Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File:                     _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier:          yomUHWgSxl/pMbM0DwSOZi/+gPz/H1rN7SxXhpDAz+w=
Subject key identifier:   97:78:8A:A9:B8:0C:D4:1B:ED:3D:C7:6C:67:98:66:FA:EB:1D:00:55
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer:       /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial:       01A124D44AFF510237B7451EE3116B5323C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number:          1736
Signing time:             Sat 10 Oct 2026 08:00:54 +0000
Manifest this update:     Sat 10 Oct 2026 08:00:54 +0000
Manifest next update:     Sun 11 Oct 2026 08:00:54 +0000
Files and hashes:         1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: OC0UhOG1VU7fEUOm/VkchiJ7zxDeztCMIto52m61OWg=)
                          2: pIzu0UPpsP8clP4GJvMQ5mOsgdU.roa (hash: cY4H2iigWEWrWAaGXnc1Tjbm637H9ISvb9VWaDHjJoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 08:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:d4:4a:ff:51:02:37:b7:45:1e:e3:11:6b:53:23:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
        Validity
            Not Before: Oct 10 08:00:54 2026 GMT
            Not After : Oct 11 08:00:54 2026 GMT
        Subject: CN=97788aa9b80cd41bed3dc76c679866faeb1d0055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9b:f2:25:b0:d7:a7:06:0a:df:5b:16:71:58:
                    e6:24:c2:fd:04:d8:8f:31:2c:87:d0:03:00:99:3a:
                    3d:62:9b:19:8e:25:75:4c:60:f0:97:cc:b9:a2:10:
                    84:b6:b5:6e:bb:ab:f7:34:a0:24:c0:e8:d5:18:66:
                    ec:b7:53:60:a4:7b:7b:b1:08:29:c3:3f:e3:bd:6e:
                    48:84:26:b6:ce:f9:a4:02:ce:f6:9b:00:b7:b4:0a:
                    85:28:27:31:dc:df:96:53:23:3c:b6:01:b9:97:6e:
                    40:51:1f:87:1e:23:ba:de:fc:49:4e:96:c7:bd:0c:
                    02:0d:de:bf:58:09:f1:23:d3:86:97:63:90:b9:24:
                    e6:81:0a:16:ea:bf:e1:e9:0d:1d:4b:cd:2d:d1:bc:
                    31:70:a5:af:4f:08:af:d6:e8:05:74:5c:c6:e3:8c:
                    07:23:e5:d7:b0:55:a8:8c:67:4c:43:83:f0:11:6c:
                    f5:83:b4:25:03:55:0c:df:42:e2:c8:47:2d:41:4b:
                    d7:66:50:62:60:e6:6a:f9:b1:c9:31:83:9b:4c:f9:
                    88:28:bb:b0:f7:f0:6c:c4:0d:b3:7c:1a:87:01:64:
                    6d:d9:43:91:5c:ac:02:f6:03:51:ae:4c:e2:f8:94:
                    90:18:7e:c4:34:37:1d:b3:50:35:9d:dc:82:8b:db:
                    f0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:78:8A:A9:B8:0C:D4:1B:ED:3D:C7:6C:67:98:66:FA:EB:1D:00:55
            X509v3 Authority Key Identifier:
                keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:96:34:77:5d:a7:51:fc:cf:aa:ac:6d:2b:e0:5f:e4:1e:ed:
         39:8c:de:43:19:ed:b2:c6:6a:8b:6a:7b:b0:55:dd:af:c2:e2:
         ec:cd:f2:96:ac:bc:30:ac:63:99:56:81:db:bf:ec:8c:8b:ed:
         9e:86:4b:c8:12:c8:9b:61:f1:e7:9c:d3:11:1e:aa:11:03:82:
         a3:8f:e8:85:a3:b0:1f:6d:eb:ab:23:ff:17:d2:b3:86:ae:55:
         f6:45:1e:8f:bb:88:bd:4f:84:0d:9c:2b:ed:57:3a:55:55:68:
         07:ea:17:b1:d3:6b:d7:75:f9:31:fb:74:b1:2f:2c:3e:d2:eb:
         fd:a5:ac:16:45:a8:4c:0f:4e:98:b1:bb:a8:7c:2f:9b:3b:25:
         4d:a5:29:6b:08:b0:b9:7e:ea:25:d0:27:e2:5b:ae:0a:60:12:
         d3:f7:48:b5:08:7c:0d:59:48:f5:2e:37:89:5c:2b:a5:91:15:
         79:0b:a4:89:34:05:c8:24:d8:7f:3c:a6:a9:d2:54:a1:a3:b2:
         54:65:ae:f0:4f:46:6e:ae:69:68:46:8d:28:60:b3:62:f2:42:
         0a:b5:57:fe:c0:01:fd:00:86:c8:99:f2:06:60:4c:34:50:a9:
         cd:55:b3:bd:b9:30:a6:ac:b2:b3:07:f7:a3:6f:b3:70:14:ab:
         41:a5:e7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:15:23 2026 by rpki-client