Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
File:                     pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft (raw, json)
Hash identifier:          wN7NDvP8kJVK2uGrrrm/jRKXG6cfr8ofSQf7KIkYNkw=
Subject key identifier:   F2:62:56:BE:6F:EA:04:C2:FE:53:94:46:D9:A2:86:7D:83:49:9A:B7
Authority key identifier: A4:0B:AC:66:FB:FE:CC:E5:EE:2C:A8:CD:89:56:68:47:10:86:ED:9C
Certificate issuer:       /CN=a40bac66fbfecce5ee2ca8cd895668471086ed9c
Certificate serial:       01A1506371EA9183C408E1F7CBA7A9299E4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
Manifest number:          0310
Signing time:             Sun 18 Oct 2026 19:00:56 +0000
Manifest this update:     Sun 18 Oct 2026 19:00:56 +0000
Manifest next update:     Mon 19 Oct 2026 19:00:56 +0000
Files and hashes:         1: WlMbZGmn7ELXlYYDe9GRZvGgMVU.roa (hash: YxkhfO0kcIItDFF9reiDtyKSrNleRYkzff6/T+LQRME=)
                          2: pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl (hash: 5v9RDphggoSi+ufb2W54mYj06zEkRCxTELir/V2BFyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:50:63:71:ea:91:83:c4:08:e1:f7:cb:a7:a9:29:9e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40bac66fbfecce5ee2ca8cd895668471086ed9c
        Validity
            Not Before: Oct 18 19:00:56 2026 GMT
            Not After : Oct 19 19:00:56 2026 GMT
        Subject: CN=f26256be6fea04c2fe539446d9a2867d83499ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:05:a1:4b:2f:db:b6:66:54:6b:c3:5a:05:
                    58:35:a0:e6:68:91:12:ec:d3:80:62:36:a6:7b:33:
                    7a:12:d2:fb:72:42:ed:84:ab:4a:fa:83:54:b8:7d:
                    b9:37:1c:c7:46:80:52:e4:dc:aa:cc:41:6b:14:36:
                    29:50:b2:9d:17:1b:51:8c:eb:19:8c:6a:50:81:d8:
                    f1:7d:d3:2c:ed:30:42:af:15:6f:07:d2:4a:6c:5c:
                    5e:8e:fe:3e:34:b8:22:8c:fb:84:dc:81:c2:95:8a:
                    f2:ee:a1:f3:42:00:a9:be:e0:b0:11:b2:36:18:6c:
                    de:54:d2:8b:0d:87:c4:7d:57:26:89:6f:3a:e0:bc:
                    90:38:8c:18:92:f7:e1:ae:e7:e6:10:5c:8e:d6:00:
                    15:0e:c9:4e:31:2c:96:55:5d:d6:23:57:f3:6c:be:
                    d3:96:7a:ed:ca:22:5b:2e:56:f5:7f:d5:4c:6c:3f:
                    25:da:ad:0a:64:2a:c6:df:24:9d:87:c3:60:eb:f6:
                    86:f9:44:86:69:ad:2c:6a:17:b0:6e:be:64:d6:d5:
                    cc:6d:34:56:0f:be:59:7c:b9:a4:34:dd:19:3d:e6:
                    91:c3:40:a9:46:f4:8b:60:eb:b5:cf:ac:a9:8e:46:
                    d2:a4:36:f8:69:da:61:bd:12:bb:42:85:d3:86:b4:
                    5e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:62:56:BE:6F:EA:04:C2:FE:53:94:46:D9:A2:86:7D:83:49:9A:B7
            X509v3 Authority Key Identifier:
                keyid:A4:0B:AC:66:FB:FE:CC:E5:EE:2C:A8:CD:89:56:68:47:10:86:ED:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:0f:c5:a6:ee:35:7e:4e:25:8f:4d:dd:b8:11:a0:c0:bc:a1:
         69:8f:9d:a6:d6:82:8c:43:00:d7:a2:44:3a:5b:c8:dd:96:76:
         75:99:77:f9:2d:6e:0d:07:96:8a:8b:8c:ae:93:78:74:34:b0:
         37:63:55:2b:da:1b:de:62:1d:92:30:f3:9e:c8:b3:37:ee:f4:
         d8:c8:f1:53:be:2b:37:1f:a7:60:f7:1b:69:e6:66:77:20:6f:
         a9:6c:8f:44:d6:75:7c:40:71:7e:c7:72:db:42:31:c9:3a:ca:
         f1:8e:4b:fb:38:79:c5:be:6f:0f:db:f9:cd:2e:7a:56:db:dc:
         cb:10:48:d0:f5:35:01:f1:6a:8f:fc:20:83:86:8c:3f:67:ed:
         9d:66:45:e5:59:69:0d:ae:52:85:77:d7:dc:a6:51:6a:9d:e3:
         a7:b5:53:03:a6:43:fa:45:4f:92:f4:ea:d3:a2:ec:0f:dd:26:
         44:49:ba:7d:ab:f0:38:6c:bf:7b:6d:f7:ee:a8:b4:fa:09:13:
         d3:20:16:55:0a:3e:da:30:5d:28:53:5b:13:e2:13:49:60:ae:
         88:1f:70:15:f6:21:17:b8:a1:c4:1d:71:01:3a:d0:1d:02:d7:
         d0:d2:a1:ab:c8:88:6a:0c:cc:90:3a:53:f8:a8:04:65:06:03:
         4d:49:34:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:19:27 2026 by rpki-client