Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File:                     1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier:          MVkWnYfgnGp+vBziFCjBfQL+iuCIPG79Vuthg81zVLk=
Subject key identifier:   05:31:6E:AA:79:08:29:8D:9F:96:AA:7E:7B:61:D5:65:CE:EB:C7:3F
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer:       /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial:       01A11ABE2C68C2EAFDAFBDE4EB67ED491391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number:          17B9
Signing time:             Thu 08 Oct 2026 09:00:33 +0000
Manifest this update:     Thu 08 Oct 2026 09:00:33 +0000
Manifest next update:     Fri 09 Oct 2026 09:00:33 +0000
Files and hashes:         1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: uT1oWeIbOt1a9l71TTu+gGqyWfj5ROwiq1IInQ50Hgg=)
                          2: jTE7aus6FHt_I5mpklvVVf-KpAw.roa (hash: jTSKuDkQyIFhQKFi7+s/96OtXGRbDcnGaxvdpome6eY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:be:2c:68:c2:ea:fd:af:bd:e4:eb:67:ed:49:13:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
        Validity
            Not Before: Oct  8 09:00:33 2026 GMT
            Not After : Oct  9 09:00:33 2026 GMT
        Subject: CN=05316eaa7908298d9f96aa7e7b61d565ceebc73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d7:06:4a:9b:de:65:2a:6a:73:4c:39:81:2f:
                    05:ac:31:67:b3:c6:62:a6:c2:98:07:0b:62:80:98:
                    e2:7d:73:e6:e0:de:f8:a3:b3:ad:db:95:3a:c7:25:
                    15:ae:1a:68:0e:45:2b:cb:39:7e:ea:77:80:08:57:
                    53:bb:fe:04:40:ec:21:5b:c0:89:b0:48:19:58:c0:
                    c2:7b:ea:fb:2b:18:d5:aa:b5:61:1d:a3:37:94:8a:
                    b5:f2:5c:be:82:fb:bf:0c:7b:09:15:bf:f1:74:d9:
                    57:08:02:15:e7:95:f7:dc:60:b5:99:71:2c:fb:00:
                    b6:2b:fb:fc:18:bb:a8:64:78:38:95:de:56:06:87:
                    54:96:77:7c:d2:87:4c:78:73:55:48:b5:fd:3f:4f:
                    17:48:b6:79:89:aa:9e:21:96:90:c9:82:2c:41:29:
                    44:1b:9d:df:13:15:e1:78:ec:89:7a:8a:db:26:7a:
                    e8:5b:43:ca:0e:b9:75:fc:fc:c4:79:e1:18:12:a6:
                    a0:2c:82:6e:14:33:da:75:fb:57:cd:54:bf:da:b2:
                    2f:c5:62:58:8b:e5:45:ab:e0:e7:6e:d9:81:a4:57:
                    c4:b3:85:22:4e:ba:20:87:fa:fa:67:04:7c:7c:cf:
                    1a:40:8e:0f:4d:06:df:b7:0a:da:93:30:0f:21:1f:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:31:6E:AA:79:08:29:8D:9F:96:AA:7E:7B:61:D5:65:CE:EB:C7:3F
            X509v3 Authority Key Identifier:
                keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a9:73:48:90:a3:18:0c:15:ad:17:58:2d:e7:54:16:33:12:
         3d:ce:2f:e1:d8:6a:09:13:50:05:b5:d4:0c:4c:7d:fc:96:54:
         fc:1a:d1:76:ea:64:ed:ac:4e:23:01:44:ab:b2:e2:58:32:76:
         59:dd:a7:2d:18:7b:44:48:44:50:cd:24:87:ff:38:f0:3f:db:
         a0:20:4d:dd:fe:c3:ce:5a:34:34:29:97:d9:88:a7:a8:36:a2:
         85:87:3e:f8:7a:13:bc:ea:09:73:ad:04:b2:e6:36:05:df:81:
         5e:01:97:2d:d7:cd:1e:04:1a:85:e9:d2:25:08:58:d2:ce:3f:
         bf:ad:d1:bd:7e:6e:d7:a3:cb:b5:d8:e7:8a:f0:fe:fb:40:67:
         28:e2:28:7b:2d:b7:a9:b9:f9:20:97:5f:b8:6f:e1:4e:3f:64:
         15:8f:4a:5d:51:ef:95:69:43:35:71:64:42:21:eb:a5:81:d3:
         c0:16:c5:6f:5e:c2:7d:63:7c:60:8b:0f:7d:dc:53:cb:d6:7c:
         38:aa:7f:2b:74:12:49:9c:11:e3:3a:62:9b:24:40:3a:77:db:
         1c:8b:fa:62:0c:b5:20:08:3b:8d:4c:c6:d5:51:15:44:e4:37:
         cf:3d:d2:56:7d:1e:8d:3d:d8:18:48:6b:66:e1:64:7f:6c:56:
         72:e8:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:29:45 2026 by rpki-client