Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
File:                     1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json)
Hash identifier:          EwBqXtmrhu1FYAIvlr+MClzMdcwa/RO+8VVmMyb7xJM=
Subject key identifier:   63:90:59:2F:E8:13:FD:0E:58:8C:5D:12:94:54:B0:58:15:D0:A5:F8
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Certificate issuer:       /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial:       01A17A0421D33C367B6BBB5F530E7B104031
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
Manifest number:          1B04
Signing time:             Mon 26 Oct 2026 21:00:53 +0000
Manifest this update:     Mon 26 Oct 2026 21:00:53 +0000
Manifest next update:     Tue 27 Oct 2026 21:00:53 +0000
Files and hashes:         1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: vyK4o67vg7L89fSfArU9iaIEBfr6FMOEyfiIqkhpnS4=)
                          2: 78k7N29pgqqBt_7SArx8W7gvbtY.roa (hash: HchXuuENBfMJOEemaKoErz+AVozHGh2qeMU61xXBJBo=)
                          3: 9DQTs2wKqScndspLuFL690S9C10.roa (hash: srpl4qi7sPv0BZnzMRCi4rqUA6OuywpyeD8PiEQVVPo=)
                          4: nQgCkrjx2Vuyv6XU6Z1X_xyDR2c.roa (hash: KrRY9bn7xQ6+HYYd/c9njJzJQr8DpPXzGZe5ZanhC8s=)
                          5: r3EiLYHevbO0Th1WEvhzW1gW05s.roa (hash: 003jzFHjDPB1TeNPUDTQBfy40dYt4zSE44vlLncCqQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7a:04:21:d3:3c:36:7b:6b:bb:5f:53:0e:7b:10:40:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
        Validity
            Not Before: Oct 26 21:00:53 2026 GMT
            Not After : Oct 27 21:00:53 2026 GMT
        Subject: CN=6390592fe813fd0e588c5d129454b05815d0a5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:71:c7:11:d7:ed:b9:ed:0a:6e:16:95:5e:fe:
                    e8:53:1c:77:7a:e0:10:aa:9b:28:4e:e8:b2:2c:1e:
                    4b:63:f9:70:d8:d1:0a:49:62:5c:66:72:20:4c:50:
                    a0:e7:60:8a:08:61:15:aa:22:5f:ab:d9:9c:47:1a:
                    29:cb:02:a2:7d:0f:4a:9b:41:bf:28:8f:55:25:db:
                    b3:9f:2e:20:86:15:fe:9c:7b:2c:39:ee:e7:8f:5a:
                    a4:4f:7a:0d:f6:3a:2b:a5:78:1b:57:16:8b:a5:76:
                    fe:3b:7d:fe:4a:89:ec:4b:41:40:3a:e1:15:30:09:
                    51:5c:d9:67:1b:ff:d6:32:5f:50:71:06:54:0f:ec:
                    ac:87:98:8f:49:f4:a0:a2:34:10:6b:4e:d7:b8:90:
                    c6:fb:84:53:77:89:34:d5:df:ce:58:0a:7f:8b:1c:
                    99:d2:1a:71:cc:6c:6c:17:cf:dc:4a:78:c6:84:47:
                    87:68:6e:12:16:ce:18:8a:70:39:51:b1:be:02:c4:
                    f2:9f:c2:70:c1:d9:cf:d1:18:ad:51:7f:0c:2b:08:
                    eb:b8:1e:c4:54:eb:d5:f5:77:a4:e5:21:ea:a8:5a:
                    d8:1c:c4:3a:dd:45:13:25:05:77:06:de:a2:3f:0e:
                    49:be:b8:ee:89:f1:f1:9b:78:aa:88:c7:b5:8d:d2:
                    ea:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:90:59:2F:E8:13:FD:0E:58:8C:5D:12:94:54:B0:58:15:D0:A5:F8
            X509v3 Authority Key Identifier:
                keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e0:fe:60:2e:bb:00:d8:83:dd:29:f7:be:b4:aa:62:cc:b7:
         71:9b:2d:98:0f:75:96:1e:6e:57:db:9b:13:53:70:86:44:c1:
         80:80:50:d0:cf:e5:d3:2c:8f:9b:59:86:a1:e3:c6:ba:0a:cd:
         8b:a5:30:89:1b:5c:58:c0:f8:67:a9:bd:51:d1:a4:86:02:a7:
         76:29:2e:76:7a:0f:f4:16:57:73:8f:62:2a:2c:67:03:bf:67:
         cc:63:24:72:44:97:c4:c5:18:8d:f1:ca:a8:1b:1c:25:f3:d3:
         99:e3:f3:94:12:43:59:f1:13:36:ed:90:9e:80:65:a8:82:67:
         35:e6:67:f7:d4:47:48:a7:04:2b:4a:9c:ba:f3:85:2e:d1:54:
         2e:09:f2:8b:d2:50:26:01:35:2c:40:cb:19:10:c9:55:0e:51:
         74:02:e5:a2:ef:13:8c:e4:67:e1:c7:b9:4a:85:64:85:98:82:
         a3:b5:3c:34:d8:c3:76:e0:d0:71:08:f1:48:7e:db:f7:a9:05:
         28:b3:68:aa:8b:3f:4b:64:af:3b:a9:bc:bb:41:70:32:f3:16:
         68:e4:59:af:e0:06:3a:86:fd:c4:e7:94:8c:91:3e:f3:67:91:
         73:34:fc:bb:0b:a1:c2:53:cd:4c:2e:29:3e:3b:6b:d7:7e:b3:
         02:2f:d5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:22:00 2026 by rpki-client