Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File:                     C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier:          WVChilGS81dEA7T7Rm+uODyFwwF9A0JYkJAzCFaplsU=
Subject key identifier:   FC:44:AF:AE:4B:3E:BB:C1:77:86:F1:C1:F0:32:E3:D9:EE:02:77:80
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer:       /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial:       01A0C10CDE4B54D8CC6AB745967384268C79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number:          1A65
Signing time:             Sun 20 Sep 2026 23:00:40 +0000
Manifest this update:     Sun 20 Sep 2026 23:00:40 +0000
Manifest next update:     Mon 21 Sep 2026 23:00:40 +0000
Files and hashes:         1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: 7+Set8eLMBBMTjQHb16Ys7hqHDHJsjkuk1djhezkc9o=)
                          2: LeQ3hObwwgpbJJGcKzLsHqEGLVo.roa (hash: v9/GkM02Xeyz1OUCXNYSBaAnPEbgD0Y89kH3sO1Lbco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:0c:de:4b:54:d8:cc:6a:b7:45:96:73:84:26:8c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
        Validity
            Not Before: Sep 20 23:00:40 2026 GMT
            Not After : Sep 21 23:00:40 2026 GMT
        Subject: CN=fc44afae4b3ebbc17786f1c1f032e3d9ee027780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:4a:43:58:96:80:87:6c:12:34:0b:56:e1:
                    aa:c5:bf:85:d5:d7:2a:a7:77:c0:04:76:fa:e2:40:
                    61:79:6f:ea:57:2f:da:72:37:93:4a:93:3f:f0:fc:
                    59:2d:e7:0f:06:e5:ef:f6:ee:05:03:ef:f6:c3:4f:
                    ac:18:6e:ee:2c:9e:c1:7e:90:f3:48:42:98:b6:31:
                    84:cc:dc:df:72:dc:86:87:aa:a1:85:b6:01:57:6e:
                    cf:cd:6d:e8:e3:f6:f3:7d:9b:30:19:e3:94:c1:cb:
                    26:4a:68:3b:41:58:21:20:ef:65:6d:02:c3:33:ca:
                    73:38:4f:60:79:38:fc:3b:d9:82:52:a1:82:5b:78:
                    a2:19:92:5a:c9:7e:9f:50:e2:10:01:2a:f0:95:bb:
                    d3:36:c7:cd:8c:97:5d:6b:0f:d4:fc:13:6f:d0:25:
                    de:21:b8:03:2b:b2:2c:56:0f:15:37:0c:28:29:9c:
                    f4:fa:90:d1:e3:29:c3:fa:22:30:59:45:41:65:8f:
                    dc:48:81:46:0d:cb:cc:f9:a4:07:9e:5a:37:79:13:
                    f9:42:cc:eb:b1:74:5a:5c:c7:12:d3:f8:3e:34:6c:
                    c5:d6:17:ba:c2:a3:21:a2:bb:cb:6e:a7:51:75:f6:
                    31:bd:aa:30:93:16:43:90:89:e9:c8:f1:a6:a7:c5:
                    16:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:44:AF:AE:4B:3E:BB:C1:77:86:F1:C1:F0:32:E3:D9:EE:02:77:80
            X509v3 Authority Key Identifier:
                keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a6:10:9b:43:38:ed:21:69:1e:44:53:96:9e:8d:91:93:e0:
         56:1f:21:b4:01:76:ee:9b:3f:08:aa:c4:98:82:34:11:86:e8:
         69:56:75:02:ce:51:22:80:21:cb:0b:23:64:18:b2:7c:f6:d8:
         36:8f:0a:8b:84:a5:9e:8b:3f:15:af:b6:52:0f:a0:a8:97:12:
         80:00:b8:72:ab:47:12:84:42:55:29:e0:3e:55:2c:7c:fe:8e:
         26:01:41:d5:df:1f:8f:95:b0:33:c9:44:d5:3c:63:2c:44:16:
         e8:34:56:a5:7c:8e:9b:67:6d:21:61:f2:09:f0:6e:78:02:09:
         6d:65:ac:9c:e3:66:66:08:d1:cf:4a:fc:c2:50:77:53:de:16:
         8c:02:3e:ad:b9:9e:70:af:6b:db:7a:e3:72:13:6d:4c:0e:37:
         da:bd:55:4a:91:32:4c:88:e5:af:e4:9f:68:2f:c7:43:68:fe:
         3b:a6:35:bf:8c:43:a4:46:31:c4:fd:af:44:ef:20:9b:62:4d:
         5f:57:6c:be:d3:d2:81:cb:99:2c:7f:b1:8f:fe:04:88:fa:45:
         b6:69:b2:76:71:64:1b:cc:fe:f1:f0:8e:c2:56:3e:35:95:70:
         61:49:74:d4:14:be:1a:bc:9f:a4:54:12:27:39:b7:23:7c:34:
         af:78:a5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:41:45 2026 by rpki-client