Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
File:                     97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft (raw, json)
Hash identifier:          0NRttwJ0Rq3E9fLE2r9iizPXx7ll7wCzV7YnB7khYc8=
Subject key identifier:   4B:94:9D:30:95:F3:C5:20:E3:5F:A3:17:28:92:73:24:7A:7C:C5:BF
Authority key identifier: F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
Certificate issuer:       /CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Certificate serial:       01A13FA7D2FE8313903C92B5E1D17BB8A245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
Manifest number:          1A37
Signing time:             Thu 15 Oct 2026 13:02:04 +0000
Manifest this update:     Thu 15 Oct 2026 13:02:04 +0000
Manifest next update:     Fri 16 Oct 2026 13:02:04 +0000
Files and hashes:         1: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl (hash: MeqJ24Nf7nPS9HT7nG/aGPWYcIGPsdDEEsfqIXp894g=)
                          2: iEGrmEBr_XYHG10FFaz1pHlElzU.roa (hash: Cm2PlN0NZyKWye3mjv4O21ycHAo7BA8ZMRSr0N03Zos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:d2:fe:83:13:90:3c:92:b5:e1:d1:7b:b8:a2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b7c2e8453ed4c0929c7504baf046043159d105
        Validity
            Not Before: Oct 15 13:02:04 2026 GMT
            Not After : Oct 16 13:02:04 2026 GMT
        Subject: CN=4b949d3095f3c520e35fa317289273247a7cc5bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:48:36:dc:f7:8d:c1:46:b6:e4:69:16:44:98:
                    18:8d:83:60:17:03:0e:e4:24:10:54:90:17:22:a4:
                    51:36:a3:0f:fc:97:cd:99:ad:dc:c6:82:ab:9c:4c:
                    0b:f1:c3:2e:3e:0d:34:fa:74:4e:9e:d1:d7:b4:16:
                    a0:ee:3f:c5:40:50:3b:14:f3:4b:5c:f1:b9:6a:74:
                    33:5e:fe:c9:ca:cb:5c:e2:59:24:c9:cf:ca:03:06:
                    d2:20:6f:24:61:20:e1:76:78:f6:63:27:04:c2:0f:
                    35:7f:40:2e:5f:c1:95:18:03:81:69:44:02:8f:6c:
                    f7:48:95:e0:36:89:af:bf:fb:5c:28:cb:2a:1c:b8:
                    e7:31:f0:25:80:b8:4c:4d:1a:7d:0a:4b:ec:bb:0b:
                    03:87:e2:09:be:9c:eb:3e:9b:55:64:86:72:8d:99:
                    d4:11:b4:d0:1c:76:3f:9c:0f:e4:3a:eb:d4:79:49:
                    ae:c2:fd:c2:b1:49:a1:01:7c:00:d0:9d:ec:d9:88:
                    32:f2:fd:b9:b3:76:2f:56:3f:98:80:41:3d:ce:e1:
                    6e:e4:04:eb:f5:8e:d3:0d:86:82:db:2b:3c:7f:63:
                    2c:9a:58:b7:aa:bd:0c:ff:4d:e4:77:48:ad:ab:44:
                    01:53:45:a0:19:a6:6b:e6:13:f4:26:4a:31:47:2b:
                    35:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:94:9D:30:95:F3:C5:20:E3:5F:A3:17:28:92:73:24:7A:7C:C5:BF
            X509v3 Authority Key Identifier:
                keyid:F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:ae:f4:e1:e6:6b:70:cf:3e:ff:62:64:41:95:f3:30:43:4a:
         74:60:aa:c0:0a:86:ee:a6:38:07:49:3e:51:66:30:f7:c2:e9:
         27:c3:8b:a7:48:5d:5c:ab:85:3f:8c:c6:50:02:95:81:34:41:
         e3:de:a5:0f:68:b7:6b:06:e0:a6:31:1d:1e:4e:57:2f:7d:16:
         d0:c6:ce:9c:f7:90:c4:3c:2b:a1:6a:23:d2:ac:8d:3b:42:c7:
         3e:7b:a9:51:68:28:08:8f:90:48:5a:81:ce:9a:e3:05:1a:0c:
         0e:82:89:28:99:02:23:2c:fd:30:61:84:96:b2:7b:13:a1:42:
         93:c7:60:ec:f4:32:06:43:1d:f5:60:8c:19:aa:ff:63:ed:95:
         b6:d2:4c:06:cb:1f:08:d7:14:f9:ef:d7:21:c8:50:ff:51:1b:
         4a:52:ca:cf:6e:d8:8f:1a:07:48:4c:25:5a:91:84:eb:c3:81:
         f6:5b:c8:d2:ae:3b:d0:2e:7e:c7:30:c1:69:d2:34:0e:34:f1:
         a6:b1:d5:02:be:96:d0:59:32:72:06:aa:3f:d1:f9:68:11:ff:
         25:ae:9d:c6:f6:a3:e0:82:48:2a:62:98:eb:e6:19:75:15:f4:
         30:21:59:c9:94:62:a8:c6:79:48:90:6b:09:bb:74:b5:31:4c:
         dc:ea:2e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:07:21 2026 by rpki-client