Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
File:                     1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft (raw, json)
Hash identifier:          bRr2PmMifYtvOe3gKbIQUApUYvHLPWBP64N/JpDRhdo=
Subject key identifier:   A5:A4:66:7D:75:77:5E:BF:E5:1A:98:8F:B2:9A:C3:22:93:6D:14:78
Authority key identifier: FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
Certificate issuer:       /CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Certificate serial:       01A13CDC339C5B0921E02D184A0632E84213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
Manifest number:          0DB7
Signing time:             Thu 15 Oct 2026 00:00:26 +0000
Manifest this update:     Thu 15 Oct 2026 00:00:26 +0000
Manifest next update:     Fri 16 Oct 2026 00:00:26 +0000
Files and hashes:         1: 1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl (hash: gVW7sA8cgFMLpCd62T2qTGGxtYkPKRLIm4BEtbaohlc=)
                          2: 9yzkMZa76suy_xBf-fnkwVSYimM.roa (hash: i3WGO4QDKM02YiC5j5wc43Wp3vFSY3zhmPS5smAe9dE=)
                          3: TnhSrFJYwDPBWTRMAUAFcGWZS_s.roa (hash: F5f9esjy8DE66HeLw6apcYbtvzF+c/KGlm2Q2ZGKKhE=)
                          4: y7z3JDp69YYx5JL47nmjISe99Yw.asa (hash: Xq8Qgjr5o/Mtr7TlvW3e5utgwenVWXRd6vx6+ISmhK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:dc:33:9c:5b:09:21:e0:2d:18:4a:06:32:e8:42:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
        Validity
            Not Before: Oct 15 00:00:26 2026 GMT
            Not After : Oct 16 00:00:26 2026 GMT
        Subject: CN=a5a4667d75775ebfe51a988fb29ac322936d1478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:08:d3:ac:45:cd:d4:46:97:4d:37:f6:8d:a4:
                    58:4d:89:1d:4f:b4:e5:f3:e0:1b:5a:af:9f:fb:c3:
                    45:87:bd:79:d1:e1:75:48:ed:35:2b:3a:03:0d:26:
                    cc:2e:8c:10:26:47:b8:68:f3:87:8c:52:6a:da:2c:
                    19:81:a9:50:f1:76:eb:b1:8b:26:b7:61:d6:13:4b:
                    2f:f0:2b:01:e1:0d:e8:48:94:04:a6:3d:d7:66:67:
                    a7:1b:ab:3a:bf:f9:4f:8c:5f:21:4e:0e:0c:c1:45:
                    cc:71:f0:0b:ea:02:ae:d3:de:c4:fe:a0:b3:76:49:
                    f8:90:84:3d:da:2b:b1:70:ae:db:91:08:67:fa:ac:
                    83:c3:65:56:e0:0c:d5:6a:bf:a1:76:b4:fb:2b:84:
                    10:41:93:95:dc:b7:a9:2d:b0:6c:d5:c9:58:41:b8:
                    c1:9e:a4:c5:bd:6e:6c:1a:b1:fe:47:30:09:bf:2d:
                    6e:58:e2:21:fe:89:34:a2:6d:4b:a3:dc:b6:a9:a8:
                    be:f9:ac:31:6f:1f:fe:29:a1:62:e3:66:52:4a:e3:
                    35:64:4a:be:ff:97:e5:49:e7:2c:3c:42:58:61:29:
                    17:70:ac:0c:6c:0b:3c:76:64:05:21:e8:20:f6:c9:
                    3d:b5:b4:7f:0c:22:90:70:e0:79:c2:5c:01:71:e5:
                    7a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A4:66:7D:75:77:5E:BF:E5:1A:98:8F:B2:9A:C3:22:93:6D:14:78
            X509v3 Authority Key Identifier:
                keyid:FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:63:61:38:72:bd:b1:da:1d:be:e8:ea:ce:e2:e5:fb:73:39:
         37:a9:4b:13:9f:1f:8d:e6:a2:38:b2:c7:2f:36:ca:89:59:13:
         54:77:60:e1:f8:2b:55:8d:d1:e9:93:f7:38:59:a0:a0:ba:06:
         92:a6:d5:72:a4:12:87:6f:ae:0e:1a:1e:1a:ad:f2:ce:a1:96:
         7e:8c:f8:62:74:1f:f9:68:98:9e:54:7f:0c:c7:36:06:62:aa:
         0e:21:a1:54:16:d9:7b:4b:68:12:ac:fc:68:8f:65:d5:f7:d8:
         7c:ad:13:fc:9b:1f:ce:e0:33:47:ae:a1:bf:a4:67:a4:81:e3:
         6e:fb:df:8d:b3:dd:8c:11:db:ac:89:77:d5:40:df:5e:13:01:
         b5:26:2b:79:c5:5f:24:00:b1:a4:34:85:95:3c:12:8d:51:0b:
         18:a1:37:f5:19:1d:85:18:f4:82:1a:37:47:fb:8a:25:b3:a2:
         6a:18:ea:ea:e3:1e:b4:64:83:a9:a9:37:f3:95:c1:aa:9a:00:
         47:be:10:32:4a:b8:97:b9:8f:b2:1e:fc:54:08:c0:60:49:1b:
         1a:cc:22:a5:f7:73:1d:29:90:2d:c0:ff:30:63:82:56:46:5f:
         5d:22:7b:5d:55:e0:ab:8d:aa:0f:a1:ac:d9:82:fe:dd:2a:11:
         37:4f:12:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:20 2026 by rpki-client