Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
File:                     1XgxwfXmACVCvOut7yQSithG6vk.mft (raw, json)
Hash identifier:          7JG+S/yMEtnzLo7cwo3G8pNq/royCG5bvPMLp+ChsVo=
Subject key identifier:   E7:1F:80:70:12:0C:35:6A:1A:D3:FB:AA:21:7B:EE:63:2B:17:8D:BA
Authority key identifier: D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9
Certificate issuer:       /CN=d57831c1f5e6002542bcebadef24128ad846eaf9
Certificate serial:       01A06E711FCC9BF51925510EE533D264F11E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
Manifest number:          04FC
Signing time:             Fri 04 Sep 2026 22:01:42 +0000
Manifest this update:     Fri 04 Sep 2026 22:01:42 +0000
Manifest next update:     Sat 05 Sep 2026 22:01:42 +0000
Files and hashes:         1: 1XgxwfXmACVCvOut7yQSithG6vk.crl (hash: CLV+oDBBzYT+SJJuZc4RM3vOm4VeiK033g9r74yL0yY=)
                          2: edoHN6_JsP-n0lJvF27iJ8eI6P4.roa (hash: 8NDkYnaMysyzTRQRKzPfGA1yeZmwSTwDWWtshuRs65s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:71:1f:cc:9b:f5:19:25:51:0e:e5:33:d2:64:f1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57831c1f5e6002542bcebadef24128ad846eaf9
        Validity
            Not Before: Sep  4 22:01:42 2026 GMT
            Not After : Sep  5 22:01:42 2026 GMT
        Subject: CN=e71f8070120c356a1ad3fbaa217bee632b178dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:41:ad:61:1d:d3:63:35:01:c2:df:5b:58:
                    50:3d:5f:62:73:52:6d:d9:ef:04:f5:5a:bc:9b:b2:
                    11:f6:ad:a5:2e:0f:99:bf:67:33:12:3d:e6:3e:e8:
                    8d:cf:80:a7:9d:52:93:6f:8d:3b:ce:9e:0f:62:8c:
                    8c:b9:e7:b3:aa:1c:2e:61:39:de:37:56:12:d7:e0:
                    f2:19:3c:9d:06:e9:63:5c:97:aa:81:cf:c9:b3:38:
                    31:93:ca:f3:a0:74:24:01:67:e0:40:72:74:5d:72:
                    b2:66:ac:d1:b5:19:99:f3:e8:e2:ee:ce:c6:44:67:
                    76:b2:79:6e:bd:9f:be:ee:ef:7e:28:bf:24:eb:0c:
                    cc:7b:e3:72:15:69:a1:ac:21:da:9a:ae:3b:c9:2c:
                    fa:25:5d:a4:91:b9:28:f5:79:8b:b1:79:72:5c:27:
                    3d:29:11:f2:6c:3e:d6:ea:76:22:f0:cf:73:5c:da:
                    75:d2:98:4a:5b:18:dc:89:e8:ee:58:a6:57:77:89:
                    bc:5b:c0:15:8d:d2:19:42:7e:31:3c:09:54:f2:1b:
                    47:a2:4e:7b:80:14:e3:31:dd:db:2f:9f:ea:e9:95:
                    73:ef:b9:0d:52:3c:b2:6a:9c:b5:a2:3d:c4:cb:09:
                    c5:dd:0d:60:de:ac:bc:66:f8:99:2b:ff:09:e4:68:
                    4b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1F:80:70:12:0C:35:6A:1A:D3:FB:AA:21:7B:EE:63:2B:17:8D:BA
            X509v3 Authority Key Identifier:
                keyid:D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:6a:c4:4b:42:c4:7e:dd:c5:b5:e5:aa:4d:84:cd:e6:b9:4d:
         4e:38:3e:b5:64:2c:5a:39:25:71:0c:95:52:20:2a:9c:ca:9b:
         52:9e:94:fc:64:3e:73:48:37:b6:d4:33:68:3e:02:44:20:51:
         78:09:64:25:94:d3:17:e3:3a:c5:d6:b7:20:4b:5c:93:e3:a7:
         b6:38:61:a3:fe:74:4d:c3:12:0f:17:2a:42:da:18:29:88:88:
         ff:21:f8:78:1f:df:89:9c:8c:a2:fa:59:e2:b7:e7:d3:c0:2d:
         3b:bb:12:45:0a:83:86:11:a9:89:3c:61:9a:08:01:0c:cb:98:
         1a:c3:56:04:ba:88:bb:17:45:74:24:63:26:9a:48:da:ac:3f:
         e0:83:fd:e0:42:cc:dd:b8:48:29:c4:e9:89:d6:53:6f:27:fc:
         37:ef:60:6e:43:c9:70:59:55:ee:5d:b7:b5:d4:b9:d3:dc:cc:
         d0:4e:d4:f2:0f:2a:8a:ec:4c:09:1e:2a:44:3c:eb:c9:28:71:
         82:a3:5a:41:df:b4:8e:3e:76:1d:bb:e5:90:c6:40:22:30:59:
         49:67:5b:56:06:d8:9d:da:d9:81:ab:ec:73:99:b8:20:05:d9:
         45:79:d5:ec:c0:1d:c3:7a:5a:2b:00:99:bf:17:05:cc:74:ad:
         92:e8:01:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:25:24 2026 by rpki-client