Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.mft
File:                     1-iEgq2KDSRGpew4CQnNrq5FLkVI.mft (raw, json)
Hash identifier:          JMaCXHMoDXqm37moOZPvqOO4nof+xg1abj8B55pELuk=
Subject key identifier:   1E:D4:FE:A2:8D:9C:C3:DA:5E:31:FA:49:CB:52:9B:EF:2C:3F:18:C9
Authority key identifier: FA:21:20:AB:62:83:49:11:A9:7B:0E:02:42:73:6B:AB:91:4B:91:52
Certificate issuer:       /CN=fa2120ab62834911a97b0e0242736bab914b9152
Certificate serial:       01A0BCC21C73EDD40F5232164BC184D61828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-iEgq2KDSRGpew4CQnNrq5FLkVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.mft
Manifest number:          84
Signing time:             Sun 20 Sep 2026 03:00:32 +0000
Manifest this update:     Sun 20 Sep 2026 03:00:32 +0000
Manifest next update:     Mon 21 Sep 2026 03:00:32 +0000
Files and hashes:         1: 1-iEgq2KDSRGpew4CQnNrq5FLkVI.crl (hash: P0ou2ohOCyTWZfJSH6Hikr6NQz2wyKYSkVd3o8xGlCo=)
                          2: Lrx1zAF4i1NRZc8JkzAIkbuyS-8.asa (hash: jBOfsIf251AOH0p/FGtKjU9a9Jasrkeb/rbKwC538eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-iEgq2KDSRGpew4CQnNrq5FLkVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 03:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bc:c2:1c:73:ed:d4:0f:52:32:16:4b:c1:84:d6:18:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa2120ab62834911a97b0e0242736bab914b9152
        Validity
            Not Before: Sep 20 03:00:32 2026 GMT
            Not After : Sep 21 03:00:32 2026 GMT
        Subject: CN=1ed4fea28d9cc3da5e31fa49cb529bef2c3f18c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:f1:af:b6:33:b8:70:9e:99:a8:2a:32:bf:
                    8c:19:ec:bb:e8:10:b5:03:42:0c:39:d8:15:5c:bd:
                    f6:ad:94:72:37:bd:63:57:93:ad:90:83:d4:75:a7:
                    d5:75:ef:df:c1:52:ee:c2:2c:f0:4c:56:ae:db:00:
                    35:d0:ff:a9:37:64:22:bc:b1:36:68:10:9a:53:a5:
                    7e:4d:9b:09:91:ab:24:5e:26:b1:80:de:c5:d3:a4:
                    71:d9:8e:be:9d:b8:dc:44:57:95:25:53:d3:bd:d4:
                    ee:41:e7:36:db:63:ff:16:80:45:c4:39:97:99:2b:
                    bd:b8:01:65:e6:c8:05:f4:49:14:85:57:3a:de:1e:
                    76:f2:12:d4:66:58:ed:e7:96:de:83:77:e3:a6:cf:
                    94:cd:4c:51:f7:5f:6a:0e:82:a6:c0:55:4a:04:ca:
                    07:f3:52:3d:94:f5:28:72:df:50:6d:dc:d7:c9:fb:
                    c2:0d:85:16:da:73:9a:86:1c:c0:9a:4c:a3:9a:94:
                    01:09:2b:06:b9:13:3c:08:52:28:95:36:dc:d7:7e:
                    b1:c0:94:80:fb:ea:b1:74:e1:38:65:79:f3:ff:40:
                    8a:41:25:b5:5d:cc:67:2f:0f:57:ab:f3:b2:e9:4c:
                    47:b7:22:16:68:b2:c1:f8:66:01:ae:d5:70:69:dd:
                    c4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D4:FE:A2:8D:9C:C3:DA:5E:31:FA:49:CB:52:9B:EF:2C:3F:18:C9
