Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/1-iWddo-U-mgRz_tGMqnyg-XFbew.mft
File:                     1-iWddo-U-mgRz_tGMqnyg-XFbew.mft (raw, json)
Hash identifier:          yVDhIVK0bSvPgEvzvYGIKC5g8JJF3IiWjLkqELIUtGc=
Subject key identifier:   6F:4F:44:E1:5B:C2:33:08:B7:F8:97:68:BD:A1:BD:21:4B:41:2C:1A
Authority key identifier: FA:25:9D:76:8F:94:FA:68:11:CF:FB:46:32:A9:F2:83:E5:C5:6D:EC
Certificate issuer:       /CN=fa259d768f94fa6811cffb4632a9f283e5c56dec
Certificate serial:       01A0412AA3BDEB246EE874E4A85A1FA87366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-iWddo-U-mgRz_tGMqnyg-XFbew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/1-iWddo-U-mgRz_tGMqnyg-XFbew.mft
Manifest number:          9B
Signing time:             Thu 27 Aug 2026 03:01:48 +0000
Manifest this update:     Thu 27 Aug 2026 03:01:48 +0000
Manifest next update:     Fri 28 Aug 2026 03:01:48 +0000
Files and hashes:         1: 1-iWddo-U-mgRz_tGMqnyg-XFbew.crl (hash: w2oHoKhfa+7EuZaRyhQWkSfB4xV+CHm9kRqwe5b7aJw=)
                          2: PIdCT1iFW71-MypDuuZD_NQFt8Y.roa (hash: 1IGjz+6ssiGptikc0MO0PlplaonVncURcXvFmSAOdYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/1-iWddo-U-mgRz_tGMqnyg-XFbew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/1-iWddo-U-mgRz_tGMqnyg-XFbew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-iWddo-U-mgRz_tGMqnyg-XFbew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:2a:a3:bd:eb:24:6e:e8:74:e4:a8:5a:1f:a8:73:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa259d768f94fa6811cffb4632a9f283e5c56dec
        Validity
            Not Before: Aug 27 03:01:48 2026 GMT
            Not After : Aug 28 03:01:48 2026 GMT
        Subject: CN=6f4f44e15bc23308b7f89768bda1bd214b412c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:95:9a:e9:a3:70:d6:9b:c7:46:03:8f:bd:c2:
                    c8:83:26:c4:6c:fa:d2:69:c4:fa:bc:8f:34:b6:84:
                    29:46:83:1d:28:8c:f2:90:9b:c9:cb:2f:f5:3b:0c:
                    9a:1c:ba:26:62:b0:5e:cf:17:5c:0a:e7:5a:eb:5f:
                    75:29:63:9e:67:97:40:d3:de:f5:38:17:d5:4b:03:
                    81:f6:5f:96:3a:48:6c:ff:ac:07:78:69:ad:4a:d6:
                    32:e9:c0:90:db:75:95:c6:d6:4d:ab:ac:b8:23:b0:
                    50:d1:a1:49:68:18:8e:fa:04:47:2a:86:00:5a:3c:
                    f3:5d:fc:f6:66:38:42:e9:f9:53:93:f5:32:ad:b0:
                    d2:74:4c:a2:22:80:f4:2a:2d:fd:f9:70:a9:fd:e9:
                    c2:7f:43:ef:f9:d4:6b:2f:67:0d:5d:70:65:d6:d1:
                    17:ce:14:90:bd:5e:1f:9b:e3:9c:fb:f1:58:b4:e9:
                    0e:e4:28:4b:09:c5:b1:02:08:02:4f:11:c3:fd:2d:
                    52:d8:ee:25:99:dd:3b:7e:c2:33:ba:42:1c:9c:3d:
                    48:a7:83:d8:2d:c1:66:8a:cd:ca:50:23:9f:be:f7:
                    56:55:22:37:28:51:70:7d:00:47:62:f1:19:55:f3:
                    85:32:07:40:74:9a:c9:62:a5:85:63:41:ea:95:cc:
                    94:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4F:44:E1:5B:C2:33:08:B7:F8:97:68:BD:A1:BD:21:4B:41:2C:1A
            X509v3 Authority Key Identifier:
                keyid:FA:25:9D:76:8F:94:FA:68:11:CF:FB:46:32:A9:F2:83:E5:C5:6D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWddo-U-mgRz_tGMqnyg-XFbew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/1-iWddo-U-mgRz_tGMqnyg-XFbew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/1-iWddo-U-mgRz_tGMqnyg-XFbew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:22:f3:13:0a:1c:83:81:fd:18:57:7e:11:b0:72:66:ef:47:
         3b:9e:ff:ee:1f:6e:a4:81:60:f8:b0:5e:20:f4:72:12:bb:32:
         43:56:97:26:71:0d:ab:45:63:d8:3e:2b:64:10:d6:c8:0a:0e:
         d0:d0:b2:6a:68:8a:8a:aa:b9:56:9a:d3:23:cf:29:61:da:9c:
         78:cf:40:b7:1b:05:31:c9:dc:90:68:b3:bf:77:ad:2a:40:d9:
         31:2a:a0:91:c2:3d:b6:44:34:e6:fd:c2:9d:b3:e1:2c:08:b8:
         a4:9a:bd:3f:37:a0:05:44:af:3d:73:62:fe:17:fc:bc:ae:4e:
         29:2a:7a:c0:07:c9:31:e4:8e:f3:57:ee:e3:3e:ed:25:b0:03:
         a1:51:a7:e3:c2:bd:05:8e:2b:16:a6:5e:4f:7f:f6:0a:32:ea:
         f8:95:47:8a:30:84:23:d8:88:18:70:97:c9:2c:2e:d7:ec:42:
         d1:ad:78:64:cc:43:de:db:f4:5f:bd:0a:23:ee:c2:3f:9c:61:
         ae:25:57:f4:90:ef:d4:15:99:e2:70:08:27:50:d5:ff:9a:2a:
         15:f6:e1:0c:20:d8:8c:58:86:fa:de:ca:60:36:64:31:64:3a:
         56:6d:31:83:7a:59:03:a2:67:cd:2e:89:f3:0d:b4:54:67:d7:
         1b:92:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:55:53 2026 by rpki-client