Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File:                     1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier:          QfFRs95+QvoRGCRuaPOcKR7xiV0dHn4A4TLwikru+Yc=
Subject key identifier:   07:67:2A:3D:BB:17:73:9C:BF:26:F1:B8:C4:6B:55:1C:08:85:C9:5A
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer:       /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial:       01A0C66A6883D168A45F717E52F3FD872853
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number:          09E5
Signing time:             Tue 22 Sep 2026 00:00:57 +0000
Manifest this update:     Tue 22 Sep 2026 00:00:57 +0000
Manifest next update:     Wed 23 Sep 2026 00:00:57 +0000
Files and hashes:         1: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: Y1UBfyWpxWwvRSpqYo5U+qSC9FCqkjA0kpvfvN1FvJo=)
                          2: abVrM-FislRQr4Jmc_QgEdjxoJk.roa (hash: EdLdAhibmMBnrzkLj3SZLrtAjzaNkVfN1saf4F1Axa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 00:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:68:83:d1:68:a4:5f:71:7e:52:f3:fd:87:28:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
        Validity
            Not Before: Sep 22 00:00:57 2026 GMT
            Not After : Sep 23 00:00:57 2026 GMT
        Subject: CN=07672a3dbb17739cbf26f1b8c46b551c0885c95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9f:22:c3:5d:98:92:6f:5d:d1:6d:0b:3c:47:
                    c0:8e:e0:0c:e4:fa:5a:55:d3:3b:16:15:14:9a:9b:
                    fa:cc:5c:26:b2:43:46:d9:d2:9f:1e:e9:31:1e:75:
                    e5:43:bc:74:21:e4:0f:b7:e8:05:30:c9:f2:38:c0:
                    21:d7:6c:e6:7c:f8:22:3e:04:24:6b:ec:d0:e3:e7:
                    4d:9a:e3:3c:0a:21:b7:22:41:23:3a:cc:13:28:2d:
                    e3:7a:7c:a7:e1:f6:f6:ad:2a:a6:84:b1:bb:0e:05:
                    60:72:dd:9f:36:1b:26:5b:8c:45:a6:72:bf:6d:f2:
                    43:5a:23:d2:8c:4b:ee:d8:5d:72:b3:1f:4a:bd:18:
                    eb:b8:1e:39:c6:86:b7:65:19:45:26:05:d0:17:50:
                    6f:0c:48:d7:dd:72:b5:0b:b6:93:d3:54:ab:e3:96:
                    ad:ed:06:09:6e:d1:00:9b:70:34:66:76:1b:b6:51:
                    cf:67:ab:7d:1a:12:fe:0a:c2:53:83:d1:23:9d:f1:
                    4f:7d:61:77:77:41:5e:18:50:70:19:c0:62:45:30:
                    df:fa:8e:16:ab:5f:5c:16:42:b5:42:47:0b:65:88:
                    ad:99:99:07:2b:da:45:be:c1:ce:df:03:7f:4b:4e:
                    3c:73:7a:92:24:a0:34:7f:4c:67:1c:5e:97:04:0c:
                    0b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:67:2A:3D:BB:17:73:9C:BF:26:F1:B8:C4:6B:55:1C:08:85:C9:5A
            X509v3 Authority Key Identifier:
                keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:54:9a:83:8c:3c:e8:6a:91:44:4b:66:4c:7b:d5:58:8a:25:
         18:b3:7d:1b:22:32:0e:99:f2:e1:ce:6e:80:61:00:e4:10:5b:
         d4:95:c8:1d:93:c5:4d:4a:37:2c:1e:4a:4b:53:c5:b4:d1:e9:
         b4:69:6b:c9:72:e8:15:be:ff:ba:52:77:33:49:40:63:fc:2f:
         45:c4:44:91:ea:69:4a:6c:48:e6:e5:52:8e:5f:66:7c:ae:2e:
         b5:33:ec:0c:16:82:75:6b:90:5d:c3:15:9e:f0:f4:6e:e9:ee:
         c9:1f:c6:49:f5:d7:20:3c:74:2b:07:d0:6d:c6:04:e3:9c:87:
         cb:7b:1b:2d:05:0c:59:46:10:dd:f6:b6:76:e0:99:c1:71:bb:
         4d:61:a9:81:2e:57:91:b3:d0:64:9f:14:51:7d:b1:24:1c:e1:
         3a:78:91:a1:50:b7:63:04:2f:51:c4:62:30:af:ad:91:03:41:
         f2:64:62:24:fc:a6:ae:2d:c0:e2:68:6a:48:21:ce:76:39:d6:
         60:65:6b:a6:24:41:fc:81:de:1d:7b:fd:72:d7:3c:ab:df:f4:
         fa:0a:2d:c9:e4:ce:29:81:47:03:c6:be:70:92:b2:e2:1b:11:
         91:d8:b2:74:9f:77:7e:0f:85:2f:f9:10:d4:97:45:41:52:6c:
         47:57:d7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:44:05 2026 by rpki-client