Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
File:                     1ROHJRLx8tA3tAHCYDyomU5yHlU.mft (raw, json)
Hash identifier:          pKer25/KUlC10A9INnwsZ5zsM9+3L8wlEI3lolVR4AM=
Subject key identifier:   24:14:00:75:00:A4:05:EE:47:E7:B1:53:21:FE:EB:CB:74:9A:E8:4D
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Certificate issuer:       /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial:       01A0D9BB0B10F8001D89363E01FEBFA0E560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
Manifest number:          1A7D
Signing time:             Fri 25 Sep 2026 18:01:48 +0000
Manifest this update:     Fri 25 Sep 2026 18:01:48 +0000
Manifest next update:     Sat 26 Sep 2026 18:01:48 +0000
Files and hashes:         1: 1ROHJRLx8tA3tAHCYDyomU5yHlU.crl (hash: dqvyPyZotb+ICk+2UiD6scd8hSDEEgUSrv3EJN2Zxjc=)
                          2: QpYzfBnkNKh1yttKF2r35caalhE.roa (hash: ErOSkBHWiEYZj20zKnAchEbhylp7yOAjTawscXS8Sqw=)
                          3: VI84dAQT7kBRBItG-CpBi1i7u2o.roa (hash: PcXRGeOwzKCNST2FKMw8zsw2WTFr5u++h/7gasiKs04=)
                          4: j60o4dW09KsfcomsLl91WfS5uIs.roa (hash: orsN4oeQS9rxzvmJ709FrlKbBIl59zacw9FKE6EQoA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:bb:0b:10:f8:00:1d:89:36:3e:01:fe:bf:a0:e5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
        Validity
            Not Before: Sep 25 18:01:48 2026 GMT
            Not After : Sep 26 18:01:48 2026 GMT
        Subject: CN=2414007500a405ee47e7b15321feebcb749ae84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ed:ef:ca:04:01:53:fe:f0:b5:a9:d5:4d:24:
                    76:ee:8b:61:90:2d:ee:49:52:d5:9b:e1:5d:0f:c0:
                    8f:a1:22:b0:fd:e5:47:c1:33:b9:26:af:c2:09:62:
                    d5:5a:8f:7d:6a:0b:76:2b:51:7a:30:a0:37:67:c0:
                    75:30:88:a4:4f:1b:e1:75:19:2a:95:a4:0a:9c:5f:
                    45:d2:31:5a:77:20:5e:0f:a0:83:7e:52:8d:94:05:
                    41:b2:7b:26:a5:59:a8:be:81:f6:b9:d2:e6:09:d0:
                    03:19:12:e0:2b:7e:b7:8e:11:e9:02:3c:24:38:c2:
                    e1:fb:df:08:1c:20:20:27:93:66:fa:6f:6a:7d:a8:
                    6a:eb:b7:5c:40:4d:39:2c:71:15:50:36:eb:e6:2a:
                    c0:3a:98:25:77:43:85:27:19:1b:fe:5a:11:50:2f:
                    81:2e:98:94:a5:11:90:13:e3:5e:20:cd:03:ed:7c:
                    8d:b5:6d:2a:d0:b1:5a:66:fe:91:c3:df:33:3d:bf:
                    9e:23:33:9f:f2:83:7a:dc:de:01:d0:12:0d:e5:93:
                    3b:44:48:a1:d7:e4:e8:67:46:a3:16:bc:0d:2a:fd:
                    f5:51:ef:ef:8b:c3:0b:de:6f:a8:a8:26:e0:8c:a9:
                    d8:a2:d1:ae:34:ed:12:10:41:a1:c4:04:5b:52:5f:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:14:00:75:00:A4:05:EE:47:E7:B1:53:21:FE:EB:CB:74:9A:E8:4D
            X509v3 Authority Key Identifier:
                keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:32:5b:2b:9d:57:67:ee:f8:96:a8:fa:1c:b2:49:4e:e7:b8:
         a6:4f:f5:ee:a6:54:c5:8b:de:78:ec:e6:d6:14:e1:59:c5:ab:
         2a:60:22:2d:e7:e8:5e:b6:63:ba:46:b6:cf:60:76:4c:ce:ac:
         78:39:1d:0b:7b:ee:04:96:85:b0:20:6f:e8:3d:a2:be:ad:e5:
         fa:0d:ec:41:b2:08:bb:42:9b:ca:94:26:3d:ca:ea:4f:46:04:
         47:6d:c7:5d:80:94:76:bc:80:aa:6d:7c:1d:3d:82:5e:d1:ed:
         82:52:fc:3d:52:62:7a:bf:23:93:03:44:92:ec:9d:38:93:a5:
         bc:90:c6:66:65:74:a4:ce:e3:7c:06:65:3e:27:15:5a:6a:d2:
         7b:45:26:a3:ff:1f:63:19:71:06:1c:53:03:ec:76:3a:52:95:
         af:58:0c:f0:3a:13:0f:90:c3:c8:e7:db:d3:70:5d:51:b0:11:
         c7:27:35:b8:7d:b7:82:15:3b:4b:e3:ff:c3:e7:4d:13:02:bb:
         cd:ce:89:a3:28:f1:60:e4:5f:9f:07:9c:5d:ae:bb:a5:d2:af:
         04:ab:70:73:00:54:d5:90:80:11:39:74:e8:2d:54:85:aa:48:
         8a:0b:0a:cb:fb:7b:d2:6d:f8:4f:01:7b:2a:49:6e:36:6b:ee:
         51:1e:10:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:09:35 2026 by rpki-client