Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
File:                     1sSAuslyYH_atgVZOoS4NkxqsbA.mft (raw, json)
Hash identifier:          pemFjbrNSrWGpUJRfmB0m7crkLY4OP50A0XW0BX5Lpk=
Subject key identifier:   F9:9E:B6:CB:3C:04:CB:37:40:E1:43:31:FD:FD:A8:34:C6:59:B5:EB
Authority key identifier: D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0
Certificate issuer:       /CN=d6c480bac972607fdab605593a84b8364c6ab1b0
Certificate serial:       01A111F24AF900D9810829469A2021929571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
Manifest number:          1A8F
Signing time:             Tue 06 Oct 2026 16:00:53 +0000
Manifest this update:     Tue 06 Oct 2026 16:00:53 +0000
Manifest next update:     Wed 07 Oct 2026 16:00:53 +0000
Files and hashes:         1: 1sSAuslyYH_atgVZOoS4NkxqsbA.crl (hash: ATxYebUtLV6d8yPOm47qCNqjTXXnxN5goVgR/xMwAdg=)
                          2: tW-LG8p_My_QT_8i-gjOqmzJ1Ts.roa (hash: YItMICwV7cTxmKYQakjHX3JondYYmxrBy1kmJFx/JBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:f2:4a:f9:00:d9:81:08:29:46:9a:20:21:92:95:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6c480bac972607fdab605593a84b8364c6ab1b0
        Validity
            Not Before: Oct  6 16:00:53 2026 GMT
            Not After : Oct  7 16:00:53 2026 GMT
        Subject: CN=f99eb6cb3c04cb3740e14331fdfda834c659b5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:d3:7e:35:f2:86:30:aa:77:63:95:d8:42:
                    2f:31:ce:48:47:1f:8f:37:68:cc:e9:b5:b1:cb:d6:
                    e5:a5:bf:95:b4:0f:91:66:72:75:f0:da:85:c3:51:
                    de:d6:54:b9:5b:1c:c0:8e:e3:fb:23:59:78:4c:54:
                    0a:2f:8a:38:61:eb:1e:2b:63:8a:7e:65:e6:27:6c:
                    f9:70:0e:f3:71:77:ed:7e:08:ae:c5:9e:7f:5a:77:
                    01:75:2c:61:24:95:d0:e4:b1:f5:28:32:e5:8e:13:
                    a2:a7:0b:9d:93:54:57:66:a6:43:b2:37:ce:90:1c:
                    35:03:69:ff:ef:62:3a:1f:34:0a:31:63:c0:98:12:
                    ca:43:2f:b5:72:ed:cf:23:2c:d0:7c:a8:42:b8:55:
                    d6:24:dc:af:8b:a0:64:30:2c:e0:42:56:58:60:72:
                    f3:6b:8e:35:c3:31:9e:8a:c4:0d:7c:ff:2a:e4:0e:
                    cc:fd:c8:49:7c:75:e1:39:d2:dc:3d:78:86:d6:b5:
                    82:9c:53:37:ce:7e:36:06:14:e2:7f:10:e7:2b:7a:
                    23:23:a7:45:23:64:e1:38:02:ed:f5:af:b4:83:cf:
                    2d:cc:1d:bd:96:3d:7c:4a:0c:30:39:19:3b:dd:92:
                    76:38:c4:dc:23:e2:30:a8:4e:e3:76:d6:2e:5b:3b:
                    b2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9E:B6:CB:3C:04:CB:37:40:E1:43:31:FD:FD:A8:34:C6:59:B5:EB
            X509v3 Authority Key Identifier:
                keyid:D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:4d:f9:99:b3:f0:92:74:5e:dd:b2:80:17:62:68:91:b8:62:
         b0:d9:f9:e2:ce:82:ad:9d:a1:01:e5:35:53:ac:3b:4f:80:9f:
         3a:f7:19:f6:50:0e:b4:27:33:e1:d9:68:3f:60:dc:55:97:47:
         52:5e:6d:16:60:67:cf:27:23:ca:ed:c8:ce:ba:a3:ba:03:1b:
         c4:b5:4f:02:0a:87:1f:9e:74:d5:84:9c:80:0b:ca:3b:d5:ab:
         64:10:a0:2d:e3:fa:14:f7:d2:2c:85:6a:e6:c1:c6:7d:1f:28:
         be:9f:ed:b4:47:05:64:9c:f6:56:c3:04:49:4a:a7:d7:3b:56:
         ba:f9:d9:e0:c2:a2:b1:ba:06:1e:02:20:79:66:5c:c0:3b:2a:
         55:12:a5:af:c5:b4:d9:40:a9:81:68:b9:70:b9:42:be:de:c2:
         1e:11:55:2b:d5:ba:5f:43:62:a0:81:39:7b:40:ef:05:cd:15:
         81:76:62:9c:99:11:91:7d:2a:41:ec:96:1f:cd:41:df:9e:a5:
         d3:6a:7a:f3:c1:4b:87:7b:7e:4e:d3:22:c9:58:26:d6:9c:fc:
         28:27:fc:8e:7b:5b:a7:69:0d:f7:9e:88:49:45:84:f0:79:71:
         ff:a5:91:90:d7:b0:89:d7:7a:5f:91:bf:01:15:d2:53:8c:97:
         07:14:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:01:31 2026 by rpki-client