Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
File:                     1IVV-aUnJ_a89xXLR1CipKbDUWE.mft (raw, json)
Hash identifier:          rsZEaeqA41Jt5r80pHmdKGFABG2gSaKC/tzegOYNruM=
Subject key identifier:   A8:39:7D:B4:36:3C:1A:84:F8:A2:EA:72:F8:51:14:89:4C:C4:84:BB
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Certificate issuer:       /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial:       01A168A2F8E8E176E366AD1D29F8B365018F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
Manifest number:          1ABE
Signing time:             Fri 23 Oct 2026 12:01:13 +0000
Manifest this update:     Fri 23 Oct 2026 12:01:13 +0000
Manifest next update:     Sat 24 Oct 2026 12:01:13 +0000
Files and hashes:         1: 1IVV-aUnJ_a89xXLR1CipKbDUWE.crl (hash: a5z6LgXFys7g4bkRlresZyZkKQveXYjJL5VhsHh0zgE=)
                          2: AlX1xy2wTjSnp3VHffeoAdWgrO0.roa (hash: 3qeZn7BmBW3ItYa3CR4Tpn6LYwKMLMwGEuP59PDDtPM=)
                          3: E6-KUD7DRI_0w_-xYTRlsYMzOAY.roa (hash: fNcbRaDAR/ECLiVIt5ZdhOFIfcxlGWzAHM9UPEfw0U0=)
                          4: X0ur3LhvwaGbR0SSZ5X6a-FSnjA.roa (hash: IToaXqDk0KkIsGrmapc6E0mxayDrae727bDiBQN47vQ=)
                          5: YpERScUPA382FK4NL5ibHCIFyDk.roa (hash: 3Ct/GtumEcJr0cG9KaRMbw6tKj791i3q2bQpl5vvwFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 11:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:68:a2:f8:e8:e1:76:e3:66:ad:1d:29:f8:b3:65:01:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
        Validity
            Not Before: Oct 23 12:01:13 2026 GMT
            Not After : Oct 24 12:01:13 2026 GMT
        Subject: CN=a8397db4363c1a84f8a2ea72f85114894cc484bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ec:bc:a8:a5:d3:00:c5:cc:57:77:10:23:68:
                    97:8d:1a:3a:95:56:09:b6:c2:ae:cc:d3:b6:2e:2c:
                    0a:93:c1:ec:72:a2:95:29:f8:70:02:e7:ac:5d:ef:
                    fb:bd:b4:52:77:de:f6:c0:5d:46:20:99:f6:23:45:
                    31:95:76:bb:ee:22:79:d2:95:6a:e4:bb:25:2c:8a:
                    e2:42:43:08:53:7c:d2:52:7d:18:dd:53:5e:65:b9:
                    00:9b:24:d7:42:75:c5:d6:64:19:b9:85:15:84:1d:
                    78:bf:ae:be:f2:1e:37:35:d1:4c:6b:e3:11:d8:a2:
                    aa:06:50:ca:16:ef:f8:03:f3:72:96:21:bd:31:f4:
                    4b:3d:10:94:ee:dd:51:6a:09:d7:1d:47:9d:4d:f1:
                    ad:7a:77:1e:49:f7:e9:d5:38:cd:4f:35:98:40:9a:
                    57:26:35:a3:10:8b:fc:ce:15:de:2a:82:34:c6:da:
                    15:81:87:76:34:72:df:28:f9:ac:6d:4d:f6:1f:fd:
                    c6:25:31:cf:24:f7:f5:3d:8c:4e:e7:23:3e:1f:3a:
                    8c:ae:4a:48:9f:e8:c7:1b:40:7b:04:ec:ea:54:93:
                    fe:39:6d:6f:c7:9b:56:36:e0:e3:a2:86:a6:af:d0:
                    a9:27:e5:13:64:72:9b:f7:b8:e8:c8:97:e3:33:86:
                    1e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:39:7D:B4:36:3C:1A:84:F8:A2:EA:72:F8:51:14:89:4C:C4:84:BB
            X509v3 Authority Key Identifier:
                keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:42:ff:c4:df:c4:29:51:3b:06:02:94:83:40:11:a9:5f:2b:
         46:dc:e6:5d:67:39:2d:ec:5f:dd:d7:33:6f:63:ef:c3:98:75:
         57:41:04:73:f5:81:a9:31:81:97:c3:5f:02:09:45:9f:a6:e2:
         9d:d2:64:3b:4f:a6:96:2c:61:e3:4d:a5:45:aa:fc:30:71:e2:
         9d:31:b8:c5:19:11:cf:91:57:de:3c:4d:2e:45:ca:cc:65:95:
         a5:48:8e:28:84:19:6c:52:3f:1b:26:ba:b7:18:a8:6e:a5:a9:
         17:96:45:f4:e9:6d:ed:38:67:84:30:33:28:52:76:a4:51:ef:
         ff:bc:d7:be:91:b8:be:44:01:a5:44:c3:ab:a9:24:6f:db:99:
         a3:0d:ff:c4:55:f4:6e:43:a3:22:a5:d7:2c:03:9e:20:92:60:
         21:96:4e:f6:ee:c7:80:b1:fa:d5:31:79:6f:62:59:26:34:1b:
         0e:23:92:8e:b9:6f:14:e7:00:39:2c:d2:82:33:b7:7d:ff:bc:
         dd:9b:9b:9b:37:4c:74:fe:16:0a:71:0b:df:84:3c:ff:49:f6:
         a8:2d:25:cc:bd:2c:e3:d6:8d:42:4c:93:6b:6d:c7:6b:0d:5c:
         01:89:3f:5e:af:94:16:e6:82:a9:8c:d2:80:0f:e2:5f:86:0d:
         71:94:a1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 17:42:00 2026 by rpki-client