Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
File:                     0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft (raw, json)
Hash identifier:          NgISYM/y4iiFxDxIfe9ITfoMal7zh1byq9I2338xKc8=
Subject key identifier:   11:A4:61:71:46:5F:D9:D4:06:FA:94:4D:EF:04:27:3F:73:9E:2D:31
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Certificate issuer:       /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial:       01A0DACCE43FC7BED3E2B61076B3A720D004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
Manifest number:          1448
Signing time:             Fri 25 Sep 2026 23:00:55 +0000
Manifest this update:     Fri 25 Sep 2026 23:00:55 +0000
Manifest next update:     Sat 26 Sep 2026 23:00:55 +0000
Files and hashes:         1: 0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl (hash: 8OhiJ+HLQpZrc/xEKXjsrocYqwX4xnF5jsl1SrRE8uA=)
                          2: 1-crrXO-fETfpfCuOfq_V8AAtFcU.roa (hash: tdCum/fabFsLr9FpxBtUaox/ikhPTJgRBISx07CTGFc=)
                          3: m6ptgFXprSst72B7DcWjacefpu0.roa (hash: MUx4NpBh49q7kC7uF4y0p7+rMSycmRDpaX5i1+bhvgk=)
                          4: nRGVIh5sE05xD692H24Cxlq7V8o.roa (hash: Tc2ZVvug9tFo5lvN6aBVNCGxx5GKA6dz+Rua6DfVBe8=)
                          5: qW_xRDyYFTJ1pnImR0U2Y6u9sv8.roa (hash: lYESXNxjJKf8HpJy1cENZI84AstuQ+Y1hlO3VCh5QhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cc:e4:3f:c7:be:d3:e2:b6:10:76:b3:a7:20:d0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
        Validity
            Not Before: Sep 25 23:00:55 2026 GMT
            Not After : Sep 26 23:00:55 2026 GMT
        Subject: CN=11a46171465fd9d406fa944def04273f739e2d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:d4:36:73:8b:47:12:0b:d5:70:17:1b:31:
                    49:d0:71:af:af:1d:85:1c:94:53:d2:fa:14:fa:25:
                    c6:6d:b8:03:b0:2c:8b:62:8f:07:92:ce:96:4a:86:
                    ac:2b:7d:81:88:24:8f:a5:1c:e1:dc:cd:f6:40:76:
                    da:b7:07:de:c8:fd:fe:25:b1:ee:9a:82:fd:3f:b2:
                    9d:2c:7b:15:df:54:56:ad:a3:e5:09:e2:b6:9f:ec:
                    52:40:18:69:c6:11:f8:e4:a2:5f:5c:5b:02:f1:0a:
                    93:59:e8:71:fc:01:5e:ba:ac:97:86:22:a9:50:f2:
                    fb:a6:66:51:4e:6d:c9:90:28:dc:e5:2d:3d:17:2c:
                    41:ab:80:41:87:34:c9:63:49:d5:10:27:e3:cc:38:
                    72:ab:18:21:76:29:6e:f1:29:b0:1c:6c:0f:0d:38:
                    2b:08:e7:12:92:68:36:91:89:f5:27:55:1d:a8:15:
                    c8:2c:7f:98:86:fe:59:c1:f6:a1:d0:ee:05:ea:d5:
                    ad:58:af:c6:34:87:31:83:0d:97:9b:df:05:7b:56:
                    96:bb:87:4f:b7:d7:a8:99:43:32:1a:db:3f:c1:0a:
                    6b:0c:5c:3a:43:9e:42:38:00:dd:f1:55:44:6f:96:
                    e6:ac:db:65:2d:6a:d0:8a:33:71:b9:ee:4b:09:71:
                    1b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A4:61:71:46:5F:D9:D4:06:FA:94:4D:EF:04:27:3F:73:9E:2D:31
            X509v3 Authority Key Identifier:
                keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:74:8f:a0:0a:b8:ec:97:e9:95:57:c6:89:14:da:07:d4:fd:
         fe:a5:2a:d6:7f:69:c5:f4:e0:2a:0e:cc:2e:13:e1:73:07:95:
         d9:39:42:73:2e:6f:62:43:2c:c0:51:c6:c7:39:b8:9d:8d:3b:
         5d:f4:c5:23:2f:59:9c:5f:2c:3d:0d:e7:b1:0c:6e:71:3e:68:
         61:06:ba:7c:de:cd:fd:71:43:4d:50:30:04:c0:9d:f6:09:5b:
         f6:ca:27:1f:6d:b4:16:eb:2c:b5:44:de:21:aa:5b:0d:bf:d0:
         d0:06:22:88:89:39:11:1d:45:27:5f:fb:80:4f:76:ac:3f:2d:
         74:31:98:73:5d:a0:9d:9a:d5:40:8a:1d:fe:8c:49:27:6b:21:
         85:3a:4c:95:ee:c4:07:82:be:3e:12:a6:c7:9b:12:d6:f2:2b:
         38:64:86:c6:75:a5:53:c8:05:78:1d:d0:3b:a3:a1:17:3c:07:
         0d:cb:bd:d0:8a:2a:35:2f:bb:f4:ad:1a:54:0b:a1:24:34:93:
         83:4a:df:62:45:5c:58:ed:a4:5e:93:21:c0:66:b6:75:f2:13:
         10:59:b4:c1:e8:53:24:27:40:27:b5:4d:b3:d3:f4:48:0b:88:
         21:45:3a:f3:b6:5c:67:00:5d:b5:a4:f6:a7:ae:84:17:41:c6:
         6c:f7:66:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:53:58 2026 by rpki-client