Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
File:                     1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft (raw, json)
Hash identifier:          u+mVEmKItHGzYyY+o3kSOHhaoymJcELRyQ+jQnNPYf0=
Subject key identifier:   A6:FD:67:47:F6:7E:77:7B:1B:F2:49:D0:E0:F4:15:C0:B4:33:2A:DA
Authority key identifier: F8:FA:B5:0B:D2:28:42:36:7F:32:C4:EA:6E:8D:FA:DE:01:5A:23:77
Certificate issuer:       /CN=f8fab50bd22842367f32c4ea6e8dfade015a2377
Certificate serial:       01A16A90BAF18FDD2C62DA5F96FC1FE7966F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
Manifest number:          0135
Signing time:             Fri 23 Oct 2026 21:00:32 +0000
Manifest this update:     Fri 23 Oct 2026 21:00:32 +0000
Manifest next update:     Sat 24 Oct 2026 21:00:32 +0000
Files and hashes:         1: 1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl (hash: CsJB/Wo8Cf4P+dYmQHvAQ0sxKhPRzMEGBTkwLtLZ8aM=)
                          2: CnE_z3AWCy97yGhKLvwPyqYQWVU.asa (hash: 57p5HzcV2YfmP6Dn9k2t+As/r0x2DJ4LF6ED4E0kk1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6a:90:ba:f1:8f:dd:2c:62:da:5f:96:fc:1f:e7:96:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8fab50bd22842367f32c4ea6e8dfade015a2377
        Validity
            Not Before: Oct 23 21:00:32 2026 GMT
            Not After : Oct 24 21:00:32 2026 GMT
        Subject: CN=a6fd6747f67e777b1bf249d0e0f415c0b4332ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:37:fd:1c:f7:52:ed:25:4a:bc:a3:ad:15:
                    5b:77:ee:03:64:ef:6f:2d:3e:08:f4:7d:a6:07:42:
                    96:83:a0:13:1d:eb:23:db:94:7b:81:3e:d1:d0:aa:
                    56:5e:7a:9a:71:f5:28:cc:29:9e:9a:29:75:61:77:
                    07:6c:c3:90:b9:88:9e:2f:aa:d1:cd:25:3d:94:24:
                    ab:ec:90:f2:fe:e9:53:b3:8f:f0:6b:70:c6:c2:cc:
                    78:ba:77:46:9f:48:39:5e:6c:77:c4:34:4f:f5:d3:
                    71:64:2c:63:a7:e9:1e:fd:e6:0b:e2:d2:1b:c6:c0:
                    33:e0:bf:09:de:2b:a4:92:da:c3:0e:29:cb:a6:8c:
                    72:05:28:01:58:95:be:04:03:42:e0:18:96:99:61:
                    6c:72:8f:1d:11:80:83:74:e0:8f:8d:eb:22:34:a6:
                    37:3a:e9:04:35:f2:fb:0b:a4:62:bb:4e:ca:0f:0a:
                    e7:0a:a3:7f:65:a6:eb:84:75:a4:61:ed:17:3e:c2:
                    e8:63:6f:85:d4:03:8f:89:bf:8c:f5:58:64:8f:ad:
                    e4:b1:d4:f7:26:83:ff:3e:19:d4:09:05:72:a1:b7:
                    8d:af:19:ed:ac:3d:05:40:84:9d:9b:ca:fc:f3:8c:
                    8b:4f:3d:a1:02:b7:33:de:44:23:b7:4d:4a:c1:da:
                    a1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FD:67:47:F6:7E:77:7B:1B:F2:49:D0:E0:F4:15:C0:B4:33:2A:DA
            X509v3 Authority Key Identifier:
                keyid:F8:FA:B5:0B:D2:28:42:36:7F:32:C4:EA:6E:8D:FA:DE:01:5A:23:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:46:d3:ea:ad:9e:1d:66:54:6b:ea:c1:65:70:a3:f9:6d:26:
         a4:54:bf:1d:85:a6:49:b1:7f:aa:72:75:43:e3:e9:c0:50:82:
         41:d9:06:d6:a4:15:3a:64:95:64:6a:7a:ae:4f:4e:b8:e4:31:
         82:b5:0e:56:a9:99:af:e4:ae:e6:86:8b:ab:13:94:07:ff:31:
         2a:9d:3f:56:58:28:fe:e3:c9:c6:62:3b:0b:18:8e:36:0a:b0:
         e8:d5:3a:fa:7d:04:38:90:85:66:fc:1a:15:6e:c9:c3:26:88:
         50:35:ea:8d:50:45:a4:b6:4f:8b:bd:2c:b6:d8:cb:e4:b8:64:
         9e:b6:b7:49:47:fb:8a:fb:ff:2f:7d:7d:f7:e3:a8:d7:50:8f:
         f8:3c:01:8a:f0:e6:41:48:9d:52:17:1a:de:07:72:47:34:10:
         8d:c7:dc:9e:83:18:3e:8f:8c:ba:fd:7f:7b:3a:87:80:95:7b:
         86:5e:68:1f:cb:05:03:d9:f2:e6:a0:ac:63:0d:68:af:2c:93:
         b6:be:dc:ad:74:79:71:2d:78:46:17:63:1d:65:72:81:0e:cc:
         e1:ae:7b:93:32:ab:8f:37:30:18:95:ff:9c:c3:6f:49:f9:4f:
         dc:e2:d1:02:6d:7e:0c:90:a4:a3:e6:ff:06:f6:6f:fa:7f:93:
         72:d2:1c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:59:57 2026 by rpki-client