Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
File:                     1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft (raw, json)
Hash identifier:          iaxEB5PPnWkJZoa+e92eqPPbsAuQml0KU/brKRegrFs=
Subject key identifier:   FA:6F:92:79:0D:9C:04:AE:A9:57:F4:86:67:5D:8C:98:C1:57:4A:15
Authority key identifier: D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
Certificate issuer:       /CN=d703ceac906d07f74ca94c446303d954666b583a
Certificate serial:       01A0D2A5BEE31CB41F2E2E574E83BB962960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
Manifest number:          1A6F
Signing time:             Thu 24 Sep 2026 09:01:12 +0000
Manifest this update:     Thu 24 Sep 2026 09:01:12 +0000
Manifest next update:     Fri 25 Sep 2026 09:01:12 +0000
Files and hashes:         1: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl (hash: MZYY/fYH1lrT74a+fwws79aziA0fKq4oNBVOYk5wgvI=)
                          2: 4-k2BQwcooezjDVQqn3GH7FYIyg.roa (hash: u1bK1aC0Jx5hdjBp120tHkvEXpneiYzeiUJqLBrJ+rY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 09:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:a5:be:e3:1c:b4:1f:2e:2e:57:4e:83:bb:96:29:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d703ceac906d07f74ca94c446303d954666b583a
        Validity
            Not Before: Sep 24 09:01:12 2026 GMT
            Not After : Sep 25 09:01:12 2026 GMT
        Subject: CN=fa6f92790d9c04aea957f486675d8c98c1574a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b5:76:2c:a6:d8:6f:19:1c:30:74:ec:57:6f:
                    83:d7:10:63:eb:83:aa:b9:64:6c:b9:2e:16:9f:92:
                    c9:76:5b:3f:36:6b:22:ab:a9:6c:6c:e4:66:a1:94:
                    00:51:ea:ec:e6:43:3a:a8:e1:9f:1f:c3:e3:f5:a4:
                    13:fc:5d:41:cf:ce:6b:76:32:e7:ee:4f:61:e3:ce:
                    ed:64:ca:13:49:a5:89:44:19:74:9c:2a:57:34:3b:
                    dc:9f:48:b9:c9:55:7f:98:16:f9:8e:f8:40:3d:f5:
                    ca:b0:5b:89:1b:31:0c:f9:cb:6d:b1:a8:19:81:3a:
                    54:23:25:a2:d8:18:3c:ad:cb:64:aa:42:3d:a8:30:
                    ea:6a:d3:85:e4:aa:79:70:6c:96:4b:f6:fc:21:9b:
                    03:1a:c3:01:d9:23:90:0e:ca:16:50:68:19:41:a2:
                    c7:2d:f6:26:30:5f:ac:00:de:d9:8b:90:e8:5d:aa:
                    83:d1:2a:0d:1b:5f:b6:8b:89:06:2d:a5:42:6f:2b:
                    e0:cd:d2:dc:db:c5:91:35:d9:a5:69:54:d9:70:be:
                    3d:d4:76:58:e5:1a:50:02:fe:3d:ea:cb:88:74:aa:
                    4d:ef:97:c8:59:d8:a5:92:4d:3c:c6:41:ad:a3:74:
                    5a:2f:47:bc:0f:f9:16:89:ef:2c:da:34:12:82:96:
                    d1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6F:92:79:0D:9C:04:AE:A9:57:F4:86:67:5D:8C:98:C1:57:4A:15
            X509v3 Authority Key Identifier:
                keyid:D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a8:43:95:28:2e:99:bc:13:ab:30:ae:da:eb:42:fb:5d:5d:
         e0:91:8f:18:bc:07:95:75:92:12:1c:55:d4:07:31:d5:db:c7:
         bd:7c:ed:ff:84:2e:ab:cc:ab:a8:73:0b:aa:aa:41:4b:09:04:
         4a:4e:69:f5:1f:d6:6b:7c:0c:48:0e:ba:34:0e:54:9f:89:89:
         5f:59:85:f6:8d:bb:7f:2f:2a:fd:77:f6:99:db:0c:76:58:87:
         2a:dc:e0:73:1e:ce:95:63:e7:08:11:d3:b2:5c:c4:61:98:d0:
         5c:bf:eb:27:8d:b9:5a:16:34:f8:83:ae:3a:2f:37:c3:b2:ae:
         8b:f7:0d:28:86:8e:11:7c:3e:e4:3b:a1:f8:78:7e:c6:d8:0d:
         3f:30:f1:19:88:35:19:3f:df:be:2e:74:f5:ca:0b:c2:90:98:
         00:10:12:fb:64:32:37:79:95:1a:ae:79:74:c9:57:41:a8:34:
         bc:bf:4d:1d:45:6c:b2:6e:0c:30:fe:81:e6:b8:4e:7e:7b:0a:
         7e:0b:0f:1d:54:85:ba:8f:5f:4a:74:df:ff:9f:84:7c:b0:7d:
         1e:93:cc:ed:0a:99:d4:52:e7:36:2e:27:b7:c5:97:f5:07:f1:
         69:11:88:eb:6e:6c:4d:ec:3b:62:7d:f6:7f:5c:79:ad:ae:4f:
         c3:cf:6c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:19:22 2026 by rpki-client