Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
File:                     1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft (raw, json)
Hash identifier:          PvpXD5NBtoMbBi5R9H0SAtA4VVNlA7SnzN4A51a0UKo=
Subject key identifier:   27:29:51:61:B5:76:11:04:68:8B:99:51:BC:57:2E:36:C0:77:F4:C6
Authority key identifier: D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
Certificate issuer:       /CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Certificate serial:       01A0C368A14D685ADCEF02CC13B2882683E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
Manifest number:          11AC
Signing time:             Mon 21 Sep 2026 10:00:09 +0000
Manifest this update:     Mon 21 Sep 2026 10:00:09 +0000
Manifest next update:     Tue 22 Sep 2026 10:00:09 +0000
Files and hashes:         1: 0sUgrxZJElJI75bHc4PMJv-m6Hg.roa (hash: 2W0uHz9I3ibHN2TiwFffgNpABHgMMaB3ZZQbo22uvH0=)
                          2: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl (hash: HFHBFdt8zflGV4dY5hIcqWnoMA3ugdOpw6SChxh9Igo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:68:a1:4d:68:5a:dc:ef:02:cc:13:b2:88:26:83:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
        Validity
            Not Before: Sep 21 10:00:09 2026 GMT
            Not After : Sep 22 10:00:09 2026 GMT
        Subject: CN=27295161b5761104688b9951bc572e36c077f4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d9:87:01:cc:2a:f8:21:92:d0:ec:48:9b:0e:
                    00:61:ba:0d:bd:0d:be:ae:3d:4d:75:38:b6:09:83:
                    79:69:dd:15:e8:33:a5:a5:94:d5:ab:7c:e1:3c:84:
                    08:f8:25:26:32:f8:52:51:2a:3a:5d:f0:9c:69:5b:
                    a7:2f:a5:b1:0b:f5:85:20:5a:fa:08:79:0a:d7:7c:
                    cf:fa:29:40:be:19:50:f3:bc:27:b1:ec:67:ae:e0:
                    61:94:63:84:41:d6:4d:9b:69:51:4e:7b:c7:71:bf:
                    8c:f4:1b:be:57:91:df:d4:81:92:36:bb:e2:79:8c:
                    3f:3f:44:5f:e5:0e:58:ad:c2:00:d1:a2:19:59:89:
                    4e:81:c3:15:80:ed:2f:d1:b2:08:83:bd:da:31:f7:
                    7e:32:10:be:ee:ca:cf:78:33:cf:f3:36:b9:77:97:
                    a8:56:15:d9:f6:27:ad:fc:a3:78:ac:43:a8:43:f2:
                    07:90:b0:05:81:0e:bf:71:22:5c:24:ba:c5:fc:92:
                    b4:94:aa:26:df:22:f2:3c:64:07:67:76:5b:31:da:
                    e7:8c:73:08:cc:67:c5:c2:77:69:13:3f:73:1e:ed:
                    36:fa:a4:9b:20:bf:6a:35:d9:26:4c:6c:18:37:a2:
                    bb:75:14:62:2c:ec:bb:f5:db:e0:a3:17:79:57:b3:
                    a9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:29:51:61:B5:76:11:04:68:8B:99:51:BC:57:2E:36:C0:77:F4:C6
            X509v3 Authority Key Identifier:
                keyid:D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:25:62:03:58:7b:67:70:2a:b6:99:18:81:80:4d:5f:af:41:
         f6:0d:a3:51:35:d6:a4:51:3f:8d:4b:eb:ae:a2:af:33:f0:5e:
         39:7e:cc:79:e7:74:29:b8:a6:a3:d2:78:bf:77:2f:90:9d:9e:
         f2:b0:3d:87:bf:ea:a6:8d:c6:38:c9:0e:50:47:2d:cf:9c:32:
         16:1e:96:88:15:30:67:43:54:22:a3:8b:78:8d:54:94:ef:76:
         79:1c:3a:c5:29:ab:7d:89:a8:32:f3:4e:2e:45:1d:b1:f6:57:
         ad:a4:c9:f6:a7:34:47:d7:9e:4e:eb:6a:57:27:43:5b:43:94:
         f6:5f:e3:60:fb:ea:88:3f:1f:28:2b:ab:95:0a:80:50:f2:74:
         41:78:dc:2c:36:a2:86:81:37:72:b2:2d:7c:84:a2:e7:e4:c6:
         9c:8b:16:09:34:76:cf:f1:74:e3:8b:92:ea:7c:6b:9b:be:db:
         4f:29:73:b4:21:0c:5c:3c:07:30:5e:72:bd:e6:4d:ea:12:12:
         01:31:4a:1a:40:8d:f2:15:e3:da:18:27:65:69:03:03:7e:75:
         c5:c4:ab:8c:75:f9:7c:e1:90:ad:23:04:4b:47:f6:a0:96:34:
         c0:f9:f1:c0:a8:fb:7b:39:bb:90:40:7a:30:7a:f5:ee:d7:7d:
         72:39:16:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:58:54 2026 by rpki-client