Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
File:                     1zCimUHvvHp5J_ApSB4scloaZxE.mft (raw, json)
Hash identifier:          GUzUJyC0CMX6OWOOzHoLG3mg+j3Zs99fARt1rzK4iFg=
Subject key identifier:   5C:1C:A7:1E:82:B6:D2:FF:96:9C:4A:58:CC:4C:2E:90:C5:2E:81:CC
Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
Certificate issuer:       /CN=d730a29941efbc7a7927f029481e2c725a1a6711
Certificate serial:       01A0DE05AB3FF59BFA19FF212D439B6E6A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
Manifest number:          1A73
Signing time:             Sat 26 Sep 2026 14:01:48 +0000
Manifest this update:     Sat 26 Sep 2026 14:01:48 +0000
Manifest next update:     Sun 27 Sep 2026 14:01:48 +0000
Files and hashes:         1: 1zCimUHvvHp5J_ApSB4scloaZxE.crl (hash: EOEXE9uxqQJCh9N/F+7q6KbhFPv5ANBNRhirR5NFSDk=)
                          2: YsrfKZUom0hhdvtAbQlQ31S1LpI.roa (hash: QER6EJFTVwn6uMFElRbueTl9ramohyi1r1R/wDUOkjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:05:ab:3f:f5:9b:fa:19:ff:21:2d:43:9b:6e:6a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711
        Validity
            Not Before: Sep 26 14:01:48 2026 GMT
            Not After : Sep 27 14:01:48 2026 GMT
        Subject: CN=5c1ca71e82b6d2ff969c4a58cc4c2e90c52e81cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:15:2e:6d:b1:52:13:9c:ae:df:60:94:30:
                    ad:71:ee:db:e0:0a:8a:9a:69:a0:a9:89:58:b2:c4:
                    4a:95:14:e0:0f:6c:c6:09:48:c5:c2:1c:1d:fe:3b:
                    f9:37:69:34:ea:8e:33:4c:5b:7b:f3:53:91:3a:df:
                    d0:48:99:67:bb:1e:a5:d2:65:df:d7:2f:db:d4:5a:
                    01:f7:ce:40:05:2b:a0:a0:74:35:73:f6:95:b5:ac:
                    67:10:8e:d4:d9:07:b2:fb:cb:cb:95:93:8a:2c:4c:
                    cc:8b:c2:30:49:20:55:3f:88:76:cb:d1:07:af:be:
                    11:16:2b:e1:00:06:1f:10:d7:55:ed:57:54:2f:41:
                    b4:12:a9:31:ae:7b:cb:31:d4:79:20:aa:67:6a:e3:
                    2b:11:ce:6c:4b:9c:c6:31:de:58:8c:ae:d9:65:13:
                    93:ef:cc:63:9b:cf:8f:f0:e3:bf:51:4e:e2:7d:14:
                    45:65:3f:7e:f4:b0:ba:7b:1d:0c:70:67:9e:95:1b:
                    53:48:dc:70:37:ba:0a:e2:ae:53:d9:fd:da:f8:a1:
                    0e:17:9c:62:b6:54:f7:3c:04:71:4d:bc:dc:69:8a:
                    dc:81:4a:97:37:7f:5e:6c:12:5f:4b:70:31:8d:23:
                    21:5a:4e:9f:07:9b:79:37:f7:71:7a:b8:b7:e3:2d:
                    5d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1C:A7:1E:82:B6:D2:FF:96:9C:4A:58:CC:4C:2E:90:C5:2E:81:CC
            X509v3 Authority Key Identifier:
                keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:cb:7d:ca:dc:7f:1f:42:fb:4f:dd:58:ef:8b:7f:5b:b2:11:
         49:f5:6d:94:b9:8b:4b:01:6e:6b:db:28:59:13:96:3a:04:77:
         cc:01:83:2d:2c:a3:c6:9f:e1:01:84:86:c8:ef:05:b9:50:5e:
         e7:54:1e:93:eb:bc:9e:0f:b1:cf:32:9f:67:0d:16:e2:0d:9d:
         49:e3:e3:be:f6:4b:f4:41:87:54:01:82:cb:ea:e4:eb:47:19:
         8a:39:d3:58:1e:9f:ea:68:c8:1b:10:23:7f:22:7e:cb:5e:94:
         2b:51:0b:ae:8a:f3:a4:63:e2:f8:52:ec:ee:4c:ea:50:67:50:
         c4:c9:ef:93:0f:3f:5f:00:3c:44:d7:17:38:b2:e0:65:20:aa:
         8b:18:74:a0:eb:9b:57:a3:ec:8f:c4:82:c4:ad:99:6d:99:bd:
         8f:03:b2:ef:da:8e:87:da:2c:1a:79:88:36:d2:69:db:cb:6d:
         36:7f:02:fd:2a:3c:b3:3c:70:ef:5a:50:04:26:a8:00:ab:c4:
         18:5c:b9:e1:37:c1:1b:4c:3e:be:9b:6a:48:e0:57:25:2c:39:
         fe:7a:52:16:53:5f:a0:4f:d8:78:86:8c:00:3d:7d:a3:a9:a1:
         e1:fa:1f:54:db:2e:ab:51:75:72:7d:d6:4a:ea:b4:82:a9:bf:
         e0:c4:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:00:41 2026 by rpki-client