Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File:                     1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier:          jwV5KAiHp3oeB8RipreVv+Ge2dFd9meFzQCABZq+M0A=
Subject key identifier:   CE:F7:A1:95:A9:5C:9B:E4:75:CA:C9:FD:8D:B0:EF:3F:15:CA:74:EE
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer:       /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial:       01A0DCBC1D6A215B091EDB5068427EF1E6EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number:          0F18
Signing time:             Sat 26 Sep 2026 08:01:50 +0000
Manifest this update:     Sat 26 Sep 2026 08:01:50 +0000
Manifest next update:     Sun 27 Sep 2026 08:01:50 +0000
Files and hashes:         1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: ul6Waf3KyLDLzOmq+8eTxeuILDT+sstc1fdx98cxhw4=)
                          2: Cgsxb4qiaxInZIOD52ZW_SBVWn8.roa (hash: AfaNiPsxEDa6BqM9VdWTViXe2dMUmuZ+VOqQLOWjvx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:bc:1d:6a:21:5b:09:1e:db:50:68:42:7e:f1:e6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
        Validity
            Not Before: Sep 26 08:01:50 2026 GMT
            Not After : Sep 27 08:01:50 2026 GMT
        Subject: CN=cef7a195a95c9be475cac9fd8db0ef3f15ca74ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d5:0c:7b:5c:06:03:28:af:d6:0a:c7:c4:75:
                    0d:3f:c7:e2:0d:1b:03:5c:b8:fd:1d:1a:54:56:a1:
                    1d:e9:63:0f:95:02:f9:43:e4:1f:db:0d:93:b1:6f:
                    4c:55:4b:bf:d4:2a:22:5b:79:9e:29:c7:15:2d:b6:
                    df:8d:b5:b2:45:86:89:6f:b4:34:3d:3c:7a:01:cc:
                    2d:02:7f:b2:99:c5:e7:10:15:36:2e:93:a9:19:49:
                    9c:53:6a:8f:c4:32:db:b5:7b:fc:53:d0:88:02:32:
                    2a:22:eb:c0:22:94:1f:8e:7c:51:75:82:9a:15:45:
                    25:3a:a4:be:08:7d:e7:03:59:d2:0c:45:e5:02:cc:
                    a8:c2:c8:4e:c8:af:d6:5a:9d:08:49:07:ed:f7:fc:
                    e9:cb:ea:5c:d4:a0:33:a4:73:c5:dc:49:42:1a:4f:
                    6f:ad:53:eb:3a:2c:a0:f0:ae:3e:e8:75:a4:fb:b9:
                    a9:0d:9a:71:b6:b3:b6:da:66:ed:d4:6c:dd:22:cb:
                    d8:31:7d:97:01:a5:dd:5d:ca:55:87:73:74:d8:16:
                    b5:60:ac:35:92:00:77:f4:9b:b8:bf:ba:7d:5b:3e:
                    c9:dd:00:bc:59:6f:2a:b0:ca:96:58:6b:d2:e4:96:
                    bc:c2:6e:2a:b3:d9:9f:c1:5e:e6:9a:65:be:6a:c6:
                    12:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F7:A1:95:A9:5C:9B:E4:75:CA:C9:FD:8D:B0:EF:3F:15:CA:74:EE
            X509v3 Authority Key Identifier:
                keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:fd:42:c4:48:cb:ff:e1:37:18:35:6a:a8:ec:90:ca:9c:ad:
         fb:50:f7:dc:dd:bc:b9:94:79:be:9d:06:f2:0f:6f:5e:bb:82:
         3e:e3:60:3f:c6:19:72:26:06:08:20:9d:20:0e:43:a2:a0:fe:
         d7:19:28:b5:86:ab:67:b3:bb:8f:b6:09:cb:9d:3f:2b:c8:70:
         8f:2c:a2:8f:7f:a0:df:cc:15:23:2f:4a:01:72:69:95:14:a8:
         28:2f:4c:b5:07:cd:b0:96:1d:4f:65:05:8c:74:f2:44:08:88:
         b7:64:b9:89:0e:82:63:ab:92:89:37:02:2f:4f:34:63:38:40:
         f5:96:01:dc:da:c3:fe:a3:56:b6:4a:0a:59:10:e1:39:7f:ff:
         76:82:1c:26:4b:38:5b:20:20:12:0e:73:67:ed:11:21:61:89:
         17:5d:a2:22:46:d5:64:55:31:9f:83:1c:40:43:ee:64:30:5b:
         cd:6d:ba:fe:14:be:5e:06:92:d2:67:ac:9b:79:66:1a:0f:dc:
         02:5a:2f:61:39:2c:9a:ac:12:d7:c8:66:56:04:58:34:ad:ff:
         26:d0:6d:10:80:b6:04:ea:67:19:00:4e:5c:dd:ca:c7:3e:e1:
         91:aa:8a:f0:0b:ee:e0:99:3a:f0:44:a2:a9:08:eb:5e:45:a7:
         0a:72:74:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:28:35 2026 by rpki-client