Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File:                     1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier:          revnIvkBQRwheql9oZ15j2RPgb7pV/ZNwgjpnNVamdY=
Subject key identifier:   6F:5B:F2:15:75:FC:14:70:B0:59:E2:D6:A9:6C:D0:B1:FF:7B:B1:C5
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer:       /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial:       01A089B121439080247E06712C73F3C68BBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number:          0EED
Signing time:             Thu 10 Sep 2026 05:01:21 +0000
Manifest this update:     Thu 10 Sep 2026 05:01:21 +0000
Manifest next update:     Fri 11 Sep 2026 05:01:21 +0000
Files and hashes:         1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: hfd8jqb2UPTPaIOUW3+qNuX3v2AFSCKSnDyS3eOnbgs=)
                          2: Cgsxb4qiaxInZIOD52ZW_SBVWn8.roa (hash: AfaNiPsxEDa6BqM9VdWTViXe2dMUmuZ+VOqQLOWjvx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 05:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:b1:21:43:90:80:24:7e:06:71:2c:73:f3:c6:8b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
        Validity
            Not Before: Sep 10 05:01:21 2026 GMT
            Not After : Sep 11 05:01:21 2026 GMT
        Subject: CN=6f5bf21575fc1470b059e2d6a96cd0b1ff7bb1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:57:02:cc:f3:e5:06:c2:60:97:20:2c:e5:
                    68:8e:de:72:47:49:0b:7c:56:4d:54:40:50:b6:bf:
                    87:53:d4:7d:e0:75:c1:18:9a:75:79:98:d8:d4:0c:
                    a2:b1:97:1a:bf:3e:ec:63:83:5e:5b:9b:05:df:86:
                    9c:1e:8c:b2:f7:ae:5b:08:c9:b4:84:42:e5:2b:d6:
                    e8:21:b8:14:31:f3:ec:aa:81:57:27:3d:9d:86:c4:
                    96:78:33:97:5c:fd:6d:88:33:71:79:6f:0c:1f:c2:
                    27:9f:f9:68:11:46:bd:7b:2d:57:64:9f:5a:2b:86:
                    e5:fe:f0:8e:ba:ee:0e:b9:4a:02:d8:b5:59:2a:45:
                    cd:2b:9f:5d:24:3c:61:d9:6b:e3:2a:55:fb:e9:21:
                    96:cc:29:a1:84:83:b1:59:81:63:62:8d:aa:a5:8f:
                    6a:fd:78:ff:79:e8:b1:f7:63:56:dd:28:63:1f:75:
                    80:96:84:27:83:d0:2b:24:1a:08:72:e1:bd:4f:d3:
                    c9:39:79:52:12:5a:57:9e:00:94:a7:45:fa:f5:1d:
                    18:b7:2a:b4:58:5b:00:db:18:39:be:aa:6f:f8:73:
                    dc:e9:4c:df:b8:75:9f:c9:7e:29:2f:f1:e9:ad:4c:
                    29:53:cb:69:35:e2:20:c9:aa:95:55:aa:81:5b:6e:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5B:F2:15:75:FC:14:70:B0:59:E2:D6:A9:6C:D0:B1:FF:7B:B1:C5
            X509v3 Authority Key Identifier:
                keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:81:aa:de:17:38:1e:ef:69:b5:66:56:80:af:4a:9b:08:80:
         ed:d5:10:f7:c6:b7:ea:37:d9:4c:b9:b1:9f:41:32:ff:64:9e:
         d5:56:2c:01:a1:ff:26:3f:4a:1f:86:8f:44:be:86:ac:a6:7e:
         1c:8b:1e:96:d1:81:28:63:e4:6a:da:c5:a2:c8:60:93:ff:d5:
         22:02:5d:42:94:8e:42:75:a9:ca:af:dd:37:c4:e0:6e:c1:e9:
         78:28:72:37:d9:b3:ae:1a:d8:28:14:d1:d3:8c:ff:d1:00:fe:
         4b:a5:e4:bf:0f:14:a5:b4:5d:05:b8:b4:36:8d:0d:40:d4:40:
         6a:b9:be:ea:3c:68:dc:45:64:a8:1b:5c:7f:01:22:5d:ce:c5:
         3e:4d:e2:2c:03:14:fa:a2:7b:f0:2e:e8:1a:5d:01:7c:98:a3:
         6a:8a:98:4f:12:a5:e4:eb:cc:ac:71:d8:9c:04:95:41:12:ea:
         b0:dd:cc:e7:81:7b:4e:08:13:1c:5e:97:35:36:bc:cf:43:b4:
         c0:1a:ce:90:72:2e:69:8a:98:be:9d:6d:ea:58:7d:a6:9a:ad:
         03:00:32:5d:68:4f:a0:ef:20:ae:1d:1d:57:61:a9:78:d0:61:
         ee:ef:bf:8c:1b:e3:b4:ee:b4:05:4b:b3:ec:ad:36:aa:f6:c1:
         2a:b7:a9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:27:32 2026 by rpki-client