Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File:                     1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier:          uA8KuQNt27XsYeeTKZ6S1uVhv9EmVlK5vzyzl92+VdM=
Subject key identifier:   99:9C:8C:D5:34:17:8E:87:CB:FB:50:3A:96:AC:82:03:FA:46:AC:25
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer:       /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial:       01A1C4B0E8F280CC74BB82FA6B4A13A92888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number:          106B
Signing time:             Tue 10 Nov 2026 09:01:30 +0000
Manifest this update:     Tue 10 Nov 2026 09:01:30 +0000
Manifest next update:     Wed 11 Nov 2026 09:01:30 +0000
Files and hashes:         1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: /5lNpLYR2sOvfQnmGsWV6XQjfQEgz/ZyhCzVLnnoXcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 09:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c4:b0:e8:f2:80:cc:74:bb:82:fa:6b:4a:13:a9:28:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
        Validity
            Not Before: Nov 10 09:01:30 2026 GMT
            Not After : Nov 11 09:01:30 2026 GMT
        Subject: CN=999c8cd534178e87cbfb503a96ac8203fa46ac25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:1f:30:c1:e9:12:23:e1:c4:7d:45:44:9f:
                    a2:97:6b:e5:cf:5d:13:06:2a:1a:52:d1:8b:f7:e5:
                    f8:14:91:9a:6c:04:fa:50:00:6d:49:83:1c:b4:6c:
                    9d:78:0b:04:e9:f3:02:77:18:5e:04:7b:e5:39:9f:
                    5a:ab:9c:7b:37:2b:f1:73:69:9b:4e:0b:7a:99:9e:
                    d2:90:69:13:a1:1d:44:cf:d3:4e:b3:b6:db:63:13:
                    4e:e0:f3:80:d4:47:94:68:43:53:30:15:e9:75:54:
                    f6:04:bf:15:a6:d8:11:30:73:83:b6:2f:1a:83:f7:
                    ae:02:08:9b:89:88:3c:14:42:e1:9a:18:4a:66:28:
                    92:1f:25:da:77:16:0e:af:e8:69:90:84:68:25:5c:
                    8e:58:e0:91:4e:a2:c8:6f:43:75:9e:ca:c6:88:72:
                    42:5c:dc:1a:a3:9b:91:e0:36:e1:a9:04:7e:f4:88:
                    4b:f7:f0:53:5e:3c:ec:0b:b9:fe:bd:88:4e:a2:a6:
                    83:b2:c9:f2:6e:9f:dd:4c:4c:2c:1a:e8:16:18:45:
                    08:0e:56:42:fb:77:83:f4:09:a1:9d:33:93:25:a1:
                    9c:b6:62:02:ed:88:ee:91:7f:c8:69:63:a2:e6:11:
                    bc:81:ee:9f:17:76:34:28:7c:14:05:d8:a0:06:c4:
                    f8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9C:8C:D5:34:17:8E:87:CB:FB:50:3A:96:AC:82:03:FA:46:AC:25
            X509v3 Authority Key Identifier:
                keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ba:6c:43:0a:eb:37:36:cd:ca:94:96:94:d4:97:06:b8:cf:
         df:d6:aa:a9:48:24:0b:d9:f5:10:be:a3:47:7f:57:4d:27:68:
         26:a7:35:69:73:cd:3a:8c:ec:a4:3c:e4:55:94:fc:3b:dc:a6:
         bd:0e:b4:8e:bb:7e:98:cb:f1:13:37:f5:51:72:18:77:f8:50:
         87:80:df:f5:93:77:ff:02:89:57:bd:92:79:ca:bd:eb:77:a9:
         c3:c0:78:bc:3a:ac:c7:04:47:8b:79:31:b7:3a:c6:c2:1a:74:
         20:98:1e:ae:e2:6d:44:1e:67:fc:a0:c3:da:47:97:43:26:53:
         f6:6b:69:e0:97:4f:b8:c9:26:61:34:f3:d3:ea:eb:43:85:d0:
         d2:2a:c5:53:ee:b1:6d:8b:c9:b5:3f:03:fe:ce:b0:7b:7b:39:
         12:c9:dc:35:fa:e3:04:f4:bd:cc:08:61:b3:04:e5:dd:f7:cf:
         44:3a:72:b5:33:27:f6:64:17:3d:6d:c0:fc:6a:ff:d7:82:35:
         f0:3b:14:46:28:b1:d1:a7:ba:2c:20:c8:1b:96:14:03:5c:a5:
         60:7b:62:15:b6:01:fd:bf:2e:72:94:f1:ac:07:ba:4e:90:91:
         8f:a1:06:a1:70:83:31:d1:7e:84:ed:f8:c6:42:38:5d:7a:d9:
         67:9e:a7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 15:23:25 2026 by rpki-client