Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
File:                     1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json)
Hash identifier:          gVQqaqca40kxKTJhblbiccy6Mc+zQCFX+/XbhbKBuuo=
Subject key identifier:   43:68:A5:02:A4:4D:7C:FA:4E:22:8A:D7:61:5B:29:B7:75:27:63:37
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Certificate issuer:       /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial:       01A0DFBCA05A270D10BD50118FD451476333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
Manifest number:          13E0
Signing time:             Sat 26 Sep 2026 22:01:15 +0000
Manifest this update:     Sat 26 Sep 2026 22:01:15 +0000
Manifest next update:     Sun 27 Sep 2026 22:01:15 +0000
Files and hashes:         1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: HUTakUzLqc5Cl5YTFNt0JS+fyuNI37/7Kb5EhaJbX88=)
                          2: MNcRXpZmo9U1VGyp7iNoe-ahRYc.roa (hash: sUVdf+DEbppS/mcQWvKY4TguTZDnt2ApNazCAD8Sm+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:bc:a0:5a:27:0d:10:bd:50:11:8f:d4:51:47:63:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
        Validity
            Not Before: Sep 26 22:01:15 2026 GMT
            Not After : Sep 27 22:01:15 2026 GMT
        Subject: CN=4368a502a44d7cfa4e228ad7615b29b775276337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:99:68:fb:05:f6:7a:3c:f9:30:42:3a:5c:
                    62:9e:c8:ad:3b:7b:fa:23:f8:6e:75:91:69:29:a9:
                    07:1f:5f:74:fa:89:30:6d:ef:73:7b:38:4e:c8:91:
                    0b:df:fc:49:64:b9:d2:a4:08:ed:1b:df:dc:66:03:
                    5e:5e:98:81:a9:b5:d2:55:5b:e5:4a:0e:a4:e1:b8:
                    5d:56:2b:04:c1:67:d3:ce:d6:2c:b5:c9:5e:49:63:
                    05:22:8c:1d:eb:22:94:6b:0a:fb:6e:e1:68:ba:f8:
                    49:fa:8e:8c:58:63:78:f1:9b:52:dc:b3:0c:cf:2a:
                    88:62:de:e9:24:27:46:06:86:6e:ae:5f:a8:97:83:
                    ae:92:ed:c7:14:8e:da:a3:86:d3:18:f5:1c:c9:96:
                    d8:5b:d3:39:91:25:c8:4d:5c:34:3e:06:bf:d7:ce:
                    83:ca:9a:11:06:a7:c6:1c:c1:ab:a6:51:82:e4:96:
                    d3:fc:7c:67:f0:9b:bf:af:0c:8d:33:00:cf:29:85:
                    b4:5b:71:a5:c4:96:fb:de:4a:37:32:7a:f5:05:e2:
                    3a:e9:e0:15:f5:fc:16:2e:c7:02:7a:82:71:0e:db:
                    af:94:fa:76:86:ab:1f:e7:d6:da:b1:3b:dc:57:cc:
                    13:9e:0f:19:dc:e8:41:c7:3e:2e:24:85:9d:64:26:
                    dd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:68:A5:02:A4:4D:7C:FA:4E:22:8A:D7:61:5B:29:B7:75:27:63:37
            X509v3 Authority Key Identifier:
                keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f6:4d:1e:df:b7:59:1f:cc:89:61:97:c2:40:03:37:ef:61:
         1e:7f:fc:49:24:a6:90:ee:73:92:ac:31:a3:21:40:b1:e6:d7:
         df:c9:0e:d9:3c:de:89:da:76:5d:bd:40:5d:37:a7:e1:fe:9f:
         1e:1b:95:13:84:3e:7a:44:38:a8:01:41:4c:6a:eb:40:ac:da:
         98:17:9b:3f:9d:a0:61:82:bc:7f:da:77:fa:4c:f6:b2:e4:c2:
         05:5e:3f:34:eb:57:25:fc:11:1d:d9:f1:9f:28:8c:e4:de:dc:
         ad:36:a4:1b:f9:c0:fd:32:41:a5:94:b1:fd:4f:80:7c:12:ca:
         6f:b1:37:27:fe:a3:c9:d9:ce:7d:b1:37:ba:62:85:cd:87:a4:
         c3:75:20:45:4f:9f:bf:c0:a6:ac:f4:6a:17:eb:7f:ca:f9:49:
         9d:b8:c0:c7:1e:e8:d6:2a:a8:70:c3:cd:38:58:a3:50:2d:65:
         c3:31:18:61:8b:1d:7d:65:71:06:b0:35:55:57:ab:81:5a:72:
         a1:6d:fb:cb:f2:fb:73:fa:2d:50:b1:3d:c5:6d:b4:ad:eb:1d:
         b8:fd:43:51:9a:8b:b2:90:08:8d:34:9a:d6:fc:36:0e:51:d0:
         c0:ab:7e:91:e9:5f:cd:74:24:c2:58:c5:2f:e3:8a:ee:bb:28:
         de:b2:a9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:39:10 2026 by rpki-client