Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File:                     1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier:          ao6e+2Mka6nLqZekluQwewgMjeQdqolz6Kt69nBIO+U=
Subject key identifier:   F8:66:A7:C6:F8:74:43:17:24:EE:68:5C:27:ED:79:CE:70:D9:9B:24
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer:       /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial:       01A0C09ECC53A1F7E8A8D6E6139F21351F22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number:          156B
Signing time:             Sun 20 Sep 2026 21:00:27 +0000
Manifest this update:     Sun 20 Sep 2026 21:00:27 +0000
Manifest next update:     Mon 21 Sep 2026 21:00:27 +0000
Files and hashes:         1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: EdVuuOyrW9lu7GApit3fGxbn2TifNfu+87sxX3Og+U0=)
                          2: Gq5m_G-Nn2cWTHSMId-lsWbhgww.roa (hash: II7AjmOdLqNqKi9JZQ0wHWiOvxzW1DAYgv+REwV7TLk=)
                          3: L-k_SL_s92jHONTQ4_qtQMQ0hCo.roa (hash: Ktu7W01HQP3w+NwclsoGu7pxp+ATVr6cehyCqENMhvY=)
                          4: OyDJxa-IKI9M6DEab_QdT2ZiPxM.roa (hash: TllnG1yiPkW1Kik3L852N3VXwGZ/qaH7M72QCj3GUaE=)
                          5: UZ7ePce2V0p3ZbzWXJ1ZgbnwDMQ.roa (hash: 3DbxDok/x0GzcOvaTUOPhPb4K0GtiOZj5rAjknMwnN0=)
                          6: xW-_5BziklddMP4N1WRDWUysaGI.roa (hash: 2PigZdbAmf20HzjgKmVA5WGwWsuRJUzgmLUGliAvzus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:9e:cc:53:a1:f7:e8:a8:d6:e6:13:9f:21:35:1f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
        Validity
            Not Before: Sep 20 21:00:27 2026 GMT
            Not After : Sep 21 21:00:27 2026 GMT
        Subject: CN=f866a7c6f874431724ee685c27ed79ce70d99b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:a7:a8:e0:46:12:9f:66:46:d0:32:25:28:
                    44:7d:31:c8:8a:6d:4e:44:15:50:8c:cf:7d:79:e0:
                    0b:6d:73:e3:5c:aa:40:02:bd:3f:d6:59:7b:6e:7e:
                    ba:7f:84:32:44:bd:6a:ed:9d:23:c4:42:6d:78:23:
                    ac:91:3e:b8:13:51:af:eb:5a:5c:e7:ae:67:72:9f:
                    75:34:a3:2d:68:a4:c9:e4:f8:60:d9:f2:b7:5f:9c:
                    ca:05:5d:18:7d:3f:71:23:aa:b6:c8:d2:1b:f3:1d:
                    cd:96:4f:ae:e9:f2:c8:d2:fc:ad:a9:da:30:34:b0:
                    5f:7b:7d:1c:59:da:0a:17:8b:60:73:e2:f2:21:1e:
                    08:bb:5d:93:10:84:78:fd:9a:4d:07:56:86:02:a7:
                    88:ba:86:a4:ca:51:2b:cd:e3:ef:7f:a2:2a:cc:79:
                    5f:49:1d:f7:38:2c:e9:6b:63:ec:6a:5e:9f:c8:e3:
                    5b:9c:f1:20:c7:09:80:02:f1:29:f8:c4:fc:8d:17:
                    12:9b:15:eb:78:e3:e1:73:e7:d3:6c:7e:c7:00:02:
                    25:2d:fe:eb:5e:1a:8d:17:b4:56:37:c5:78:0a:58:
                    b2:40:61:46:6d:ae:50:ca:45:a6:e1:ad:d6:44:88:
                    35:63:38:e5:fa:02:a9:25:48:ae:ca:dc:9d:d4:94:
                    ee:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:66:A7:C6:F8:74:43:17:24:EE:68:5C:27:ED:79:CE:70:D9:9B:24
            X509v3 Authority Key Identifier:
                keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e0:11:85:d9:4f:7d:c1:73:2e:4c:f8:ea:01:76:e0:12:c1:
         7a:77:25:80:1e:7c:a7:c1:af:dc:71:ec:44:51:0c:da:17:39:
         44:9f:84:93:a3:4d:88:a2:01:2b:5b:16:d2:af:2f:db:13:bd:
         40:ce:ff:c8:09:4b:12:36:4e:8d:df:b5:6c:91:d6:93:43:7a:
         83:83:78:62:cb:ae:91:e0:72:fc:44:12:9d:ef:0f:6e:49:96:
         b8:b5:40:53:ed:5b:06:ae:4a:e9:d7:32:4c:72:4f:38:61:36:
         88:38:25:60:fd:ee:80:8f:77:94:6a:3b:d3:80:2c:91:c0:43:
         a6:b8:dc:1c:91:67:11:b6:4d:b5:3b:09:e0:7b:12:0b:c6:76:
         ed:5c:61:28:9f:c1:12:6f:5b:78:3a:18:11:a2:5b:ce:fb:18:
         cf:18:9c:5c:36:b2:7a:fa:e2:bf:01:06:99:cc:67:4f:67:7a:
         52:f5:45:24:2b:a1:f8:2c:6f:65:cf:b9:ca:ad:73:6f:7e:4b:
         61:db:b5:01:f4:21:59:2f:d5:1a:04:ef:80:4f:88:fc:4b:9b:
         1b:56:e4:ef:b5:f8:6a:a7:9b:d9:5f:89:f8:2d:b0:64:81:01:
         6e:9d:0e:7a:88:1a:51:47:9f:0d:a1:8c:30:d9:76:77:ce:9d:
         1e:3e:0c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:17:25 2026 by rpki-client