Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
File:                     71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft (raw, json)
Hash identifier:          /BfrQL7ALnX3NWLgUf1OVIG+flznc6lGVb5vzhtItIA=
Subject key identifier:   D9:97:5E:40:EC:15:A7:96:49:F6:15:B7:9F:B5:92:74:07:45:C1:00
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Certificate issuer:       /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial:       01A15B1E9812550FA2A611AA21C18414E1FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
Manifest number:          1526
Signing time:             Tue 20 Oct 2026 21:01:33 +0000
Manifest this update:     Tue 20 Oct 2026 21:01:33 +0000
Manifest next update:     Wed 21 Oct 2026 21:01:33 +0000
Files and hashes:         1: 1PeK2rVaekZNVC3o3pyzwNQgzhE.roa (hash: bT8T+lq1jJgvGdCk3qnNPwcbcmXO99rl74JJHuWU1R4=)
                          2: 6_srr9UDGCrrghI-kzMIH18RQ5s.roa (hash: rgEY62cCaL+uhCiwNn9Vj1LmIYbXJUPb3hsHRDdjamg=)
                          3: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl (hash: bKAFkBLH7K57rQPvGyYf6ML/6mY6HRGp9q2BzCUilyg=)
                          4: L8K-oCWMXYNNFl2Gtl0axuvyV6o.roa (hash: MVJp1QeOAa+1WyB2b4sfhybug5Q9aKD/B3oGjiQhkd0=)
                          5: US8zhOgEgTJLtMVAy0LwKIviLAY.roa (hash: 1Z8ADvV9JtaovNHQqKj+/BEfmZFOC6ntc+ZyZRoSJpI=)
                          6: WTuF7GM_g7zyE_8wXHuTXrCUE8Q.roa (hash: ToxcyUtODIjk+vfIoE2fDiyxO6Xp7CGXZG+vHQsn3hA=)
                          7: i8DSsz1zrzQenpw3T2bP8cFRsq8.roa (hash: oEuQy5j/C31ArjuLYoalrrQGCWj0f7zf2ngtaCvBjYo=)
                          8: s2ERx5aYZ5qMUJk7J2hBy2vliQQ.roa (hash: z6QG8SGsmHZuXlfMye+xyzDg++Fc+I7ndy1WwrRx4xg=)
                          9: uUXbGveHh5dI8opniCmhRttZRQo.roa (hash: 217TbMSDudGUCYzygu/2lmf/QwsJ65KMrSXfrm+gAfg=)
                          10: zMUHewOkNECVYz7ml1umISWZOVE.roa (hash: G455vMmTjZpLOZTw+9pAQhVOSHGfalAl4TZYjQHUmAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5b:1e:98:12:55:0f:a2:a6:11:aa:21:c1:84:14:e1:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
        Validity
            Not Before: Oct 20 21:01:33 2026 GMT
            Not After : Oct 21 21:01:33 2026 GMT
        Subject: CN=d9975e40ec15a79649f615b79fb592740745c100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bb:f0:8b:06:32:70:31:c9:12:cc:cd:32:49:
                    ae:6a:b2:00:bf:98:9f:05:2f:8a:8e:fc:0f:2d:8c:
                    d0:b9:10:35:09:35:f7:f2:71:64:28:ca:ac:9d:f4:
                    d0:3a:df:41:66:31:36:43:fb:11:3d:73:a2:ee:b0:
                    71:30:06:03:64:c7:ac:4d:da:b0:b7:7e:be:be:48:
                    e7:03:b1:25:d9:56:85:23:e9:36:38:0c:3e:a4:d4:
                    ff:6f:0d:ba:25:60:96:f9:6b:48:51:4d:ec:de:01:
                    7b:ac:f6:22:2f:c5:92:65:a9:17:b0:10:cb:22:b7:
                    7f:82:a1:cc:c1:3c:cc:d2:52:91:d4:71:45:07:92:
                    f0:eb:4d:4d:99:09:b1:0e:c0:b2:28:8b:1e:8e:e5:
                    ac:4c:09:6d:4b:09:ab:f6:b4:7c:b8:de:9b:28:77:
                    a7:ec:ed:09:fb:bd:ba:ca:0f:95:ac:c4:70:fc:4b:
                    ce:e8:b2:f2:8f:ee:24:30:cc:98:a3:f8:bc:ec:e2:
                    7c:ef:e3:04:2d:53:44:36:2b:dd:0e:82:8b:7a:a5:
                    5d:ce:7e:72:2d:0f:a9:82:92:4d:12:aa:a3:39:4c:
                    56:6a:0e:bb:e8:cd:db:84:d2:11:80:a9:ca:b4:00:
                    9a:c5:4a:74:39:c0:34:a6:59:db:da:c1:b4:33:8a:
                    6a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:97:5E:40:EC:15:A7:96:49:F6:15:B7:9F:B5:92:74:07:45:C1:00
            X509v3 Authority Key Identifier:
                keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f8:87:1f:76:91:9d:8d:28:8c:3b:04:a2:6a:30:e0:e3:54:
         9b:5b:42:09:ae:3e:46:bc:c5:eb:54:8f:75:92:d1:4c:73:82:
         0f:d1:e0:5e:80:fb:da:c0:e8:5d:17:44:06:17:63:7d:b9:9b:
         e2:0b:0a:53:3d:8d:e1:44:10:50:7e:26:99:73:7f:23:80:26:
         58:cf:d5:0a:ce:cf:1b:bf:39:21:8f:4b:b3:b2:fc:4a:a5:16:
         5d:ee:b4:9c:f2:10:3c:3c:8b:1d:46:c9:cd:57:b4:ae:5e:56:
         56:91:81:8f:0b:c9:92:82:f6:f0:82:f7:53:26:38:38:a2:52:
         55:f8:ef:7c:7b:0c:90:8d:bf:0e:07:c1:b5:b8:e8:57:da:3e:
         73:19:b6:65:ff:c0:c4:c0:8a:c7:8b:12:47:33:ec:ef:9a:ce:
         5c:97:df:2d:ba:00:87:55:c6:de:3f:b8:6d:48:69:75:5d:09:
         c0:93:68:74:41:3d:a5:24:95:75:a2:70:3c:ef:0d:ad:41:18:
         5d:ae:60:7e:57:60:a0:ca:f7:24:b5:6b:39:87:ad:ed:0b:56:
         13:19:56:a4:f5:17:d8:67:54:0a:c0:61:fe:4e:ec:c3:80:27:
         87:37:8b:54:82:4d:8e:e4:c1:36:85:95:7e:85:ba:aa:e7:be:
         1f:85:c4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:41:18 2026 by rpki-client