Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
File:                     1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft (raw, json)
Hash identifier:          7sOZQx3c0CIDvW2xWAi43u69UGBiyhZBwbhrs77kX2c=
Subject key identifier:   A3:D4:62:7A:92:AD:AD:46:1E:7D:7D:FA:01:03:45:DD:C1:BD:11:17
Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
Certificate issuer:       /CN=f9951ba56329323b4c60f620d6a7391e707b5556
Certificate serial:       01A10693A76055769EBB225A7F04A8F0EDC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
Manifest number:          12A8
Signing time:             Sun 04 Oct 2026 11:01:42 +0000
Manifest this update:     Sun 04 Oct 2026 11:01:42 +0000
Manifest next update:     Mon 05 Oct 2026 11:01:42 +0000
Files and hashes:         1: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl (hash: akcIi1x9h+/Sr89gqh9G81KnrVNE/P1kbN6YWg+XA58=)
                          2: 3KARvcQJLBK_AN72q-v-VXBedTc.roa (hash: QFK7Ue4or8LMr7VexDK6GWjCaMT28dD7LoXQN+qlc8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 11:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:93:a7:60:55:76:9e:bb:22:5a:7f:04:a8:f0:ed:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556
        Validity
            Not Before: Oct  4 11:01:42 2026 GMT
            Not After : Oct  5 11:01:42 2026 GMT
        Subject: CN=a3d4627a92adad461e7d7dfa010345ddc1bd1117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:23:de:50:97:e0:cd:8c:b1:20:4e:db:70:
                    6f:de:03:9d:61:6b:e4:17:81:b9:73:95:b2:d0:56:
                    53:fe:5c:22:d4:8f:b6:72:2a:f6:ee:e9:8e:28:90:
                    cd:b5:f2:40:5e:ee:30:b7:8c:3c:1b:4c:a4:a7:54:
                    cc:cd:4b:f9:cf:c8:d1:a2:e3:0a:e6:f2:98:9a:87:
                    1f:17:c7:b8:a6:10:9e:ab:13:4d:9b:6d:cd:54:a2:
                    0c:07:80:0a:0b:78:0f:71:f2:06:d1:d9:f3:f3:21:
                    d8:ea:75:b3:3d:aa:f3:cb:98:67:6a:6d:17:d3:08:
                    6a:54:52:b0:ef:e7:be:ed:0d:a5:19:ae:e6:37:fe:
                    58:2b:1e:24:7b:1c:30:a7:00:af:e6:47:a5:fa:bb:
                    40:b8:c0:ab:67:88:c9:5b:0f:a6:63:b6:d3:ae:34:
                    31:04:be:df:d3:08:55:90:21:ab:17:20:95:32:ef:
                    07:e5:16:1d:2f:16:36:6e:09:59:83:1d:32:e7:fa:
                    83:ad:3e:9e:ba:e4:ee:15:cf:39:2a:1a:ad:12:7c:
                    52:25:2f:ac:14:13:af:0b:ca:95:99:88:d4:f1:ab:
                    8c:22:6d:43:5d:f7:2c:a3:28:83:06:4d:02:7d:bd:
                    44:cd:87:d5:a7:6d:67:80:78:67:ad:b5:35:5d:b6:
                    26:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D4:62:7A:92:AD:AD:46:1E:7D:7D:FA:01:03:45:DD:C1:BD:11:17
            X509v3 Authority Key Identifier:
                keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:1d:b0:86:df:bf:8f:76:b1:34:eb:67:5f:6e:3e:41:31:9b:
         99:8b:83:e1:ad:23:4b:6b:ea:ff:7c:5d:c1:56:58:35:14:3e:
         d4:f2:5e:2c:83:f7:51:27:66:c5:6f:2f:85:dd:45:1e:b4:2b:
         30:4f:53:44:d1:15:c6:0c:68:71:7a:3b:db:1e:98:55:17:27:
         13:32:ca:72:16:ad:f5:42:08:c6:f2:e7:98:43:80:96:a6:ea:
         d9:c3:60:e6:43:24:c6:50:14:26:43:09:9b:97:81:fb:85:f5:
         7e:6c:eb:4b:cf:3b:3f:0c:97:52:9a:b3:15:bf:74:59:bd:8c:
         17:72:97:fc:38:08:2c:15:30:e4:53:5b:c8:e4:1f:45:2f:55:
         9a:31:40:f3:6d:e1:54:ff:04:8b:fa:f8:8a:34:02:37:9b:9a:
         4a:86:0f:1e:00:cf:f8:c3:3c:ce:59:4b:8a:bd:7a:21:35:b3:
         f2:25:7e:0a:f8:09:2e:90:fb:5f:b8:49:f5:5e:d2:4a:b6:c8:
         98:40:ad:3a:81:a0:9b:b8:fb:75:e3:d1:22:8a:84:28:8e:1b:
         7f:e9:01:67:05:7b:93:2b:05:14:ec:dc:64:3e:83:6f:d6:1a:
         f1:aa:25:c7:2e:78:8a:ad:15:ba:bd:44:5a:13:29:03:0f:49:
         f4:fb:6e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:24:46 2026 by rpki-client