Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft
File:                     1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft (raw, json)
Hash identifier:          rngnE4GQ/yNfjO9GWU0zfx5paJ6oFWag5r4eKuyAVOs=
Subject key identifier:   4B:B7:7C:E7:47:15:3B:6F:8A:EF:1D:45:22:D3:A5:EE:8C:40:D5:74
Authority key identifier: FA:BF:88:D2:A1:E9:4A:C1:DD:30:63:C4:73:30:BB:AD:75:F6:51:35
Certificate issuer:       /CN=fabf88d2a1e94ac1dd3063c47330bbad75f65135
Certificate serial:       01A08A8CEB4DEDB19FE6BF50E1301D708340
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-r-I0qHpSsHdMGPEczC7rXX2UTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft
Manifest number:          C1
Signing time:             Thu 10 Sep 2026 09:01:26 +0000
Manifest this update:     Thu 10 Sep 2026 09:01:26 +0000
Manifest next update:     Fri 11 Sep 2026 09:01:26 +0000
Files and hashes:         1: 1-r-I0qHpSsHdMGPEczC7rXX2UTU.crl (hash: LENbK0QG76a0M/KTvxqSboHgldk8p2IsrmtNM7Bqomc=)
                          2: e-vVrJZ-wUMzKbd5YAfmA9x0qgQ.roa (hash: BA/0hbuhvoStHQX1fKvbqzVATh/m+qBTaz7v7V7bT6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-r-I0qHpSsHdMGPEczC7rXX2UTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8c:eb:4d:ed:b1:9f:e6:bf:50:e1:30:1d:70:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fabf88d2a1e94ac1dd3063c47330bbad75f65135
        Validity
            Not Before: Sep 10 09:01:26 2026 GMT
            Not After : Sep 11 09:01:26 2026 GMT
        Subject: CN=4bb77ce747153b6f8aef1d4522d3a5ee8c40d574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:88:41:be:6a:7e:bc:44:36:9d:d3:f1:5a:
                    1b:08:eb:79:56:89:d9:9e:e7:d9:55:16:07:d8:63:
                    a2:d7:fd:92:41:ca:f7:5e:d9:ec:63:09:4c:16:98:
                    bf:17:74:32:d3:35:36:9a:ba:44:2d:70:a9:b3:22:
                    b4:98:35:6c:2c:47:8b:b9:8b:1a:5f:fd:20:59:da:
                    30:d5:b9:01:8e:a2:4f:e0:9a:9b:1c:20:87:45:d8:
                    c6:ef:3d:ab:65:c9:56:d7:dd:55:60:ed:89:db:70:
                    37:f4:7b:a8:e4:0e:86:a1:82:18:07:05:1f:fa:c4:
                    be:cd:b3:08:2a:b2:d2:46:b1:85:06:25:d2:2a:94:
                    c0:e3:fa:fc:92:26:56:35:a9:3f:63:da:9d:2c:e9:
                    83:ea:5e:15:2a:9e:b0:35:b4:bf:c6:3c:5a:6a:da:
                    f1:60:f1:e0:f3:ff:f0:00:4e:b7:50:d1:d3:76:0d:
                    dd:5d:66:03:61:51:8c:44:f3:b3:c2:3e:bf:14:c8:
                    c6:6d:b5:73:34:ec:00:32:92:70:fd:b4:78:a2:47:
                    fb:03:b6:69:45:1c:b9:b3:69:b6:31:58:ef:92:fd:
                    aa:78:ed:d6:e5:8d:9f:80:8b:ee:c9:16:ec:bd:93:
                    90:9c:eb:96:86:28:c9:a3:5f:ed:76:20:5e:fc:d9:
                    54:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B7:7C:E7:47:15:3B:6F:8A:EF:1D:45:22:D3:A5:EE:8C:40:D5:74
            X509v3 Authority Key Identifier:
                keyid:FA:BF:88:D2:A1:E9:4A:C1:DD:30:63:C4:73:30:BB:AD:75:F6:51:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-r-I0qHpSsHdMGPEczC7rXX2UTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:e9:76:fa:df:2c:54:31:be:f6:7f:03:45:67:48:a9:41:bb:
         5b:24:d0:0a:ed:e2:ba:52:5e:80:20:1f:66:21:24:6e:37:32:
         0b:e5:86:52:fd:9f:a4:00:84:9f:80:d4:00:69:1f:f5:ec:7c:
         ce:9a:b1:95:a2:5c:eb:01:07:be:82:87:2e:80:be:27:3e:11:
         a1:1a:57:11:39:f1:91:2f:66:58:8d:78:59:8d:18:08:9b:55:
         15:e2:8c:76:a8:ec:3c:55:34:58:69:da:0b:f1:86:7c:11:0a:
         79:48:43:9b:3f:d3:6f:d6:88:7c:ab:a9:5f:8d:74:91:ae:b4:
         36:56:a6:f0:1c:f7:12:20:c4:3d:a6:88:ad:7e:0b:fd:bf:b0:
         07:24:0c:3c:cf:57:34:62:0f:82:38:ef:e5:33:6e:49:33:31:
         50:7f:2b:ec:67:0d:a7:a8:83:81:46:cc:4f:7e:ed:9a:5c:da:
         7e:65:94:32:ec:b5:19:a2:49:b3:5e:3c:07:73:31:95:1c:70:
         22:e0:bf:c5:8c:35:10:4d:5e:53:cd:16:20:55:e2:87:fc:8e:
         35:63:d2:1d:07:77:cc:83:9c:b5:81:fe:6d:00:a3:c7:ff:8a:
         30:2f:c0:a5:a0:7f:73:ca:cf:cb:48:7d:b3:0d:60:d5:4e:b1:
         46:9c:cb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:52:38 2026 by rpki-client