Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
File:                     1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft (raw, json)
Hash identifier:          SkEHnP4KT07GswvoYySQjasj/bIFY2urIVP3BKF4zIA=
Subject key identifier:   17:7D:18:F1:1D:BE:0E:05:2B:2F:F0:80:14:60:CE:62:40:55:A2:BE
Authority key identifier: FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
Certificate issuer:       /CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Certificate serial:       01A13E94FBF39B4E96880A2777DDC8D6AA1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
Manifest number:          1AA6
Signing time:             Thu 15 Oct 2026 08:01:53 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:53 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:53 +0000
Files and hashes:         1: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl (hash: W1cSsA9G/5+JRVThZJ8Qqci1N10Uip1sz0poVE3Fq14=)
                          2: _mlWLWGEeY126ouf9N2RBXWxQWs.roa (hash: hRcT7FQAvX81ZtVwVTQnfnVplPzsGoXPbu1Og6gLElU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:fb:f3:9b:4e:96:88:0a:27:77:dd:c8:d6:aa:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
        Validity
            Not Before: Oct 15 08:01:53 2026 GMT
            Not After : Oct 16 08:01:53 2026 GMT
        Subject: CN=177d18f11dbe0e052b2ff0801460ce624055a2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:97:43:c0:43:b5:ca:d3:77:65:1d:0e:8b:
                    04:86:81:03:fa:db:4a:b6:36:40:a8:e8:57:ce:48:
                    e0:c6:4e:ff:d2:40:e6:bf:bc:b8:85:63:5a:5c:24:
                    9b:f9:54:30:8b:f4:82:e2:3a:44:9d:e2:bf:4a:04:
                    72:bc:f6:58:e6:44:c2:fe:34:51:54:08:05:35:27:
                    e4:53:64:9d:d5:01:17:d0:7e:5b:01:aa:ae:50:98:
                    25:d2:10:d7:32:cc:81:39:f7:4a:31:8e:3a:ef:48:
                    e7:77:aa:5e:8b:f4:72:64:65:01:97:dc:dc:e4:e3:
                    48:c6:c3:99:c4:28:00:27:96:ff:6f:1e:e4:f4:5a:
                    ec:9f:c4:1f:a5:4b:c3:b2:87:81:26:bf:87:f5:8d:
                    5f:cd:e0:83:85:1c:a2:09:ab:14:fe:52:42:d8:ab:
                    9c:da:24:8a:50:95:4f:c7:af:bc:77:99:47:a8:53:
                    e4:13:0c:dc:d0:25:22:cf:2e:b4:c1:a3:80:c3:03:
                    63:09:bb:5a:4e:51:f5:07:36:ff:4c:c2:ea:31:17:
                    fc:23:67:06:49:cd:48:00:07:46:f6:3b:68:f8:a2:
                    0d:b0:ba:eb:91:87:a6:36:17:6a:3a:49:70:ad:79:
                    d2:3f:f9:52:1c:a6:84:14:95:0c:43:24:4c:14:ab:
                    e2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7D:18:F1:1D:BE:0E:05:2B:2F:F0:80:14:60:CE:62:40:55:A2:BE
            X509v3 Authority Key Identifier:
                keyid:FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:27:66:fd:0f:cc:71:71:a4:79:d5:04:62:8c:89:07:17:de:
         48:63:aa:c0:3d:62:20:4f:ed:b1:e7:9b:dc:5b:77:f6:81:d8:
         0a:12:5d:4a:c2:a1:95:cf:f6:9f:d6:b1:e6:40:43:e8:13:f1:
         1f:65:ff:0d:6c:f5:70:56:4a:20:a5:a8:f8:09:57:8c:77:d2:
         4e:48:d6:05:c0:18:fc:d6:5a:f9:8a:c2:56:c9:d0:1e:02:73:
         40:2d:86:d8:ff:fd:f2:b7:a1:30:ff:56:14:ae:4e:40:c6:f9:
         b8:6e:76:ec:21:12:dd:bd:df:2a:44:d7:14:8f:fc:38:3e:1f:
         60:2f:51:01:58:12:4d:c9:01:4c:b2:01:94:98:9d:4e:de:c4:
         cd:43:fc:60:64:d6:42:73:c8:e6:f3:07:57:9e:33:62:16:cd:
         44:ad:57:53:19:45:a5:4d:8c:6a:80:23:39:0c:be:73:cd:e5:
         2e:ca:00:1d:76:83:30:3a:60:a6:02:1a:51:35:1e:be:ff:d2:
         a7:66:c5:1d:cf:31:8f:4d:12:3d:29:76:dd:ef:14:21:1f:bd:
         ce:a8:5f:48:1d:be:d7:16:39:37:6f:0c:29:56:ad:35:73:be:
         a9:e6:7e:bf:ab:ac:be:0d:d0:c3:26:b6:f6:70:9d:fa:5f:8d:
         ca:a4:ca:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:57 2026 by rpki-client