Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File:                     1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier:          8yrrcZI0tUQU+C5d/CK0fEcR0CNVgN+XGtGz0+ia2rE=
Subject key identifier:   7D:9F:02:1A:0E:E3:26:92:FD:91:19:3A:04:20:7D:36:B6:45:5E:23
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer:       /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial:       01A13FDE79FB7582BE513AC9E0F6978DBAD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number:          1AA6
Signing time:             Thu 15 Oct 2026 14:01:47 +0000
Manifest this update:     Thu 15 Oct 2026 14:01:47 +0000
Manifest next update:     Fri 16 Oct 2026 14:01:47 +0000
Files and hashes:         1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: DRrVPRRzAb9QQzrMUVzpXqerqKixGtmy70/N6+58ydE=)
                          2: qI3as0zKAc7W39Wxbww7lx8HfYM.roa (hash: ++oMXlJQHbbp5tvC0c4vNfS7KWMpom3TwhUaePwlH1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:de:79:fb:75:82:be:51:3a:c9:e0:f6:97:8d:ba:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
        Validity
            Not Before: Oct 15 14:01:47 2026 GMT
            Not After : Oct 16 14:01:47 2026 GMT
        Subject: CN=7d9f021a0ee32692fd91193a04207d36b6455e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a7:71:6d:e8:f7:8d:9d:e7:e2:34:82:d1:2f:
                    43:19:a4:4b:4a:cd:93:9b:26:7d:d4:c5:45:74:dd:
                    a7:33:cd:d5:c7:11:e6:21:67:dc:ac:3f:12:2c:e8:
                    d4:b6:32:00:a5:5b:42:b0:f0:75:38:f6:d1:6e:aa:
                    ef:72:c8:ee:fa:e9:cb:b0:38:c9:ef:5c:66:2a:c8:
                    41:88:37:68:db:44:89:48:22:9d:23:2f:58:56:13:
                    62:11:fd:af:a8:0a:23:eb:a5:07:63:7b:c2:a3:e8:
                    f3:05:07:d2:9c:ea:dc:28:20:9e:69:b8:d9:38:5c:
                    03:75:97:11:15:2c:6b:ca:f6:28:95:b3:68:21:25:
                    1b:e9:f0:48:16:60:7b:01:4b:e2:00:66:ac:67:29:
                    42:f0:fb:ad:bd:62:ac:f4:30:10:ed:cc:c1:bd:58:
                    7a:67:5d:1e:b7:43:78:5f:52:fa:3f:e6:61:25:a1:
                    25:41:64:f5:e6:ab:70:18:7c:24:ad:fa:ab:91:b7:
                    2b:24:7b:4c:3c:b7:73:50:b2:b1:fb:a9:20:b5:4a:
                    58:8a:05:1d:44:0d:e2:57:83:08:bf:04:c0:33:e1:
                    82:50:bf:84:88:de:af:5b:5c:6a:d7:06:14:bc:1a:
                    b7:1b:0d:38:b5:c7:ed:da:5a:56:fd:7f:05:48:09:
                    0e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9F:02:1A:0E:E3:26:92:FD:91:19:3A:04:20:7D:36:B6:45:5E:23
            X509v3 Authority Key Identifier:
                keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f5:0f:4d:ab:40:24:b8:b5:a1:7c:28:7e:5b:6b:4c:9b:15:
         be:95:48:d0:d7:76:fe:44:90:92:0d:03:78:88:63:9d:59:bf:
         73:e1:bb:41:09:22:f8:69:4e:64:66:e8:14:69:91:8f:8e:40:
         f3:c8:3e:9a:b7:c7:df:ac:a3:70:5c:e9:f9:48:fe:fa:c4:91:
         da:0a:a1:b8:5b:bd:67:e1:ce:ae:25:3c:f9:a0:fa:6c:76:53:
         b5:8a:ca:28:a5:cb:04:e3:cb:77:77:0a:d0:bb:c4:51:bf:51:
         b1:cc:fd:00:50:2a:38:6d:cf:aa:ee:80:10:36:ed:03:78:00:
         5f:84:76:93:07:92:5f:b5:8a:dd:ea:f5:e2:eb:0e:bb:04:a2:
         92:90:c4:bf:9a:e6:25:35:cd:32:8f:55:c2:34:7a:fe:9c:28:
         ff:03:01:83:5a:98:a7:19:be:60:47:13:69:38:ba:e4:6c:a7:
         af:a1:d2:54:9a:29:b2:ec:f2:d9:a7:a4:75:c9:54:89:9b:2b:
         e3:9c:c5:d5:70:59:bc:9e:15:6a:58:b7:6b:e0:7e:e1:48:75:
         b1:ed:9f:4b:dd:4f:ea:38:0c:a2:56:71:9f:3a:e5:7f:c4:b9:
         99:8e:f2:90:fe:ff:0c:35:d0:f2:16:5b:f4:a0:24:35:83:f9:
         e7:29:e0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:21:43 2026 by rpki-client