Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File:                     1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier:          ygcZXH1xTeUrmNr40/YxHoS219Pbc9s06qb4YE0g70w=
Subject key identifier:   0C:86:85:22:23:BC:86:43:74:80:A6:25:AE:97:0A:97:A5:A6:E4:22
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer:       /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial:       01A0D12448DDCEC1491F85DD3A109A36221F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number:          1A78
Signing time:             Thu 24 Sep 2026 02:00:11 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:11 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:11 +0000
Files and hashes:         1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: 5FxeAVsKL88MkEvHtvXgkCzb5yqQaQSoVEGtkxR8j4E=)
                          2: 40tYHzrdIOKM0_j4QKh_7shzx8k.roa (hash: SKNQQTkqDQxf7nvw2qRuH0Vq4RF5cs3xZPCOte7W/OA=)
                          3: QNpprllplAM88mMrWtN3ag177fE.roa (hash: 5dP2zjfT0bTz8XtRVCAWieBHqUYv0AqhPnTwXU8eFn4=)
                          4: Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa (hash: kmr+HuErFhNT7cviIumckQWDHYCPiWsB0llSSAYvKio=)
                          5: dkTEhcSUjmDmfcgVaKjPvVY65ho.roa (hash: CEmoGVLgn+ZeP+7mTHI7wWOP1MgXpbR4Ij+5W74s23I=)
                          6: fXSStTtN6IqbqkCD3E5j3kC-YHI.roa (hash: zVgHJh9lJVijMpBB+dDgMK+AGLHEUW+Je1xWignFzIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:48:dd:ce:c1:49:1f:85:dd:3a:10:9a:36:22:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
        Validity
            Not Before: Sep 24 02:00:11 2026 GMT
            Not After : Sep 25 02:00:11 2026 GMT
        Subject: CN=0c86852223bc86437480a625ae970a97a5a6e422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:a1:9a:45:63:b6:6d:88:0c:90:49:47:07:
                    3e:c0:40:70:b0:1b:01:79:92:b4:67:ae:f6:6e:37:
                    2d:a4:ab:7a:51:87:cd:d7:27:c5:e1:a1:b4:dc:02:
                    81:c7:f6:f2:7a:cd:b2:73:14:2c:5a:d0:45:ba:78:
                    29:45:44:f0:e8:da:cb:38:9f:77:62:f1:55:3a:3d:
                    f6:a1:07:29:c1:40:ec:84:e9:bf:70:9e:da:17:86:
                    9a:d5:d3:58:ef:1e:c8:48:5f:90:76:51:05:2e:af:
                    07:49:1c:e6:06:6b:fb:b8:ab:31:0f:af:24:f7:ce:
                    fa:3e:6a:33:c8:1e:15:b3:62:f5:a0:82:5d:d9:60:
                    dd:ff:b0:bb:a0:6d:af:34:98:92:1c:1c:d9:99:bb:
                    f1:8a:95:23:98:0f:46:e0:11:b9:ee:3e:16:c8:21:
                    63:e4:e6:82:f0:e8:6b:96:d8:70:c1:20:19:70:46:
                    f5:f5:1a:11:09:95:c2:8e:26:ec:76:d0:81:2c:40:
                    9a:28:d2:e4:d8:ca:96:a9:26:a3:37:52:d9:ee:bf:
                    82:43:0a:3e:bb:1b:c4:d3:1e:67:a1:b3:79:0c:dd:
                    db:f3:5b:37:ba:0d:7f:1b:79:3e:a9:86:c5:17:2a:
                    08:5b:43:ba:9a:ee:41:8d:29:89:09:de:e0:69:8b:
                    ed:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:86:85:22:23:BC:86:43:74:80:A6:25:AE:97:0A:97:A5:A6:E4:22
            X509v3 Authority Key Identifier:
                keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d0:05:c2:ae:ae:0e:c1:00:65:67:30:0f:69:f1:0d:0b:80:
         0a:1d:a1:f4:19:d5:2f:b6:e1:2d:ad:d2:ad:20:68:72:59:ea:
         16:bd:47:fe:93:d5:b5:3f:14:5a:d5:f7:6c:38:d1:3d:46:1f:
         8b:e9:62:82:95:ab:ec:c5:12:83:65:5d:a8:95:0e:c7:81:d8:
         d5:8a:6c:74:6e:5d:ca:ca:5a:3d:cd:61:88:e0:f3:ab:fc:fc:
         91:e0:ae:16:bd:aa:83:06:cc:c8:18:15:4d:27:7f:b6:e3:74:
         2c:5e:26:3b:bb:ba:13:ec:88:d4:3f:98:4b:bc:d6:1f:28:58:
         48:c9:1a:f3:6c:2d:4e:98:e2:69:fd:8c:c6:63:79:48:09:2f:
         cd:e6:3e:eb:14:b8:21:8e:39:bf:0a:5a:7c:2e:58:ad:c9:c1:
         42:81:77:98:cb:45:49:5f:b9:a3:d9:c5:27:ec:e7:8c:38:0b:
         b9:65:82:34:38:cd:8e:65:5d:42:db:ff:1d:14:0f:0e:cb:6d:
         9e:d7:02:b7:42:d4:41:32:32:f4:5a:79:91:f2:c7:3c:f9:d4:
         bd:50:66:c6:c6:f7:48:51:3e:da:da:3f:7a:6f:f4:15:c9:3a:
         70:1a:26:f8:0c:85:d3:64:60:93:fc:f4:0f:d3:80:2f:69:8c:
         5e:5b:b7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:25:12 2026 by rpki-client