Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
File:                     1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft (raw, json)
Hash identifier:          wuB72oR0uEwGlS/q004S6sI22qI9I0ux21qfYIBB3Oo=
Subject key identifier:   09:A7:F4:3E:84:F6:4C:44:B9:91:5A:24:C5:66:43:EB:DA:3B:77:D5
Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Certificate issuer:       /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Certificate serial:       01A1250C1BE87A81E2A2957ADE97D66D383D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
Manifest number:          1908
Signing time:             Sat 10 Oct 2026 09:01:52 +0000
Manifest this update:     Sat 10 Oct 2026 09:01:52 +0000
Manifest next update:     Sun 11 Oct 2026 09:01:52 +0000
Files and hashes:         1: 1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl (hash: 6YBFSsMq1nJjzd+FYax07p/OV0Wt+CWAbZ+wSe5QqCQ=)
                          2: DiLQ3eZ63QejRg20eifdk93Yy6U.roa (hash: qnHrUbQPvPuYp+ZX7v/G+y+XPviRkjsxd6v5SyH+MSU=)
                          3: NOJhCAp3lNc4qEvAi23STvwAb3o.roa (hash: IHSU3ho/CfmMdy/3gp5YA9JXB84XxroiuujqOIas61Y=)
                          4: c_2Ib3SAMIC6eLsd7PdItgulSvU.roa (hash: pZtbvc0cd0+kKnPtln4c/A25uPBWq1LkvYr7oyWeHfY=)
                          5: jTGcRo3hhX-PWVq5dJVjc2uQbr4.roa (hash: E6oHGy8IhhcshyaYtATT6go1WUadzT652DZ7kyPwmPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:0c:1b:e8:7a:81:e2:a2:95:7a:de:97:d6:6d:38:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
        Validity
            Not Before: Oct 10 09:01:52 2026 GMT
            Not After : Oct 11 09:01:52 2026 GMT
        Subject: CN=09a7f43e84f64c44b9915a24c56643ebda3b77d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d8:76:06:94:25:30:c7:fe:20:78:d8:04:1b:
                    d6:52:06:94:35:cf:60:89:b6:61:6f:ba:31:8c:27:
                    96:48:c9:c3:7c:c7:87:94:cd:df:84:05:82:8f:38:
                    47:a9:9d:9a:ac:0f:c0:bb:46:86:58:cc:47:58:cd:
                    e2:9e:a6:54:a8:3e:6d:14:e5:a5:26:75:3c:4c:6a:
                    6b:36:1d:09:a7:64:53:2a:0f:3e:73:10:46:bd:89:
                    c3:a6:49:54:f9:78:11:21:76:1a:16:8d:b1:c7:7e:
                    b3:07:7e:05:ce:50:de:ce:46:fc:72:50:87:e3:cf:
                    94:c5:0b:3e:1d:11:66:f5:95:de:b2:6c:94:8e:c5:
                    f9:ed:1c:ad:c1:ce:87:9e:43:77:29:e1:c6:48:e7:
                    91:fd:76:aa:ed:1b:dd:73:ff:9b:33:7e:8a:ac:52:
                    fc:c5:2d:92:c6:e7:bf:4a:a2:b0:e6:e1:23:06:8a:
                    e5:0a:18:b8:24:74:d9:c4:87:ea:09:00:b2:0f:68:
                    f9:93:d6:e5:73:1c:e4:9e:32:60:4a:c7:75:3c:61:
                    cc:4c:40:89:9f:80:ac:f6:ad:b0:10:a5:ad:df:ee:
                    82:6f:e9:e7:6c:82:c8:03:62:7c:59:fc:4d:67:0f:
                    9e:72:32:f1:36:e7:d2:3a:2a:4b:99:ea:45:e4:74:
                    77:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A7:F4:3E:84:F6:4C:44:B9:91:5A:24:C5:66:43:EB:DA:3B:77:D5
            X509v3 Authority Key Identifier:
                keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:60:78:bd:49:2c:f4:8d:25:a1:e5:a5:5a:de:60:0b:a1:7b:
         c5:2f:ad:cf:d9:f5:78:98:a1:d1:df:d2:ec:86:fc:ac:f2:98:
         49:82:53:f7:b3:dc:09:2e:88:a3:cb:11:8f:cc:b0:08:b0:7a:
         d8:8b:54:39:a5:1d:ce:8a:56:b7:25:d6:7e:3d:38:e8:b4:c0:
         70:a7:5e:d3:15:c5:70:5e:0d:ec:68:b1:19:28:db:92:34:7d:
         aa:cc:7e:b3:c8:e3:bc:f1:a9:a6:39:35:54:45:72:7f:a0:35:
         00:8c:0c:77:25:25:be:1f:0f:16:ce:88:09:aa:4b:76:79:fa:
         04:10:d0:50:10:2d:21:eb:01:51:a4:75:a9:25:f5:2d:3a:9b:
         e3:3f:98:46:d8:78:92:e7:be:fd:53:61:02:f3:fb:6f:1a:b8:
         b8:20:5d:b8:f4:6a:bf:be:a0:da:48:60:2a:cd:3f:7b:fa:28:
         71:6e:52:f6:34:0a:f0:f3:0b:f9:48:b7:87:98:a9:cf:28:cf:
         66:80:76:0f:cb:4d:2d:94:34:1a:e3:d2:66:81:8b:d0:fb:56:
         72:5c:d2:40:d7:ea:df:7c:df:5e:5c:d0:b3:b1:be:30:7c:61:
         f6:50:43:8e:26:37:11:de:34:9e:e5:10:49:a8:13:2b:db:2f:
         5a:84:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:34:01 2026 by rpki-client