Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File:                     1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier:          YafngMvMH2nmTIObWda++Wr7f78VXOPZWc/9yHEKJrI=
Subject key identifier:   88:54:6A:1C:1E:81:5F:77:70:99:1C:FD:4F:E3:0F:5E:08:82:EE:A0
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer:       /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial:       01A0C331D964DD498B57F557F5BC28339940
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number:          0AEF
Signing time:             Mon 21 Sep 2026 09:00:19 +0000
Manifest this update:     Mon 21 Sep 2026 09:00:19 +0000
Manifest next update:     Tue 22 Sep 2026 09:00:19 +0000
Files and hashes:         1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: 9lC10y9FhYIMaz+tKSbtZj+/Uep+iQwDx5qTIBiB9zQ=)
                          2: 453Eh0yOu4NWyTs7TE3bjcioo9g.roa (hash: A5IxuJXRfXNLs2Sl4j7rfwj7i30+ZqNR7cmzpPYYHeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:31:d9:64:dd:49:8b:57:f5:57:f5:bc:28:33:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
        Validity
            Not Before: Sep 21 09:00:19 2026 GMT
            Not After : Sep 22 09:00:19 2026 GMT
        Subject: CN=88546a1c1e815f7770991cfd4fe30f5e0882eea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:f9:d2:94:3b:e4:b6:dd:22:13:80:e4:fa:
                    48:8d:b5:59:55:01:f9:d8:e9:6d:15:53:fb:03:05:
                    37:f9:ad:36:20:9d:48:b3:72:ee:6b:8f:64:65:6f:
                    c4:b9:81:71:42:fd:d8:9f:2f:84:02:40:18:1b:f6:
                    a4:01:09:c1:66:2a:f4:4b:61:c9:74:77:d3:95:b6:
                    f1:a6:17:c2:35:2e:fd:7f:21:46:b0:94:db:e0:a1:
                    8c:6d:d4:6f:a4:56:a6:b3:fe:71:2f:f1:83:e0:a6:
                    33:bf:b0:e2:ab:eb:4a:a9:8f:a4:ae:8e:92:64:d6:
                    0e:5b:40:03:38:46:a5:14:8e:a5:ae:38:1d:fb:46:
                    34:90:a0:95:d4:23:f3:f6:55:0c:0f:d6:aa:ce:1d:
                    9e:d5:5f:01:48:1e:a5:c1:46:5b:21:63:4f:6a:d3:
                    4a:f5:13:c1:2a:5a:45:b7:e2:e8:20:ad:e2:3f:db:
                    88:14:8e:a6:55:82:07:34:3c:c2:ab:71:76:58:d0:
                    3e:74:0f:12:ac:ba:19:47:f4:84:6c:8f:e9:ce:d6:
                    d9:fd:85:0a:1b:45:84:f1:6d:92:1c:22:69:10:53:
                    f1:8a:6b:3d:a7:67:71:75:09:44:23:d1:d7:a2:59:
                    06:56:ea:58:f3:85:8d:22:7c:6d:7a:b9:10:1d:99:
                    9a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:54:6A:1C:1E:81:5F:77:70:99:1C:FD:4F:E3:0F:5E:08:82:EE:A0
            X509v3 Authority Key Identifier:
                keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:2c:dd:82:3c:23:2d:ad:4b:2d:02:2d:02:72:80:e7:72:1f:
         5d:00:04:59:9f:5e:b9:7c:2c:a6:e5:46:8e:2f:bf:5a:3e:2c:
         62:90:52:a0:5b:40:37:7b:24:be:30:e0:a8:02:1a:13:5a:aa:
         cc:96:87:16:ad:31:d6:e7:03:e9:50:dc:1f:d3:47:28:dc:ca:
         a8:f2:21:b4:1e:b9:49:35:50:8a:4d:a1:0d:c4:4d:c8:b0:6e:
         f5:c4:21:12:3e:47:88:a6:81:8d:46:40:f1:4e:53:fd:a9:8e:
         be:04:06:d0:41:98:4a:33:21:75:e5:03:11:cf:9c:e9:5c:1a:
         dc:4b:f7:c2:48:e0:d8:56:b9:a6:9b:37:db:cc:79:06:83:58:
         33:ed:4f:95:96:ad:7e:ab:ae:45:10:bf:f4:b2:be:65:82:5d:
         12:b6:8d:52:fd:7b:e6:7f:f8:1a:4f:04:14:1c:8e:22:1a:7f:
         07:1e:e1:51:6b:1e:d8:99:a3:c6:cf:e0:e3:ce:bf:15:b2:3b:
         71:95:0b:5b:e7:94:3e:81:ab:b5:e2:81:63:8c:bd:7c:9a:3b:
         54:b0:d3:f1:7c:77:4a:03:ae:3b:15:e5:5f:54:d4:ab:09:b3:
         e4:ec:03:73:4c:e3:05:c1:3e:02:69:5c:a5:0f:34:b7:93:38:
         22:8b:03:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:43:48 2026 by rpki-client