Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
File:                     1-Pc8XA86EGqLp9_z41yBbRB43HE.mft (raw, json)
Hash identifier:          MZvfDRprZzB//E9oFMZCT737AoJPfrbLLFzegv4gfIA=
Subject key identifier:   B1:22:0C:58:0F:B6:E9:B9:FD:34:F1:DA:04:02:2D:7F:16:D3:BA:1E
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Certificate issuer:       /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial:       01A0CF35E3B36FB06C97C942777F8AC69646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
Manifest number:          1A73
Signing time:             Wed 23 Sep 2026 17:00:10 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:10 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:10 +0000
Files and hashes:         1: 1-Pc8XA86EGqLp9_z41yBbRB43HE.crl (hash: U6fzrBtjfxbcPzkYnyf92J3q5G5YP8HZRLEYIWmWqus=)
                          2: 37GSYGpAIN5FmTc65bBlmOruleU.roa (hash: JskQXpElXo63e0l7EMdmNpQ5SlR6rEV35BDXEtseiFQ=)
                          3: GEmrHZiocuP3uGGu2fdf9GiH_oI.roa (hash: bqGaJMwhtgjzoA4tEVMy3ciK+ou3gzZ+eYmOVgdgS0o=)
                          4: PPv13jMczQJ97qYM8qnYp5GY4eY.roa (hash: xrqvSTY5mlsKJbUsZ3kCmkscnCE0qbohIQer6JB0DNc=)
                          5: _RCr9LUebfRKK9_S9NEI7YdE54o.roa (hash: Ly2P339nCiky0TDj+07otBCcuYQ4rfNr5L4NI3DPlbY=)
                          6: lmotZZaP-oLJszIL5yzQv1G62qo.roa (hash: CVe5HA8XTkB4hUBikhtIn8qce4VsU+h5vTnqP0aGAi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:35:e3:b3:6f:b0:6c:97:c9:42:77:7f:8a:c6:96:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
        Validity
            Not Before: Sep 23 17:00:10 2026 GMT
            Not After : Sep 24 17:00:10 2026 GMT
        Subject: CN=b1220c580fb6e9b9fd34f1da04022d7f16d3ba1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:61:28:58:e2:14:45:f5:e8:c5:6d:12:f4:
                    18:6f:9c:96:03:f2:23:54:f8:53:4e:26:85:71:6f:
                    60:66:ff:cf:70:55:37:03:ca:bc:76:55:0f:2d:50:
                    44:71:61:5c:49:50:cc:5e:f7:49:01:5d:c0:65:7c:
                    82:59:0a:ec:42:53:0d:51:0a:ac:45:62:f8:2c:f1:
                    71:20:e9:ae:5b:d3:a7:d2:3f:00:9a:a3:b0:ff:24:
                    5a:d2:2e:71:6e:de:a2:94:3e:7d:1a:2e:42:55:b6:
                    53:d7:2a:b6:a0:33:0d:26:d7:6d:ff:42:07:21:58:
                    dc:7f:d1:0c:12:ac:82:c9:b0:a3:4d:8c:28:25:44:
                    a2:5f:75:c8:0d:8a:29:39:d6:a4:c4:84:b9:cf:8c:
                    fa:f6:58:e3:c5:3c:aa:5d:6b:44:48:a2:c2:51:4d:
                    5a:33:31:8f:06:50:d8:1b:84:41:0c:1e:d2:94:60:
                    05:af:ee:68:0b:82:e6:00:50:f7:23:a7:96:0a:d7:
                    53:92:2b:ab:64:15:18:6a:53:1e:9d:f4:4a:40:97:
                    a9:cd:0f:c6:3d:13:8a:7a:1b:fb:b1:46:e3:07:c4:
                    2c:1e:74:44:4e:19:10:fd:82:26:3d:e4:2c:9a:cf:
                    07:8e:db:16:bd:6e:8c:cc:e9:a2:42:8f:6b:da:5d:
                    a8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:22:0C:58:0F:B6:E9:B9:FD:34:F1:DA:04:02:2D:7F:16:D3:BA:1E
            X509v3 Authority Key Identifier:
                keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:4f:2b:ce:25:66:c9:d7:c9:d5:e6:b4:23:6b:fc:80:41:39:
         36:70:84:c8:3e:ca:1e:2c:a9:36:60:4d:72:fe:0a:42:7a:9b:
         4e:c5:07:e3:7e:e0:6e:1d:d1:60:2b:4e:4f:e1:c7:fe:5d:80:
         77:8c:2e:cf:14:e3:41:87:55:32:ed:60:30:52:cd:41:f3:42:
         1d:ac:20:66:46:2d:ef:e6:27:33:75:9c:d2:2b:23:c5:f3:cf:
         b1:1a:54:19:f4:57:b2:bd:a9:d2:72:5c:5c:8a:d2:bf:50:f4:
         bb:d3:2b:c0:f5:ee:12:31:08:ac:01:8b:0a:b4:6c:3a:e2:ef:
         78:f1:54:ea:59:69:f2:fb:ec:4f:8d:8a:1a:d3:6f:e9:22:a9:
         65:f1:8b:dd:50:66:40:b6:de:13:4a:fc:94:ab:80:21:51:eb:
         35:4d:29:9a:5d:07:0f:e0:ac:f6:ec:39:eb:4b:6d:75:9f:ca:
         e2:34:52:99:70:a2:b0:e6:d7:7e:7f:5c:18:01:39:03:91:0d:
         18:47:07:93:3c:6d:c2:8c:70:a9:22:00:f7:91:a1:6d:68:b6:
         eb:da:7c:98:4e:1c:7e:08:ee:fc:4f:7a:ff:35:94:0e:d7:c9:
         ab:f8:a0:0b:7c:78:9f:5a:b6:62:33:bf:22:fc:d6:7f:bc:5e:
         5d:2f:2b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:33:47 2026 by rpki-client