Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
File:                     AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft (raw, json)
Hash identifier:          6g4e3TYEpAYoSADtYtUsFowV3CxbzT4ONlH/GBL1MKY=
Subject key identifier:   CD:84:9F:DF:A8:29:17:A9:CD:65:74:7B:E1:55:4C:FE:4A:C9:57:F4
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Certificate issuer:       /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial:       01A0C5FBD6299E349ECB0477E6AE72345856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
Manifest number:          196C
Signing time:             Mon 21 Sep 2026 22:00:10 +0000
Manifest this update:     Mon 21 Sep 2026 22:00:10 +0000
Manifest next update:     Tue 22 Sep 2026 22:00:10 +0000
Files and hashes:         1: AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl (hash: I4X6EoDp9ZP7lOG9YpokFwGXuw37mYevUydekXDWdRU=)
                          2: OkVoScbKIL9TXKvP438rB5FRYb0.roa (hash: 45VM0zyf0tTbWI+Pen84q/pMakzdNZmUXMwDebqNLz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:fb:d6:29:9e:34:9e:cb:04:77:e6:ae:72:34:58:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
        Validity
            Not Before: Sep 21 22:00:10 2026 GMT
            Not After : Sep 22 22:00:10 2026 GMT
        Subject: CN=cd849fdfa82917a9cd65747be1554cfe4ac957f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:a2:05:5e:9b:fd:dd:ed:f2:6b:3e:fe:6a:
                    38:6d:e3:0b:cd:e9:f8:dc:9f:f9:3a:56:ac:29:fe:
                    5a:05:28:8b:16:48:02:89:f2:43:9a:09:be:4b:6a:
                    73:7e:b1:27:b4:dc:15:bc:19:5a:9a:6e:5b:ee:aa:
                    9c:c8:d5:c6:fa:e3:27:ca:92:12:c3:4d:ba:d8:52:
                    1b:34:01:3c:eb:62:c1:0e:3b:68:f3:b5:80:65:b8:
                    93:71:02:d1:d5:32:4a:61:c3:a4:4e:92:af:e5:8f:
                    71:12:9d:53:ac:d5:91:a5:d4:a1:24:14:1f:ec:56:
                    89:57:61:a5:d7:14:6b:06:ff:30:e5:bf:37:bf:71:
                    dd:d8:b0:61:85:9f:b3:ce:52:42:ab:2d:8f:fa:3e:
                    4a:f8:b4:85:7e:18:f9:b5:bc:fb:06:85:36:da:9e:
                    e3:03:11:07:1a:cf:5f:c7:89:1d:4f:8b:7d:31:44:
                    05:d1:01:96:e5:c5:ae:bc:76:7a:78:53:19:34:49:
                    56:d1:de:74:72:cb:92:3f:c4:fd:ad:8a:06:9a:27:
                    a8:d2:06:e1:50:fb:e1:5e:a4:b6:e4:35:75:5e:b3:
                    9a:0c:65:f5:96:4a:ca:a8:bd:b0:3d:1e:b8:3e:8f:
                    e2:2b:6b:bf:13:b6:d2:2e:e1:be:41:15:97:63:98:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:84:9F:DF:A8:29:17:A9:CD:65:74:7B:E1:55:4C:FE:4A:C9:57:F4
            X509v3 Authority Key Identifier:
                keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:41:1d:03:6e:da:bd:5c:97:ab:3d:c2:41:47:5c:44:02:11:
         6e:70:4c:6c:b4:b9:37:16:6d:44:09:b0:3c:6c:88:85:08:ca:
         e8:53:2c:e5:2f:fd:ae:15:93:d7:90:f5:b3:4a:8f:58:93:19:
         54:ab:6e:80:10:e7:72:5f:b0:60:0c:d7:64:a9:72:3e:c4:be:
         b8:af:73:3d:e6:a1:29:67:b3:c8:4b:f4:f1:d3:37:0f:42:90:
         28:1b:51:30:e5:d2:ad:6e:df:35:f4:52:5c:1b:0f:cc:06:76:
         a0:c4:e6:b9:b1:3c:cd:a3:d7:14:ce:bf:b4:ef:0f:86:e7:44:
         23:a9:35:06:68:0a:d1:45:cc:e6:75:2b:3d:8e:2b:cc:9a:b7:
         dd:00:8d:6a:03:69:52:cc:14:e2:39:6a:b8:f8:3a:a6:ac:17:
         b6:91:c8:93:fb:10:d6:0d:c9:60:29:69:a2:86:bb:f3:87:d1:
         15:45:88:c7:5f:43:fc:a2:c9:a9:a6:37:67:be:92:54:c2:c2:
         3b:50:44:91:83:ee:7b:fa:d6:23:d1:92:49:d5:9a:56:ff:d6:
         3d:62:de:d3:ad:d0:9e:26:45:d1:1f:4d:f3:c5:e7:c5:88:a2:
         b3:38:4e:0d:29:17:43:24:ba:e3:13:5d:cb:a2:a9:99:08:fb:
         07:4b:65:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:42:36 2026 by rpki-client