Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
File:                     1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json)
Hash identifier:          E3wYQORzGbz52bIqOXcnardnyVzoO3+mV//xogXtiPQ=
Subject key identifier:   76:66:87:59:4F:CB:F2:7E:4A:F3:70:29:AA:B0:1D:35:A6:C1:A3:DB
Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Certificate issuer:       /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Certificate serial:       01A0CDB67EE2DEFEDAFAC94B293B75A1E8D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
Manifest number:          1A68
Signing time:             Wed 23 Sep 2026 10:01:24 +0000
Manifest this update:     Wed 23 Sep 2026 10:01:24 +0000
Manifest next update:     Thu 24 Sep 2026 10:01:24 +0000
Files and hashes:         1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: BneZYOaahILJAq3cSLczoj3No3+krib6jhbXD9OBL4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:b6:7e:e2:de:fe:da:fa:c9:4b:29:3b:75:a1:e8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
        Validity
            Not Before: Sep 23 10:01:24 2026 GMT
            Not After : Sep 24 10:01:24 2026 GMT
        Subject: CN=766687594fcbf27e4af37029aab01d35a6c1a3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f4:4d:b4:b8:df:d5:f2:bd:3a:09:e4:24:c0:
                    14:2e:97:be:93:13:39:4f:12:db:a6:4b:b3:ff:94:
                    80:61:d7:f0:46:83:73:44:b7:12:36:3a:8a:f0:47:
                    83:1c:f4:19:ac:97:54:cc:9c:3c:d6:f2:0b:65:c6:
                    54:a5:56:7e:54:93:fe:3c:04:46:f3:6d:76:c6:30:
                    02:17:7b:11:72:02:39:12:53:de:17:c9:cf:3b:dd:
                    27:23:8e:84:85:38:a6:d6:c8:6e:65:4a:91:50:ab:
                    41:42:fc:df:5f:27:7b:36:8f:50:43:f4:3e:ee:88:
                    12:8a:89:fb:37:2b:e0:a2:90:83:90:9c:a3:fe:ec:
                    48:a5:fc:83:71:26:3f:77:29:5e:17:d2:0b:cc:d8:
                    39:62:4e:8e:1c:e3:38:8f:f8:5d:38:a2:89:1e:e0:
                    e5:47:0f:1b:7e:c2:8f:da:a8:e5:c8:cf:c1:78:02:
                    63:28:b8:4c:ef:19:02:23:b4:c9:1a:c4:70:5e:85:
                    19:02:a4:f3:0e:2d:62:a0:04:97:71:0e:a5:11:c6:
                    27:26:ad:3a:49:55:75:fc:b7:9c:d3:36:4c:2f:95:
                    a4:9f:da:30:5e:dd:26:41:34:44:96:f3:06:4e:9b:
                    ec:06:64:c9:36:17:c6:cd:69:82:42:dd:1c:1e:ce:
                    5d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:66:87:59:4F:CB:F2:7E:4A:F3:70:29:AA:B0:1D:35:A6:C1:A3:DB
            X509v3 Authority Key Identifier:
                keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:90:6d:a2:8b:0b:5e:30:6a:e7:8a:e4:d1:34:fb:2e:ca:42:
         d3:b8:ca:ab:67:6f:bd:60:91:3e:b3:19:24:07:ed:d6:a4:fb:
         6b:30:1b:8a:51:f7:3c:87:f0:92:a5:a2:2a:3c:23:c7:d7:56:
         35:4e:25:74:00:7d:7e:e7:7a:ff:d7:a1:11:9c:ea:af:da:70:
         cf:39:e2:63:9f:b0:0c:33:5c:d9:0c:94:8a:c1:cf:44:b6:1a:
         05:d2:bc:48:90:e1:6b:6e:ae:d4:c5:4f:f1:b6:ad:e4:e0:f9:
         65:93:55:3c:b8:ff:45:ba:fd:be:f8:4a:36:a0:5b:5a:78:88:
         be:98:00:29:21:e9:f2:5e:e6:3a:63:10:7f:d5:e2:bd:27:37:
         6c:68:78:66:5a:9e:28:50:7f:b0:3c:92:56:dc:b0:60:d9:ee:
         3a:c1:18:82:87:01:e0:d9:fc:74:0e:f2:58:e0:b6:5a:d0:e7:
         0b:50:d0:cf:47:f5:a0:ae:b0:1f:dd:2e:ee:71:70:fc:c3:d5:
         71:9f:c0:7a:7c:8f:ef:47:8e:f2:7c:08:e6:6d:a7:14:4f:05:
         62:0b:4a:63:69:07:b0:83:00:ef:cb:0c:1b:07:d2:49:42:4c:
         1b:f8:41:71:28:ae:a4:69:df:01:f2:06:cd:38:e9:77:18:c2:
         cb:8c:61:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:55:23 2026 by rpki-client