Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
File:                     1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft (raw, json)
Hash identifier:          r64BfllpMCdSCOauR/G6u8Z0ciuuRFq1wlxVHZf0jEo=
Subject key identifier:   14:42:E7:71:68:BE:85:49:90:22:08:11:D3:AA:F4:1F:91:8E:F0:40
Authority key identifier: FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
Certificate issuer:       /CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Certificate serial:       01A0E7AE7FFDCB005D8ECA5E014DC4E06F8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
Manifest number:          1A79
Signing time:             Mon 28 Sep 2026 11:02:47 +0000
Manifest this update:     Mon 28 Sep 2026 11:02:47 +0000
Manifest next update:     Tue 29 Sep 2026 11:02:47 +0000
Files and hashes:         1: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl (hash: wTXpOWwk6llowoOWBjRlqlu9R7O7hT1N8jNcWui8dGA=)
                          2: _mlWLWGEeY126ouf9N2RBXWxQWs.roa (hash: hRcT7FQAvX81ZtVwVTQnfnVplPzsGoXPbu1Og6gLElU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 11:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:ae:7f:fd:cb:00:5d:8e:ca:5e:01:4d:c4:e0:6f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
        Validity
            Not Before: Sep 28 11:02:47 2026 GMT
            Not After : Sep 29 11:02:47 2026 GMT
        Subject: CN=1442e77168be854990220811d3aaf41f918ef040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cc:bb:ef:82:c4:80:e5:db:8a:d5:68:ee:f3:
                    65:05:a7:4f:e6:5c:9b:58:3f:fc:ba:9f:ff:7b:d9:
                    4b:7c:48:18:77:ee:b9:4e:72:7f:55:75:b8:c8:e9:
                    66:03:5d:f1:a2:4d:bd:5a:7a:a2:58:1a:22:46:56:
                    98:ca:ba:4a:c2:10:0f:6b:f3:44:aa:7f:92:ec:94:
                    4e:b0:8f:5b:05:2a:d5:18:b9:9e:e1:ff:ff:f4:3d:
                    ee:d2:b5:b0:97:11:2f:36:d5:01:58:6c:b0:37:54:
                    e6:d5:4c:e6:1f:7b:99:57:e2:eb:d8:32:b8:67:23:
                    0d:8c:b2:f3:a7:c2:35:7a:12:cc:c8:49:e1:2a:06:
                    57:9e:5a:af:99:bd:f5:2a:c4:c9:86:8b:1f:90:60:
                    4c:08:ca:2e:f8:5f:39:19:29:99:bd:59:5f:52:04:
                    eb:a7:2f:fa:59:30:b3:9b:d1:10:42:42:0f:e7:ae:
                    3a:e5:73:38:0e:26:c7:85:23:dc:c4:db:a6:ec:5e:
                    b6:4d:95:29:67:47:13:ec:a7:17:35:7f:62:79:9a:
                    08:ec:1a:3d:50:6e:e0:f7:07:a7:08:f6:ab:e8:95:
                    69:3e:c5:89:f7:f4:3f:92:06:59:cc:89:29:e2:14:
                    83:5e:0e:7f:72:62:17:aa:53:02:2b:c3:9f:7e:91:
                    a8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:42:E7:71:68:BE:85:49:90:22:08:11:D3:AA:F4:1F:91:8E:F0:40
            X509v3 Authority Key Identifier:
                keyid:FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:23:bc:ca:71:a6:5d:25:7c:52:6d:3b:d4:5e:72:e0:fa:c7:
         98:96:8a:19:c8:54:1f:bd:20:3e:03:d1:ab:21:5e:24:34:7c:
         a4:65:65:8d:70:c7:1b:6f:16:05:35:eb:95:87:f7:20:25:d3:
         4a:d3:02:b9:72:5f:59:f8:dc:91:f9:0c:c8:14:1b:11:6b:de:
         c4:e0:aa:31:5d:60:c9:77:5f:a0:26:b4:0c:a8:a5:42:24:89:
         d2:05:70:c2:20:3a:a7:0f:de:7a:80:2d:f7:56:90:f6:d6:c9:
         e2:55:77:b4:a8:35:f8:31:c3:83:83:7f:bc:5b:b4:8d:78:16:
         07:77:18:bf:69:f6:60:3c:9c:8d:ed:47:ba:3e:dd:75:3e:cb:
         b7:aa:a2:10:3f:17:f6:5c:36:e2:2a:3f:5e:a8:d0:66:df:2f:
         af:62:6c:9d:54:f3:72:83:72:5e:48:9b:52:81:4a:2e:b7:0f:
         96:4b:72:81:1a:05:f0:bd:50:5f:08:1a:d5:90:66:58:21:08:
         7c:3e:46:3d:61:90:85:73:83:c8:53:70:cb:ae:7b:b3:c0:3b:
         aa:ab:d3:7b:69:04:99:b8:9d:28:0b:d1:50:a8:c8:7a:47:bb:
         13:4b:d9:46:58:c6:f9:66:26:63:16:b0:55:d6:2b:1c:89:1c:
         d8:92:93:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:10:07 2026 by rpki-client