Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File:                     1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier:          bC2wZAvl3HYN6VNbNdWa6T/O1Uajrulg6yMITkhDFyo=
Subject key identifier:   7E:3A:61:2A:87:98:5F:1C:13:F1:64:31:88:A3:DF:C2:31:50:A0:2C
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer:       /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial:       01A1385ABCAD00ED50779BCE8599CC9E60E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number:          1AB1
Signing time:             Wed 14 Oct 2026 03:00:32 +0000
Manifest this update:     Wed 14 Oct 2026 03:00:32 +0000
Manifest next update:     Thu 15 Oct 2026 03:00:32 +0000
Files and hashes:         1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: EFWhpmOlqYn9ezYYFKtbXLtsWsLHICjxn9Em6MbKQHw=)
                          2: 5a4DGw-2-kfHgsxaKehjNXnuCqE.roa (hash: sUZyzh0MHY05jTMpuhKk6CIitn9nHfz+b8Hqjb1Mmtw=)
                          3: KINZYIE6_XaYNki6NUivcoprCUw.roa (hash: qhCfbFIbX14JzdD9PrKyC8S6QJj73yUa2umRc8K8fPw=)
                          4: OVwVV0u6mJBhfYtSaY2l0o5kYw0.roa (hash: tx3hkLfc3TC5UcoBMbPeFsEp4hR2aCEn9vjo3l+XOeY=)
                          5: SWXQ_yriq_Z6hdo9s_S-su9IOcY.roa (hash: npoD/pw5DyWoHlNaWh25GF0UUSoDz0q9Mp04Q5//gew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 03:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:38:5a:bc:ad:00:ed:50:77:9b:ce:85:99:cc:9e:60:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
        Validity
            Not Before: Oct 14 03:00:32 2026 GMT
            Not After : Oct 15 03:00:32 2026 GMT
        Subject: CN=7e3a612a87985f1c13f1643188a3dfc23150a02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b5:5d:9c:60:3d:21:05:96:8a:3d:fb:50:fb:
                    ab:64:11:30:6c:88:0b:4d:ee:1d:a6:da:8c:30:f1:
                    53:ce:a2:c3:d4:32:26:eb:6f:ab:99:b8:8c:ad:7d:
                    3c:21:13:70:f8:34:c8:ef:f6:6b:f6:df:d7:25:c1:
                    b3:e4:67:ac:60:fc:30:e9:85:57:a8:57:54:f4:08:
                    ae:f1:fd:33:28:c1:48:2d:ab:82:0f:fb:fc:8e:8c:
                    d4:84:09:74:2d:88:f6:05:91:61:d1:ba:95:89:db:
                    00:b7:9e:41:4b:65:dd:9a:7b:a4:5e:c2:78:cf:eb:
                    84:c1:93:02:f5:81:06:6f:be:74:b2:6c:e5:64:59:
                    c5:c3:7d:f5:1a:65:bd:b9:33:b5:44:39:f1:15:a5:
                    35:6c:39:7d:da:5e:20:f0:de:54:dc:f5:fd:41:d4:
                    39:90:97:82:86:db:37:69:1d:de:9f:8a:13:c2:dc:
                    7a:55:63:e1:fc:e4:da:83:88:ae:fd:0e:03:cc:a4:
                    88:b3:39:04:85:d7:38:65:76:9d:ae:18:33:99:ff:
                    fd:ae:06:c5:ef:e8:73:a7:51:ec:fa:db:9b:94:cb:
                    41:f2:72:c7:f1:01:49:3d:13:9d:f5:29:77:64:e3:
                    eb:04:ee:fe:8b:bd:09:ba:04:95:f7:0f:1d:87:94:
                    dd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3A:61:2A:87:98:5F:1C:13:F1:64:31:88:A3:DF:C2:31:50:A0:2C
            X509v3 Authority Key Identifier:
                keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:84:ba:2c:74:e6:47:79:78:d1:49:15:57:29:51:4f:23:a3:
         60:ee:6d:7e:a1:7b:f0:3d:cb:ab:06:fb:a8:7d:8f:ea:b4:ff:
         26:8f:33:b7:5f:66:ca:97:56:74:5a:0e:80:1b:48:50:8a:a2:
         9f:9d:43:d6:b9:e3:33:07:4e:2c:e3:6f:f0:f6:10:db:a6:53:
         18:3a:79:ba:bb:49:b1:87:ad:46:9b:07:f5:39:12:f1:84:4b:
         e4:a1:db:5d:8e:23:57:f5:3b:cb:8c:66:9c:0e:6c:17:9c:4d:
         34:1d:9e:5b:4c:4f:31:71:91:3b:0a:d0:49:8d:80:e8:de:fb:
         c7:0d:7e:97:73:e4:a8:95:fe:65:d2:80:33:7e:dd:71:2f:36:
         0b:49:86:c7:9d:63:bf:ef:68:61:00:49:99:54:1e:6e:12:2f:
         ed:dd:24:21:9b:ee:ac:33:82:ad:11:22:48:bc:bf:90:21:3d:
         d3:02:a2:ed:9c:91:9a:3c:09:b6:93:c5:00:1f:ed:60:71:55:
         ce:0b:46:4c:64:ad:db:41:e2:c7:6e:2d:fd:c4:39:86:82:cf:
         16:85:02:d0:ad:e8:8e:62:bc:d4:36:6c:22:3e:4c:99:7b:96:
         b4:fe:6f:e4:47:30:97:de:b5:8f:b3:2c:c4:97:25:58:b9:ef:
         ff:10:2d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 12:48:06 2026 by rpki-client