Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
File:                     1-LGChfQu1nwR2Pg99IixD8h_F78.mft (raw, json)
Hash identifier:          OvwNXBxGmUNPrrqSqXS8Ft51JOTL5jdsMCBIRTGhkKY=
Subject key identifier:   7D:C7:E4:E4:E3:46:01:2A:8C:44:BC:2A:C9:FF:52:7F:72:8F:06:E7
Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Certificate issuer:       /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Certificate serial:       01A0C96B0F6E280B565D40E237A58F275009
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
Manifest number:          1151
Signing time:             Tue 22 Sep 2026 14:00:31 +0000
Manifest this update:     Tue 22 Sep 2026 14:00:31 +0000
Manifest next update:     Wed 23 Sep 2026 14:00:31 +0000
Files and hashes:         1: 1-LGChfQu1nwR2Pg99IixD8h_F78.crl (hash: n0k7wDgrb61B4EAZjpqx0dyWnKtwuxbjAN2QsBWNVEg=)
                          2: znlH05wUUI_cREyEO6A7B87acRI.roa (hash: MtJpDkpsvsN3UGCwGXX+CpXcpcwlJRAixBEzCR1dqmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:6b:0f:6e:28:0b:56:5d:40:e2:37:a5:8f:27:50:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
        Validity
            Not Before: Sep 22 14:00:31 2026 GMT
            Not After : Sep 23 14:00:31 2026 GMT
        Subject: CN=7dc7e4e4e346012a8c44bc2ac9ff527f728f06e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1a:1e:1e:95:0c:92:b7:98:14:49:7b:6f:38:
                    9a:76:6d:93:ef:a1:49:b3:a6:b6:f7:1b:9a:91:25:
                    68:37:b5:46:1a:e6:45:c6:ca:de:c5:66:36:0e:76:
                    da:86:d9:70:1e:5c:59:f6:a9:4e:1a:be:77:ca:ef:
                    e3:fa:d9:74:08:70:1f:ac:f6:89:54:e2:f6:09:4f:
                    dc:8a:8b:ac:15:d1:62:d4:27:20:41:d3:26:f6:5e:
                    97:68:90:8a:90:cb:5d:5a:5f:6c:71:fd:39:42:d9:
                    72:54:52:c1:65:61:7e:67:e2:64:bb:e4:85:09:25:
                    74:cf:6b:cb:69:d7:93:f0:e7:d8:48:a1:21:cd:37:
                    ea:c6:c7:c3:9c:20:19:32:95:42:6b:51:1a:d2:89:
                    5c:c9:b8:af:c1:43:a6:4a:45:d4:d5:1e:3e:08:a6:
                    4b:f5:c0:18:f6:f2:fc:c0:dd:ea:93:e0:84:7c:71:
                    f0:87:2f:6b:ee:42:c0:91:ee:05:8c:29:88:dd:22:
                    2f:52:fe:f4:da:94:1f:76:15:7c:58:44:33:0a:71:
                    58:6c:6b:a9:bb:92:01:ac:e4:3e:c7:4c:32:40:85:
                    2f:96:d3:6c:b0:57:49:dd:aa:33:5a:21:8f:6a:04:
                    d0:fb:97:bd:3a:d3:51:5f:43:c4:81:10:0c:5c:bc:
                    b3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C7:E4:E4:E3:46:01:2A:8C:44:BC:2A:C9:FF:52:7F:72:8F:06:E7
            X509v3 Authority Key Identifier:
                keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b2:fb:34:79:0e:6d:89:39:d0:bb:fd:ac:3e:5d:68:e2:d7:
         da:17:4e:04:0e:82:d2:e7:15:96:bb:9f:f8:14:02:cf:fd:a2:
         dc:59:aa:ea:e1:17:fc:5c:9e:fd:ea:87:95:c9:6f:ad:67:b6:
         74:6b:7b:1b:1e:94:97:fd:37:ca:16:4d:4e:ab:61:d7:01:cf:
         3c:74:2b:26:18:11:67:de:04:9a:88:9f:f7:ed:44:a9:a8:2e:
         7b:3f:91:47:85:f1:5e:79:9d:5e:ef:fd:98:a5:a9:b1:e1:f8:
         ca:32:c4:40:9b:de:56:0e:08:e5:b1:15:82:c1:79:5f:24:c5:
         51:fe:c3:39:ce:2a:3d:f6:68:cd:bc:5d:12:78:55:3c:cb:1b:
         90:93:6a:0e:82:6f:dd:59:5c:0c:fb:cf:cf:fc:5c:19:06:03:
         4f:95:0a:c0:c1:53:3b:41:58:a7:30:f6:7b:4c:26:18:ca:cd:
         6e:a3:01:34:76:d5:ca:df:51:c7:f8:fb:05:0e:36:e1:92:5e:
         95:6a:72:11:04:90:bf:0d:af:fa:d2:4c:59:4e:95:f4:f5:c9:
         4e:97:7c:fc:f4:f1:dc:d4:a7:53:2d:5f:38:0f:29:63:cc:0d:
         67:a5:84:bc:26:72:0d:f6:f8:2f:e7:4a:c7:9d:30:f7:79:9b:
         95:38:13:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:08:56 2026 by rpki-client