Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
File:                     1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json)
Hash identifier:          wyBpk2OCSpTXEsm0XyRR9LivRGAHP7t6PjC3oPnRxdE=
Subject key identifier:   1C:F1:4B:55:7A:F0:1D:28:D3:3E:9A:AF:58:01:A9:7C:A4:89:26:3E
Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
Certificate issuer:       /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Certificate serial:       019FA90781E1E78ABBD873A5EE1CDD568B80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
Manifest number:          0956
Signing time:             Tue 28 Jul 2026 14:01:09 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:09 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:09 +0000
Files and hashes:         1: 0P1RjYkUunzUVQsRql-6_fKRzc8.roa (hash: QQ0zolHUVpVnhMPlw+ijSEm88671++BfofXDGkViKYk=)
                          2: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: 0pcJ15VMUs+KVpvxo0LLKMAIrl6NrTa7xZGEzq4GC6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:81:e1:e7:8a:bb:d8:73:a5:ee:1c:dd:56:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
        Validity
            Not Before: Jul 28 14:01:09 2026 GMT
            Not After : Jul 29 14:01:09 2026 GMT
        Subject: CN=1cf14b557af01d28d33e9aaf5801a97ca489263e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:67:58:3b:c9:e0:00:aa:a4:2b:39:6e:f2:
                    65:6a:56:54:5b:6d:eb:9a:73:1b:37:e3:f5:f2:ac:
                    cf:a7:83:10:00:a4:ac:bc:1f:a4:20:8d:16:77:d7:
                    6b:b4:5a:60:be:40:36:ed:a1:72:2d:8d:d6:8e:62:
                    e4:9b:9d:9d:5f:1c:68:44:41:ef:68:57:a3:f3:98:
                    a0:ee:38:e7:a8:ca:e3:c9:27:ea:6a:4a:e6:c3:eb:
                    3b:d0:0c:33:39:37:50:28:65:cb:a6:41:01:24:3a:
                    b1:eb:f2:40:85:41:83:56:25:50:53:fe:9d:6c:3c:
                    1b:75:b3:96:03:6f:32:f7:c7:7b:8d:97:78:d3:6c:
                    e2:63:83:bc:74:f8:fd:2b:21:25:f7:ba:ec:e6:be:
                    4b:5f:72:2c:3f:07:61:69:f5:74:fb:a9:b1:39:16:
                    dc:c0:32:25:9b:6e:54:b5:36:7a:3b:d6:bd:ef:c2:
                    09:e8:37:29:0f:9b:9c:34:d8:99:6b:2d:c4:3c:4f:
                    3c:55:32:6d:36:86:b4:9c:2f:32:26:19:2d:2f:53:
                    e4:83:45:6b:65:5e:8a:7e:5d:03:91:29:74:80:62:
                    1c:86:4a:f7:f9:1d:03:c0:b1:23:58:d8:f0:9f:e8:
                    58:fe:3c:b4:1e:08:c7:67:46:43:72:de:c6:76:32:
                    d0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F1:4B:55:7A:F0:1D:28:D3:3E:9A:AF:58:01:A9:7C:A4:89:26:3E
            X509v3 Authority Key Identifier:
                keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a2:e0:c0:73:c5:53:30:6a:2b:fc:c2:c4:b4:0c:c9:0e:59:
         20:4c:23:c2:af:04:6f:43:48:07:87:23:07:40:59:ea:f6:b0:
         b1:98:c2:57:c6:71:27:d6:45:0d:91:31:67:d1:11:8a:88:35:
         f5:8a:53:92:7d:86:42:9d:70:5d:25:ad:fc:4d:d4:ff:c8:73:
         b0:5a:4e:01:93:86:3d:73:15:ac:30:48:e0:23:d3:5d:65:e8:
         70:66:95:c3:dd:2b:6a:40:e7:db:96:72:ec:f9:d6:99:a1:e2:
         b7:63:a7:7f:fa:35:ee:58:94:41:0f:ab:fe:b3:a0:e5:aa:70:
         ea:90:50:68:04:00:f2:65:a0:e7:f0:bc:9c:57:59:72:cf:fd:
         b8:75:e7:4c:56:6e:41:f9:ad:5d:4f:f9:ae:b6:60:23:ae:33:
         fd:8e:f7:32:d0:68:21:74:ee:61:5f:d1:47:a0:b2:5e:02:ee:
         68:7a:48:2c:d3:98:6e:4a:70:4d:04:38:a7:e4:eb:de:03:c7:
         13:e0:60:3b:29:0f:46:ba:60:87:3f:c1:a4:57:6a:d7:2d:df:
         96:24:30:34:11:ef:92:78:e9:cf:7d:73:08:b8:28:ac:42:85:
         7b:53:24:31:8b:fb:14:e6:e6:44:0d:0e:e9:03:62:92:81:15:
         1f:a5:10:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:25 2026 by rpki-client