Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File:                     1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier:          3HgmQKdZVtWjigp9FaZPW5t+B5JvLyIUPARaAcw4fcs=
Subject key identifier:   E4:9A:F0:A1:C0:1C:1B:2A:22:46:4D:A5:9D:A2:38:9C:B3:80:E0:19
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer:       /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial:       01A0D192AF59308FEB7CF2A9D5BF364895A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number:          1A6A
Signing time:             Thu 24 Sep 2026 04:00:46 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:46 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:46 +0000
Files and hashes:         1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: srFVbobXb6DF0Ueh8zkvQgGH0yXw+GHOe/vAFgb1E+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:af:59:30:8f:eb:7c:f2:a9:d5:bf:36:48:95:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
        Validity
            Not Before: Sep 24 04:00:46 2026 GMT
            Not After : Sep 25 04:00:46 2026 GMT
        Subject: CN=e49af0a1c01c1b2a22464da59da2389cb380e019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:a1:20:76:ed:b5:00:70:82:4d:87:26:22:
                    3e:14:96:65:e3:07:b4:14:0a:ae:31:b1:2b:f6:e6:
                    81:ab:fe:0b:68:d4:04:79:c4:ee:a8:ec:7e:cd:75:
                    ec:40:9d:70:f1:b3:b5:12:8e:18:31:60:2f:59:18:
                    56:2b:18:99:56:7d:67:00:e1:0c:3c:fb:3f:00:28:
                    34:12:80:6c:cb:16:59:79:b6:c9:84:c6:e1:f6:9d:
                    7b:40:7e:c1:a9:d2:c5:05:46:e7:90:94:bd:2b:49:
                    fd:f8:e2:a4:20:e1:71:dc:c1:71:1b:fa:51:98:7f:
                    c2:61:bb:76:59:f2:10:cd:aa:84:64:98:52:4d:c8:
                    59:0d:fc:65:9f:16:f2:b3:76:52:7b:8f:f3:4b:28:
                    74:dc:6a:d2:93:2a:3d:34:fb:8d:83:18:bf:6a:b9:
                    93:07:e2:b9:0e:75:1a:f8:3c:20:e3:5b:74:dd:da:
                    21:0f:62:77:9a:c0:56:5e:96:4e:ed:ac:92:b9:5b:
                    08:97:0f:a9:ad:ff:75:f4:ce:dc:91:7f:2e:c5:92:
                    15:62:d9:62:f4:5b:82:d3:83:5e:30:3d:7c:70:83:
                    24:bc:03:b8:67:b3:c6:b8:e5:8c:8c:1e:de:5b:75:
                    56:c5:d8:0b:19:5f:e0:ad:35:41:db:83:a0:ab:8d:
                    4d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9A:F0:A1:C0:1C:1B:2A:22:46:4D:A5:9D:A2:38:9C:B3:80:E0:19
            X509v3 Authority Key Identifier:
                keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:7e:3f:59:35:90:aa:f5:6e:e5:a8:f6:25:e1:f4:37:17:43:
         e6:fa:79:0a:01:60:eb:ca:20:62:38:1f:bd:1e:31:b1:00:0e:
         30:59:08:43:98:72:90:c7:de:42:45:1c:3f:01:5c:8c:8f:01:
         f6:33:b8:40:bd:08:9f:4f:0e:3d:31:9b:2c:d2:bd:ce:ea:2b:
         ca:2e:b2:3a:a2:1f:c4:40:0c:b1:ae:46:f1:e4:4f:58:ba:6f:
         38:33:8e:f0:31:0a:87:1c:65:e9:3d:bc:90:c0:de:97:38:d3:
         5f:6d:65:cf:56:bd:94:a0:bd:8d:0a:d8:ca:b8:4d:b6:14:fb:
         a6:62:15:2d:46:99:d5:06:8e:75:8e:45:dd:0a:b6:75:dc:f9:
         26:5b:0d:1a:81:59:19:7b:73:7a:3d:37:2a:cb:54:cb:f9:cd:
         8b:01:3f:4d:db:fc:20:35:bb:9e:0b:1c:48:80:13:c5:7a:be:
         e0:49:30:d9:db:91:90:9f:26:bc:cc:92:49:2c:57:7a:4a:d9:
         7e:94:c7:f1:ce:00:b2:62:43:0f:1f:64:47:67:1c:8a:5d:ce:
         cf:36:4c:9a:a7:57:84:82:fd:e0:cc:53:7e:f3:4d:cb:72:f8:
         94:34:20:3c:59:20:cc:8f:f2:50:c0:71:54:b1:2f:70:7e:e0:
         cd:14:41:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:45:49 2026 by rpki-client