Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
File:                     CTdXHsK0hQX72gnKfqaN69lOAdM.mft (raw, json)
Hash identifier:          CmP9GXBpPBGmInd63rCf/vTrI2hrDqNg6x9f2gmMTk8=
Subject key identifier:   F9:FD:24:7D:CF:2C:F3:30:B8:D2:8D:BF:90:E2:19:A4:D2:0C:D3:A8
Authority key identifier: 09:37:57:1E:C2:B4:85:05:FB:DA:09:CA:7E:A6:8D:EB:D9:4E:01:D3
Certificate issuer:       /CN=0937571ec2b48505fbda09ca7ea68debd94e01d3
Certificate serial:       01A10436F241B722BE920AD994BF6A078E5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
Manifest number:          0100
Signing time:             Sun 04 Oct 2026 00:01:12 +0000
Manifest this update:     Sun 04 Oct 2026 00:01:12 +0000
Manifest next update:     Mon 05 Oct 2026 00:01:12 +0000
Files and hashes:         1: CTdXHsK0hQX72gnKfqaN69lOAdM.crl (hash: 3ZjY2QVRKWro8gzVefkDng0Cglg0fOpI7537jFb4pqQ=)
                          2: pjNNqrlFdBEk-5LXIPaA2yAX9II.roa (hash: 6xAgp3Y3/YbpjnpdTMNy11kqzchtaR+Q0nGNwxBy1EY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 00:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:36:f2:41:b7:22:be:92:0a:d9:94:bf:6a:07:8e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0937571ec2b48505fbda09ca7ea68debd94e01d3
        Validity
            Not Before: Oct  4 00:01:12 2026 GMT
            Not After : Oct  5 00:01:12 2026 GMT
        Subject: CN=f9fd247dcf2cf330b8d28dbf90e219a4d20cd3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:8c:db:1d:21:bf:ab:0a:f9:b1:d4:88:0d:
                    aa:f0:2f:03:f5:ab:b7:00:23:03:81:95:06:ec:e4:
                    95:92:b4:59:05:34:3d:70:53:6e:43:05:a2:89:d0:
                    ec:2e:4d:0d:63:8c:a9:6f:7f:f1:f5:06:cd:bc:c7:
                    3d:14:1a:cd:67:e0:2a:6f:56:7c:ef:19:72:c4:ed:
                    6f:d2:eb:d8:58:32:d7:82:aa:99:03:2d:5a:4d:26:
                    20:d1:42:1e:5e:8c:ad:01:00:3e:cb:2a:c6:ea:ba:
                    55:2f:2b:ae:11:bd:0d:47:45:0f:07:af:76:6b:7e:
                    01:1b:7c:70:e9:a1:16:61:fc:a5:b1:02:f1:7f:d2:
                    19:42:e5:0d:ad:81:bc:fc:1e:3d:ba:43:b5:1f:43:
                    9d:1e:d5:7a:70:fe:2a:96:f2:54:f0:7b:21:88:ad:
                    7f:17:6b:5e:e4:dc:58:42:7d:0d:0b:a3:0e:e8:15:
                    34:81:65:cc:4f:11:33:0c:ee:2c:3a:ad:1c:21:ce:
                    a2:79:90:ae:a6:d9:7f:72:75:68:e0:c6:ca:ac:09:
                    59:b0:44:79:40:b0:65:7a:b1:7c:a6:52:34:3e:57:
                    1d:2e:01:83:7b:e0:ff:95:44:e8:15:5e:cc:35:d2:
                    58:00:c6:a5:9a:d1:51:fe:8b:79:ed:40:95:81:ef:
                    84:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FD:24:7D:CF:2C:F3:30:B8:D2:8D:BF:90:E2:19:A4:D2:0C:D3:A8
            X509v3 Authority Key Identifier:
                keyid:09:37:57:1E:C2:B4:85:05:FB:DA:09:CA:7E:A6:8D:EB:D9:4E:01:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0c:61:6b:ed:d1:41:ae:73:37:8a:6c:23:b0:ed:48:b9:d2:
         cc:08:9c:3e:60:84:73:e4:c9:33:bf:74:88:d4:48:6e:4f:cc:
         54:f2:fd:1e:57:89:0a:8b:4c:d3:81:47:f9:5c:6c:e3:bf:7c:
         57:6a:b4:c4:ff:26:55:cb:53:16:5c:af:2c:6d:c1:fb:68:5b:
         28:38:f0:a6:c0:13:14:17:cc:c2:03:43:0b:64:6e:37:d0:13:
         1a:69:13:23:c1:01:38:f6:4f:b2:e9:51:9d:d5:3e:59:b8:32:
         92:f2:56:80:6d:76:9c:f8:c4:76:3d:77:7f:c9:ec:5a:b3:e1:
         fe:06:e5:68:cb:ca:d5:2d:d0:d5:3c:5b:60:a0:2f:13:40:3d:
         86:7b:b4:56:25:83:b9:de:4a:33:8f:83:c3:5d:d9:51:1d:d5:
         65:6b:17:e3:9c:89:26:e1:e1:80:8e:a1:75:47:7f:62:05:81:
         52:af:a1:ee:98:75:e8:4f:ea:30:13:ed:41:8a:31:70:94:77:
         91:47:52:d1:3e:42:c5:09:a6:0f:cb:43:5c:77:aa:e6:56:ac:
         97:45:d6:27:e8:11:35:6e:85:01:09:46:c6:99:0d:33:56:ad:
         c8:fb:f9:3e:79:ea:10:a0:42:f6:37:35:22:38:60:29:9a:d1:
         11:eb:1e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:17:04 2026 by rpki-client