:5A:63:C5:E6:ED:F7:E7:E2:9E:84:0A:B9:E3:DB:C8:46
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer:       /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial:       01A13FA78E821808D8529166D4F46514EDD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number:          0B0B
Signing time:             Thu 15 Oct 2026 13:01:47 +0000
Manifest this update:     Thu 15 Oct 2026 13:01:47 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:47 +0000
Files and hashes:         1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: tiCWlDq6g17j7c/7Lo2uOOd95QAQb4E1NeocUF7YBxo=)
                          2: zsQtQXRIMfmAATwnDwSYChB6X74.roa (hash: Usub4GZLrzPgjoxI/zygWmH+Aj3bFEudCK+rN9RJJeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:8e:82:18:08:d8:52:91:66:d4:f4:65:14:ed:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
        Validity
            Not Before: Oct 15 13:01:47 2026 GMT
            Not After : Oct 16 13:01:47 2026 GMT
        Subject: CN=6861deb65a63c5e6edf7e7e29e840ab9e3dbc846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:e1:fb:3d:af:a7:49:8a:05:5b:9b:53:3e:
                    e4:19:04:9b:8b:7a:5a:fc:68:c3:e7:9f:6a:e6:d9:
                    1a:f2:31:d7:87:06:1a:6b:bd:da:d7:20:d5:7f:ee:
                    bd:ae:2c:70:4d:49:c5:b1:78:12:fa:40:dd:37:c9:
                    3a:fc:4c:4a:10:57:33:68:3e:59:af:14:bd:f7:3e:
                    3c:55:75:c5:71:39:1e:ba:12:59:a6:81:dc:05:3c:
                    9a:00:e0:0c:26:3e:d3:86:18:a6:e4:c0:cb:45:64:
                    08:a3:a3:f9:6d:f2:20:7d:88:b0:33:0c:7a:41:c0:
                    ab:db:77:9c:fa:f4:c7:5b:05:2c:08:c9:83:2f:bb:
                    31:5b:da:4a:28:74:1d:cf:9e:5c:de:66:92:76:a5:
                    0c:63:af:80:c3:6c:11:02:65:e2:44:61:f7:74:12:
                    16:0a:aa:b4:75:26:d1:ff:8a:4c:e1:56:e1:4f:ca:
                    eb:ae:01:a9:f6:ed:b2:87:26:9a:e9:15:60:6b:3f:
                    de:72:96:15:10:4c:4e:be:d8:74:9a:67:95:2b:40:
                    7f:f7:aa:03:97:23:2e:3b:8e:d2:d0:bf:8b:55:2e:
                    25:38:dd:14:ab:15:c3:7e:d3:3e:81:43:8e:0b:f7:
                    35:7c:ec:4b:26:44:dd:f0:f3:68:ec:39:b3:3b:cd:
                    a8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:61:DE:B6:5A:63:C5:E6:ED:F7:E7:E2:9E:84:0A:B9:E3:DB:C8:46
            X509v3 Authority Key Identifier:
                keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b4:86:8c:cf:f5:90:3d:03:11:38:69:32:1a:51:d3:7a:13:
         c9:ac:c0:6a:f8:18:ea:7c:54:63:23:97:dc:95:e8:ef:11:75:
         fc:f0:77:c1:15:52:68:50:c7:15:7b:35:1e:a8:74:46:ca:84:
         2e:05:63:18:89:5a:b8:92:fa:a0:6f:7f:7d:b4:e7:57:7f:d0:
         d6:97:f5:75:f4:4a:4c:01:72:e7:c6:0d:99:b3:b4:b6:ae:5e:
         08:02:ec:a1:2f:98:0e:89:da:77:10:1a:5d:e7:76:7f:72:b7:
         32:68:08:84:2b:3b:4e:db:04:0a:c5:df:9b:f4:32:e1:3f:b0:
         29:1b:2b:13:37:a9:e1:c6:e2:58:38:36:bf:86:fe:6a:26:2c:
         84:2f:fb:5b:8a:fd:9f:3e:e1:f9:e5:4e:64:6f:f5:3a:ea:ed:
         62:58:b7:5b:1b:2b:e0:59:d2:94:54:36:6a:14:85:97:ad:c5:
         24:fc:34:72:82:96:eb:f5:30:bb:33:0d:76:37:09:c1:66:49:
         e4:d1:bf:ad:fc:fc:09:56:7a:b0:4d:8a:36:76:71:01:8a:10:
         0f:1f:1b:da:b2:ad:cd:6e:ca:7f:af:89:0f:47:8f:8e:0c:bb:
         60:37:e0:4a:8b:47:2f:d1:8e:6a:8d:85:0b:3b:b4:32:0e:07:
         c6:bf:47:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:21:48 2026 by rpki-client