Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File:                     1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier:          j0ePsFtJebE5nYFWMGh5XRQk2BethSB25458RVGvfwI=
Subject key identifier:   89:7B:7A:77:FA:99:E4:F0:85:8A:68:86:10:63:5B:4E:2E:E5:3D:34
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer:       /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial:       01A17D73B0BCAE7902B9C69D6DCEBFCDB35C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number:          18A0
Signing time:             Tue 27 Oct 2026 13:01:36 +0000
Manifest this update:     Tue 27 Oct 2026 13:01:36 +0000
Manifest next update:     Wed 28 Oct 2026 13:01:36 +0000
Files and hashes:         1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: Nmw10riToT1Dc9n40s3j6BWfq9Mes6UBsk85IfgatmI=)
                          2: z8zovr62ahngZe9eyLY1UmJJA_E.roa (hash: h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:73:b0:bc:ae:79:02:b9:c6:9d:6d:ce:bf:cd:b3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
        Validity
            Not Before: Oct 27 13:01:36 2026 GMT
            Not After : Oct 28 13:01:36 2026 GMT
        Subject: CN=897b7a77fa99e4f0858a688610635b4e2ee53d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:6f:1a:42:92:de:d8:dd:ed:27:3d:42:20:
                    55:07:f0:af:4e:46:58:65:8d:33:96:d4:7b:96:b2:
                    a7:bc:55:38:3a:7b:8d:fc:66:41:67:e3:69:f8:bf:
                    c1:f3:1c:6e:e3:7f:a5:41:28:54:26:2d:3d:43:55:
                    b1:11:bd:6a:9d:b9:56:b6:c9:22:fa:ea:2d:56:5f:
                    df:c7:26:cc:ce:60:b0:c8:c3:2d:3a:3c:d9:98:52:
                    d5:70:a6:cf:ee:a5:d0:77:74:6a:b3:eb:08:52:89:
                    34:76:ea:5e:cb:1e:ad:27:c4:7d:75:83:46:4f:7d:
                    4e:56:92:1d:b4:05:22:7a:14:6a:c4:6f:42:34:38:
                    d1:77:03:ef:80:90:f8:5d:b0:f1:bc:02:f3:fe:32:
                    5e:57:f2:ca:24:73:e6:b0:c2:9c:dc:92:d9:09:32:
                    46:44:61:57:0f:26:c1:1f:f5:97:2e:2b:2d:cb:76:
                    41:95:a4:57:c8:25:17:21:3f:36:b5:4a:ee:de:97:
                    b8:36:15:41:a1:e9:c2:86:32:46:17:5c:21:31:6a:
                    a0:e0:9e:df:92:81:9c:c7:40:f7:ae:cc:51:5e:5b:
                    f5:f4:ae:4a:2a:b1:97:b9:cf:b4:07:a2:c7:a1:9f:
                    51:6a:4e:d8:a7:f6:d6:65:2b:14:32:22:2d:b5:75:
                    fb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7B:7A:77:FA:99:E4:F0:85:8A:68:86:10:63:5B:4E:2E:E5:3D:34
            X509v3 Authority Key Identifier:
                keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:62:a3:07:91:d5:18:ab:74:f5:30:41:66:ca:79:7c:e9:23:
         fb:eb:29:c6:66:2b:a3:c6:c9:22:b4:13:17:83:c4:8f:c5:b3:
         63:d4:b1:c8:d6:be:eb:dc:6e:78:bc:68:2c:f4:96:fc:c5:c3:
         28:e0:9e:6f:8d:f2:15:49:17:b7:21:df:2e:5f:56:8b:42:40:
         e0:75:94:d1:f9:43:6b:21:d3:16:1c:a7:f6:ff:d5:3a:f4:db:
         18:44:86:e5:fd:a8:c7:7c:82:d7:eb:84:d2:f8:4a:d5:d0:93:
         d0:3b:cd:49:d5:ed:a8:0b:51:8e:8f:55:11:28:8e:ef:04:2c:
         92:6c:60:c8:35:22:a4:11:8f:2a:00:ee:a9:78:b3:4b:3b:90:
         a3:49:c1:6d:37:fa:10:2e:5c:82:6b:7c:86:a6:f0:fc:63:8b:
         26:ba:da:bf:84:06:8e:e0:48:55:98:41:4c:ad:a0:c3:2f:1f:
         e1:4a:c4:e6:bd:ba:df:e5:22:44:c4:0f:76:f1:a2:c6:70:b5:
         87:e2:b5:05:07:04:ae:85:7e:6f:8a:31:49:20:26:84:f6:11:
         99:84:73:c7:19:f1:5b:b4:7c:c8:4f:4f:74:f3:9d:a9:2b:02:
         bc:d0:3e:35:6b:24:fa:31:c2:81:ac:ea:bb:b2:a3:3c:8f:c1:
         af:ca:6a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:11:31 2026 by rpki-client