Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File:                     1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier:          4kydEe/eSIOQ4WVaSr5C2tam6j2b1l/UZnfJV9vttU8=
Subject key identifier:   6C:F4:17:E0:B7:10:CF:91:3B:65:48:54:80:32:5A:A8:32:57:31:32
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer:       /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial:       01A0C3D6E6BB6CDC92E5600A8B9F450FE2AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number:          1807
Signing time:             Mon 21 Sep 2026 12:00:35 +0000
Manifest this update:     Mon 21 Sep 2026 12:00:35 +0000
Manifest next update:     Tue 22 Sep 2026 12:00:35 +0000
Files and hashes:         1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: yAMPG2QLB9Secf8bxzDAOeG45ds1FTlB03T8or3r8cU=)
                          2: DIEeHXr-sg72w8tBgzQ5nqnQ7go.roa (hash: EtH8YkhhVk7GVyIh/CoOOspQ4bbxWgxf9R15/OkaX/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:d6:e6:bb:6c:dc:92:e5:60:0a:8b:9f:45:0f:e2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
        Validity
            Not Before: Sep 21 12:00:35 2026 GMT
            Not After : Sep 22 12:00:35 2026 GMT
        Subject: CN=6cf417e0b710cf913b65485480325aa832573132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:cc:30:64:13:3c:72:42:e6:9c:9c:b1:41:
                    da:c5:ba:a4:67:b1:76:65:1c:ac:62:c2:75:45:0c:
                    0e:16:eb:00:fa:5b:cc:70:3c:5b:05:20:54:c2:8a:
                    16:5b:b9:8f:de:bc:25:8f:54:86:1a:e1:8a:47:e0:
                    bf:4f:54:26:7f:aa:61:80:a5:f3:14:7f:ba:c0:49:
                    b7:41:13:e8:04:5e:9e:74:c4:e3:3e:32:5b:6f:30:
                    6f:f9:fd:1c:9a:3d:4f:ba:f1:01:86:59:9d:c7:54:
                    6a:9b:2c:e2:a2:cc:64:41:dc:38:1b:b8:2f:44:fd:
                    4a:a0:0d:6e:f1:43:15:46:db:a6:21:0d:25:f0:7a:
                    21:0b:4d:8c:07:29:02:de:78:60:d0:23:f7:06:70:
                    95:2c:82:bb:7c:b2:0c:0b:98:18:af:50:1c:dd:c2:
                    97:eb:62:46:2a:f2:52:6b:ac:26:61:ed:c3:54:7a:
                    c2:66:3e:5f:77:ac:84:64:42:94:fc:27:99:37:ed:
                    55:1c:16:9f:11:8b:fe:c7:19:30:02:f5:45:96:cb:
                    d8:07:a9:20:42:62:50:2b:ea:0c:5f:29:50:c1:92:
                    e5:0a:e5:8f:52:06:10:b2:28:77:5d:e9:51:74:d8:
                    82:13:b2:40:a2:80:1c:0b:96:f9:45:8e:08:b0:69:
                    f4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F4:17:E0:B7:10:CF:91:3B:65:48:54:80:32:5A:A8:32:57:31:32
            X509v3 Authority Key Identifier:
                keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:37:4a:23:73:5a:ea:ee:b4:4d:19:4f:e0:0a:2a:cd:b9:6a:
         c7:ac:10:f2:c2:98:31:66:a8:6a:a1:df:e8:1c:a8:7e:e2:8a:
         9b:f0:80:4f:76:0a:ee:c3:58:aa:3a:20:51:c9:0d:50:e4:a4:
         e1:d8:25:9c:1e:3d:6a:2a:a4:10:71:2d:28:30:ed:ae:cc:84:
         c1:c9:e9:61:86:d4:d0:ce:b7:a7:19:d2:fe:e3:09:f6:e6:c2:
         f0:c3:c3:f3:b4:d1:8e:39:db:d3:c7:76:b5:0c:eb:95:95:91:
         a9:fe:dd:77:1f:6f:9d:3d:ec:46:9c:ad:40:59:75:c0:9c:53:
         72:ee:58:68:31:9f:72:bc:3f:c7:3c:4f:94:dc:b5:16:53:98:
         ca:52:e1:a4:90:98:a4:62:de:b4:1b:15:da:d7:f0:7f:6a:b7:
         c9:05:3c:2b:d6:ba:e9:7f:c2:35:be:1a:f0:7c:4b:f8:10:35:
         93:e0:ec:fd:54:b3:3c:48:f7:25:86:81:a6:c7:1f:13:72:12:
         33:eb:a0:17:2b:3f:1c:79:b6:a4:72:0a:fb:76:f6:12:56:68:
         aa:43:5a:25:ae:43:f1:f1:69:40:1d:4f:6c:9e:93:1a:a8:47:
         74:c3:cd:4a:6a:c7:15:f7:d9:f6:a7:70:47:81:27:41:7d:74:
         88:90:ce:f4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDD1ua7bNyS5WAKi59FD+KrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWZjZTlhYTcyYzgzODQ5NmY0YmRlZjljMWYwYjhlODk0
ZmM5OGUwHhcNMjYwOTIxMTIwMDM1WhcNMjYwOTIyMTIwMDM1WjAzMTEwLwYDVQQD
Eyg2Y2Y0MTdlMGI3MTBjZjkxM2I2NTQ4NTQ4MDMyNWFhODMyNTczMTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr13MMGQTPHJC5pycsUHaxbqkZ7F2
ZRysYsJ1RQwOFusA+lvMcDxbBSBUwooWW7mP3rwlj1SGGuGKR+C/T1Qmf6phgKXz
FH+6wEm3QRPoBF6edMTjPjJbbzBv+f0cmj1PuvEBhlmdx1RqmyziosxkQdw4G7gv
RP1KoA1u8UMVRtumIQ0l8HohC02MBykC3nhg0CP3BnCVLIK7fLIMC5gYr1Ac3cKX
62JGKvJSa6wmYe3DVHrCZj5fd6yEZEKU/CeZN+1VHBafEYv+xxkwAvVFlsvYB6kg
QmJQK+oMXylQwZLlCuWPUgYQsih3XelRdNiCE7JAooAcC5b5RY4IsGn0JwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGz0F+C3EM+RO2VIVIAyWqgyVzEyMB8GA1UdIwQY
MBaAFPsfzpqnLIOElvS975wfC46JT8mOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14X09tcWNzZzRTVzlMM3ZuQjhMam9sUHlZNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNTY1NWY1LTAxNDEtNGYzZC1hNTBj
LWI1OTk4NjgwZDkxNC8xLzEteF9PbXFjc2c0U1c5TDN2bkI4TGpvbFB5WTQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE0LzU2NTVmNS0wMTQxLTRmM2QtYTUwYy1iNTk5ODY4MGQ5
MTQvMS8xLXhfT21xY3NnNFNXOUwzdm5COExqb2xQeVk0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDdK
I3Na6u60TRlP4Aoqzblqx6wQ8sKYMWaoaqHf6ByofuKKm/CAT3YK7sNYqjogUckN
UOSk4dglnB49aiqkEHEtKDDtrsyEwcnpYYbU0M63pxnS/uMJ9ubC8MPD87TRjjnb
08d2tQzrlZWRqf7ddx9vnT3sRpytQFl1wJxTcu5YaDGfcrw/xzxPlNy1FlOYylLh
pJCYpGLetBsV2tfwf2q3yQU8K9a66X/CNb4a8HxL+BA1k+Ds/VSzPEj3JYaBpscf
E3ISM+ugFys/HHm2pHIK+3b2ElZoqkNaJa5D8fFpQB1PbJ6TGqhHdMPNSmrHFffZ
9qdwR4EnQX10iJDO9A==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:47:53 2026 by rpki-client