Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File:                     1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier:          EqDaddZmzXoMKbShkwVZrWivh+asGECUzZ5PqiM9oNw=
Subject key identifier:   11:CD:00:5F:99:1A:3A:EE:E3:D2:AD:3B:0C:CA:47:E0:92:1B:24:17
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer:       /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial:       01A11C75CB33B2627E91C750AC823351467F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number:          081A
Signing time:             Thu 08 Oct 2026 17:00:44 +0000
Manifest this update:     Thu 08 Oct 2026 17:00:44 +0000
Manifest next update:     Fri 09 Oct 2026 17:00:44 +0000
Files and hashes:         1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: JRxWW4DErB5MiJzlly9y7RUQ3tW9JL3iNHMSzh03UIo=)
                          2: tkycn5xiTigCQfGPa-xW18TGNfk.roa (hash: 4OjRszRSxwJd25PZFySHlvrHFTMBwczdyRtjAmquBAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 14:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1c:75:cb:33:b2:62:7e:91:c7:50:ac:82:33:51:46:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
        Validity
            Not Before: Oct  8 17:00:44 2026 GMT
            Not After : Oct  9 17:00:44 2026 GMT
        Subject: CN=11cd005f991a3aeee3d2ad3b0cca47e0921b2417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:59:b0:06:b2:c5:70:b8:fe:26:41:d9:22:8c:
                    3d:e7:63:f6:49:fb:17:a2:e6:2b:49:c8:6a:d8:b2:
                    7e:54:72:83:f2:5c:3e:11:c9:01:79:a1:16:67:1f:
                    a0:ab:cc:90:6c:7d:f5:03:c3:14:18:c8:40:c4:77:
                    9f:ef:98:3b:03:a2:e2:e6:e3:6d:e9:f4:13:c7:cb:
                    6e:cc:cf:23:4b:d3:a4:0c:54:75:fc:12:36:96:2a:
                    19:a7:af:f9:6b:90:ee:c6:be:77:46:eb:e7:33:fa:
                    45:c7:6b:08:f7:81:5a:be:17:94:15:d1:08:49:6b:
                    65:13:8f:b5:57:45:17:c8:76:8d:48:ed:b0:8c:b7:
                    21:60:5c:e4:a0:b6:cc:4c:7a:ba:6b:1b:71:ac:60:
                    2e:c4:cd:53:33:87:c1:8b:a2:dc:64:f0:34:40:db:
                    5d:71:2e:47:01:c7:60:ff:cf:bc:2c:63:2f:58:7c:
                    16:dc:a7:a1:73:ff:88:f2:75:6f:b1:ec:5d:92:01:
                    09:fa:b2:77:7a:d5:1c:4b:a9:88:8e:39:01:fd:11:
                    f8:4e:09:39:3d:2d:c7:21:c4:4a:6b:88:10:8c:4c:
                    26:a8:63:49:d2:60:94:5a:c8:bf:4a:b8:55:95:9b:
                    c1:ea:f5:06:06:6e:e2:37:80:e2:a0:ce:66:39:72:
                    0c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CD:00:5F:99:1A:3A:EE:E3:D2:AD:3B:0C:CA:47:E0:92:1B:24:17
            X509v3 Authority Key Identifier:
                keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:0a:59:fa:04:c5:b7:8f:40:51:1b:c7:b9:9c:a3:fb:8d:d0:
         95:9e:03:39:ec:20:1d:47:27:98:50:9a:e6:53:85:4f:cc:42:
         1c:73:85:e8:13:7a:22:d2:a3:35:86:bb:e2:24:e2:b5:17:d6:
         5f:83:d5:4a:e0:af:66:4f:e1:9e:7e:5e:77:a7:be:d8:e4:9b:
         11:2a:9d:c5:aa:c6:38:bb:90:43:d4:80:56:f1:11:ba:5c:75:
         d8:03:bd:72:d2:94:fe:1f:ad:5b:a9:23:2a:c6:48:b3:03:66:
         f5:80:f5:1a:40:60:2c:37:a7:fa:da:3a:95:3c:88:e8:46:bc:
         61:d7:7d:21:6e:96:14:76:f3:03:1b:27:51:0d:98:96:0d:59:
         c6:86:79:29:c3:d2:6d:1c:45:5e:52:4c:0f:d3:11:ea:2a:da:
         67:01:b8:8b:8e:19:4d:83:97:9d:a9:61:99:1d:4d:12:09:4a:
         cc:f5:62:08:59:d3:9f:94:be:eb:ac:de:c7:38:03:05:41:b6:
         61:3a:f8:60:1f:bb:73:5f:5a:b4:f0:ce:82:28:d4:fb:e7:e5:
         94:11:f8:46:5b:fe:5e:ab:17:4e:7f:bc:5e:fb:e6:03:3d:80:
         ac:5a:cd:8e:ba:a3:41:e0:f0:ee:94:c8:f1:41:09:e6:12:e9:
         df:45:f5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 22:29:50 2026 by rpki-client