Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
File:                     1-V055baJCkbIzlyQN-bSY2XoV7w.mft (raw, json)
Hash identifier:          H6XcklhFZQxUaALBoA0NM7zFdhiExjXqzGxZA950fZE=
Subject key identifier:   CC:E7:18:6D:11:B8:B9:71:02:05:85:98:BE:C4:C7:E5:6C:D3:B6:B5
Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
Certificate issuer:       /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Certificate serial:       01A0C82130717C775D34E81A87BBC277DC0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
Manifest number:          0F71
Signing time:             Tue 22 Sep 2026 08:00:13 +0000
Manifest this update:     Tue 22 Sep 2026 08:00:13 +0000
Manifest next update:     Wed 23 Sep 2026 08:00:13 +0000
Files and hashes:         1: 1-V055baJCkbIzlyQN-bSY2XoV7w.crl (hash: kIkBWZw7p3ozWndDEKU3WlLQb/xhXP0ZACfQ7MRuFn4=)
                          2: 5lUQZsEUGyOae8g7ck1qxAKPHD8.roa (hash: n4Xk9RLkEFoassK3zDhzjezu9B6KPSvljIoQuRXwbfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:21:30:71:7c:77:5d:34:e8:1a:87:bb:c2:77:dc:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
        Validity
            Not Before: Sep 22 08:00:13 2026 GMT
            Not After : Sep 23 08:00:13 2026 GMT
        Subject: CN=cce7186d11b8b97102058598bec4c7e56cd3b6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:25:04:c4:70:2f:22:4b:69:64:7b:c0:af:
                    e6:d2:f6:b1:3e:87:21:a9:94:87:d7:46:50:8e:fe:
                    2e:18:26:39:84:b4:66:51:ba:e5:64:19:2d:f7:db:
                    72:5f:8d:a0:a1:81:bf:54:9b:a1:dd:76:a0:31:06:
                    81:94:a8:7d:ca:39:e5:78:91:8a:e7:27:14:c6:98:
                    0f:08:e8:44:15:8a:b0:5c:b9:46:c0:b8:fc:9d:89:
                    b7:57:bb:8c:26:a3:46:fa:83:ab:9f:c2:24:ba:0c:
                    8b:58:48:a1:79:e3:a1:26:ca:eb:06:71:28:da:ef:
                    db:4a:38:50:5b:ac:d7:5c:66:77:0a:05:c5:8f:48:
                    3b:6f:3d:d6:bc:33:07:10:2f:b8:44:90:c3:ab:23:
                    d3:b2:f7:a1:4f:46:9f:37:cb:ac:ef:ec:05:71:cd:
                    bd:8e:10:37:5d:e1:dd:b0:6d:b5:27:c8:39:ed:29:
                    db:d7:cf:8c:7d:f2:d4:ec:d8:df:6d:47:74:b3:8a:
                    4e:16:2c:c7:d6:fc:1e:f2:96:fc:74:9c:f4:dd:90:
                    6c:70:27:c3:0e:71:bb:33:f0:56:33:36:17:4f:08:
                    bc:39:9e:2e:1f:6e:d8:e9:ed:72:ff:a1:29:0f:d2:
                    0c:de:58:03:cb:8d:52:8e:7d:66:0a:3c:5f:dd:6c:
                    96:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E7:18:6D:11:B8:B9:71:02:05:85:98:BE:C4:C7:E5:6C:D3:B6:B5
            X509v3 Authority Key Identifier:
                keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:3e:f7:35:a4:14:f3:97:2c:e0:f7:b7:5a:cb:df:0c:5d:8b:
         5a:11:c9:08:d5:d1:89:39:d8:59:be:99:a3:a5:e5:43:54:16:
         96:6f:cb:28:8b:92:04:2d:1d:17:c4:eb:75:62:e4:6f:3f:33:
         83:d5:03:68:e0:c2:4c:9c:c9:96:45:20:44:d6:f2:62:6f:48:
         00:6c:9f:e1:7c:42:89:8b:3d:dd:39:8b:f3:47:2a:1a:bf:6f:
         32:a7:31:82:8b:5a:8c:58:50:83:de:8a:54:80:a1:07:2f:aa:
         8d:d1:f3:3c:7b:9b:05:9a:b2:c1:be:52:c0:96:c4:ab:a1:73:
         b2:8d:51:3b:b2:ce:80:32:30:11:88:35:8a:31:25:15:f5:9c:
         cc:e2:2b:36:8a:85:f5:9d:0f:26:ca:ce:38:b7:c8:aa:67:ac:
         cb:54:a7:7a:ca:3c:12:c7:46:a9:1e:ce:2b:12:ec:2e:c3:1e:
         46:74:5a:b3:1c:6f:72:d0:15:d7:82:56:69:cd:e4:6d:85:15:
         de:69:99:3c:4b:41:92:2e:95:a9:93:e6:e2:a5:4f:79:4b:a3:
         03:ec:0e:cf:87:32:de:75:4b:00:e1:dd:63:eb:b8:8b:ac:38:
         fb:cb:e1:38:7e:e8:ca:6e:7e:dc:fe:33:5f:e6:ba:1d:63:1e:
         05:4c:70:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:08:08 2026 by rpki-client