            X509v3 Authority Key Identifier:
                keyid:FA:21:20:AB:62:83:49:11:A9:7B:0E:02:42:73:6B:AB:91:4B:91:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iEgq2KDSRGpew4CQnNrq5FLkVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7d:83:69:e8:47:b9:6a:e4:ab:73:45:8d:b6:80:a9:ec:d4:
         4e:d3:37:c8:e7:50:54:46:6d:04:60:87:f7:bd:fa:9a:98:df:
         82:d5:c4:5e:1e:6c:bb:eb:03:2a:65:df:ed:67:75:7b:04:05:
         38:6b:c3:83:49:c0:30:28:4e:71:b8:1d:eb:61:97:b7:13:5a:
         ef:42:4d:9a:45:3e:85:ac:9b:a7:18:d2:5e:7d:38:8a:6a:ca:
         ce:98:7c:77:fc:9e:d3:e8:3e:cd:e2:64:f9:a2:46:67:a5:ee:
         80:c0:8f:1a:39:d4:59:12:12:29:46:b1:d7:04:6e:7c:c5:ab:
         f5:3e:4f:0d:6e:1f:bc:65:df:ff:de:6a:53:85:81:42:82:9e:
         7f:8c:3d:ba:0a:28:c9:67:6a:9d:af:d3:ea:92:73:e5:d5:4c:
         1b:03:6a:90:1f:4b:5e:d2:84:4a:9b:dc:93:fe:28:fe:e1:d7:
         68:97:9c:88:fb:57:81:22:e6:ec:a1:c3:5c:71:d5:21:3c:91:
         64:b0:f7:03:9a:95:4a:c8:f0:4a:17:d2:99:ad:85:fe:8d:1a:
         48:72:f5:81:8c:da:92:2d:99:1e:58:10:f2:0f:aa:13:7a:06:
         3b:97:2b:6b:e7:cc:b2:09:85:0c:f1:26:2c:19:54:f4:9f:fe:
         53:56:f3:74
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaC8whxz7dQPUjIWS8GE1hgoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMjEyMGFiNjI4MzQ5MTFhOTdiMGUwMjQyNzM2YmFiOTE0
YjkxNTIwHhcNMjYwOTIwMDMwMDMyWhcNMjYwOTIxMDMwMDMyWjAzMTEwLwYDVQQD
EygxZWQ0ZmVhMjhkOWNjM2RhNWUzMWZhNDljYjUyOWJlZjJjM2YxOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8Pxr7YzuHCemagqMr+MGey76BC1
A0IMOdgVXL32rZRyN71jV5OtkIPUdafVde/fwVLuwizwTFau2wA10P+pN2QivLE2
aBCaU6V+TZsJkaskXiaxgN7F06Rx2Y6+nbjcRFeVJVPTvdTuQec222P/FoBFxDmX
mSu9uAFl5sgF9EkUhVc63h528hLUZljt55beg3fjps+UzUxR919qDoKmwFVKBMoH
81I9lPUoct9QbdzXyfvCDYUW2nOahhzAmkyjmpQBCSsGuRM8CFIolTbc136xwJSA
++qxdOE4ZXnz/0CKQSW1XcxnLw9Xq/Oy6UxHtyIWaLLB+GYBrtVwad3EgQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFB7U/qKNnMPaXjH6SctSm+8sPxjJMB8GA1UdIwQY
MBaAFPohIKtig0kRqXsOAkJza6uRS5FSMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1pRWdxMktEU1JHcGV3NENRbk5ycTVGTGtWSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvNzA5ZDFhLTY0YzUtNDI4ZS1iNGI5
LWFiY2Y2Mjk5MWUzYy8xLzEtaUVncTJLRFNSR3BldzRDUW5OcnE1RkxrVkkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzZiLzcwOWQxYS02NGM1LTQyOGUtYjRiOS1hYmNmNjI5OTFl
M2MvMS8xLWlFZ3EyS0RTUkdwZXc0Q1FuTnJxNUZMa1ZJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADn2D
aehHuWrkq3NFjbaAqezUTtM3yOdQVEZtBGCH9736mpjfgtXEXh5su+sDKmXf7Wd1
ewQFOGvDg0nAMChOcbgd62GXtxNa70JNmkU+haybpxjSXn04imrKzph8d/ye0+g+
zeJk+aJGZ6XugMCPGjnUWRISKUax1wRufMWr9T5PDW4fvGXf/95qU4WBQoKef4w9
ugooyWdqna/T6pJz5dVMGwNqkB9LXtKESpvck/4o/uHXaJeciPtXgSLm7KHDXHHV
ITyRZLD3A5qVSsjwShfSma2F/o0aSHL1gYzaki2ZHlgQ8g+qE3oGO5cra+fMsgmF
DPEmLBlU9J/+U1bzdA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:33:51 2026 by rpki-client