Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
File:                     1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft (raw, json)
Hash identifier:          6QPQlDPYy2me8qUT2KmJt7RPgU90b+wfigPYgfjsI6o=
Subject key identifier:   D3:A1:CA:11:D1:23:BD:A4:CF:8A:52:18:68:39:44:92:67:0B:B2:FB
Authority key identifier: D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55
Certificate issuer:       /CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
Certificate serial:       01A0C66A18DD7470E71603258537E53C01AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
Manifest number:          0809
Signing time:             Tue 22 Sep 2026 00:00:36 +0000
Manifest this update:     Tue 22 Sep 2026 00:00:36 +0000
Manifest next update:     Wed 23 Sep 2026 00:00:36 +0000
Files and hashes:         1: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl (hash: MDuiZn3F/FXhcgTB91L7m8XnQCmnmyTNWYwHVL3BeV0=)
                          2: A1ZPfrRu8o9Owxr8rnTdvW9MjSc.roa (hash: kH/WTsSPnQpLKCHSGHr5NlR3/PpERnHd4RJbM4sqilM=)
                          3: Fv3FN4kr698bVDao3o9XOjr8Tz4.roa (hash: 6rB82aXUm+Tn4n4wm/0OKr0aMTrP2YtkhF371pF2g1s=)
                          4: eG9ktSTPi_rXKJ8zS7Jb6PQXGnc.roa (hash: QNLHJqr8ttA6xtAj36HlfXnNbTxSaTW1D7qSizduEGo=)
                          5: senb-C18gcGExQFrNYa_dSp5lQU.roa (hash: dHLGbFqeRIn/SGnKt0AOge5jG5f2ooeFK9x3p3nUrvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 00:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:18:dd:74:70:e7:16:03:25:85:37:e5:3c:01:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
        Validity
            Not Before: Sep 22 00:00:36 2026 GMT
            Not After : Sep 23 00:00:36 2026 GMT
        Subject: CN=d3a1ca11d123bda4cf8a521868394492670bb2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:9d:fc:a2:e3:b7:ef:80:38:4f:69:ea:45:
                    34:1a:5e:e7:7b:85:bf:c9:ce:c7:81:49:4a:88:48:
                    64:af:69:e1:95:ea:07:3a:f8:c2:62:3e:53:e0:5e:
                    a1:20:79:97:25:df:9f:8e:25:9f:f9:ef:b4:e8:56:
                    d2:3d:59:ad:5e:80:51:04:a3:73:90:8e:36:50:3f:
                    fa:6d:9d:d9:35:50:59:34:49:bd:91:d5:33:c6:e4:
                    65:96:1a:68:4a:a7:d9:bd:99:16:09:b1:f8:6e:4c:
                    c9:da:9a:47:3a:c2:b9:3a:4a:7f:9f:07:a3:e1:7f:
                    05:a5:ad:b0:ac:9a:64:6d:7a:85:82:44:7f:e9:d1:
                    77:bf:b2:24:fd:35:39:72:0a:c4:57:a5:7c:93:33:
                    d4:80:7c:9a:3c:4d:10:b0:8b:59:96:5f:d1:3d:00:
                    1e:ad:28:66:ee:ea:9d:08:15:23:fa:6d:ad:0c:27:
                    e7:cb:b9:d6:b2:db:74:0f:10:60:02:a5:a9:98:94:
                    cf:ce:a7:d1:92:a1:12:44:c5:b8:5c:85:3a:4a:19:
                    35:29:0e:ee:e7:40:f4:f5:92:a1:9e:36:c0:bc:09:
                    90:fb:ab:19:71:01:d3:6c:0d:88:5b:3c:c8:7b:3a:
                    0c:be:d7:e0:23:72:6d:39:94:ce:d6:d2:53:df:bf:
                    db:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A1:CA:11:D1:23:BD:A4:CF:8A:52:18:68:39:44:92:67:0B:B2:FB
            X509v3 Authority Key Identifier:
                keyid:D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:5c:f5:d5:78:e6:b7:c6:fa:52:9d:0a:1a:da:b6:21:45:ee:
         74:15:ed:12:ac:92:86:bc:0f:82:82:38:8b:44:50:5c:d0:85:
         54:45:fe:1f:7d:ba:ca:af:bb:a3:ed:83:fc:04:57:e5:3e:a9:
         dd:32:ab:e0:4c:8a:44:07:41:d6:b3:37:11:d4:aa:bc:b9:be:
         8f:47:e1:87:54:3d:77:e3:da:db:a9:23:ef:b4:1a:42:28:b4:
         86:77:86:88:a9:84:cb:0e:2c:7b:b9:42:dd:b8:5c:0f:52:b0:
         44:99:8d:53:ee:22:e9:43:c6:06:5c:2d:31:3a:71:df:f1:01:
         20:17:a3:9d:43:f8:da:2f:c8:b6:53:54:62:7a:98:88:3c:eb:
         78:ad:0c:0c:04:8c:09:a9:d9:0a:96:4d:82:7d:29:7e:83:91:
         14:a3:9f:eb:c3:96:8d:cd:4e:4b:3c:8d:6f:d9:3d:2c:a5:40:
         52:91:b4:19:19:3a:1e:42:f5:e8:fe:b8:45:18:f5:60:99:68:
         80:3b:a8:9b:de:9d:b5:2f:72:d6:3e:b2:88:8a:9a:d9:20:b9:
         70:b5:75:c0:ac:55:19:ad:9c:54:4a:1d:ed:e5:5b:ff:e5:eb:
         00:5f:f5:85:87:21:89:26:23:c5:e7:f8:30:8a:ad:d4:55:2b:
         13:4d:8e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:44:08 2026 by rpki-client