Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
File:                     V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft (raw, json)
Hash identifier:          a6J6nrQkZPVpXFwyD0/Xw0QyJ/p3jPKt1oO9yZOGtZA=
Subject key identifier:   2D:42:8C:4C:D0:25:5D:6C:BC:B9:B1:66:19:F8:A6:AC:D1:77:2C:AD
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Certificate issuer:       /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial:       01A133347CBB5AF4D3BB783708E27777FAE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
Manifest number:          1AA0
Signing time:             Tue 13 Oct 2026 03:00:40 +0000
Manifest this update:     Tue 13 Oct 2026 03:00:40 +0000
Manifest next update:     Wed 14 Oct 2026 03:00:40 +0000
Files and hashes:         1: 5G9NBhPDFJnBpV_ODJ-yxnU8F0U.roa (hash: xl4h6DuoEnDQif85q6/N4TbdIRiCv01AKSy0anUCZ3k=)
                          2: RkiRAFcrZu-Lo8gYHeUyPspBx44.roa (hash: oGKuW1KVMpw7V7M8/Yknn9ZA7Ros9J6QJpSzewOzRZI=)
                          3: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl (hash: 3R6wuQOFKelWHxXL36jon2bwC9vQEAttsng07Euj39Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:33:34:7c:bb:5a:f4:d3:bb:78:37:08:e2:77:77:fa:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
        Validity
            Not Before: Oct 13 03:00:40 2026 GMT
            Not After : Oct 14 03:00:40 2026 GMT
        Subject: CN=2d428c4cd0255d6cbcb9b16619f8a6acd1772cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7a:3f:22:71:c2:98:d9:cb:3d:fb:59:24:7b:
                    dc:78:0e:0d:5a:52:67:05:d2:48:1a:5c:34:c8:dc:
                    50:2a:15:32:5e:2c:f2:73:4f:08:e3:24:69:1b:b7:
                    ec:85:79:93:1e:c4:7a:35:8a:52:eb:ca:1b:f7:fe:
                    94:b3:97:82:dd:12:d3:d8:1d:28:2a:8d:6e:96:06:
                    8d:07:4c:79:fd:a4:7d:58:55:62:a0:7c:03:8f:73:
                    44:be:43:6a:35:8c:71:ad:e9:e4:f4:d6:b7:8b:c9:
                    7c:c3:fc:5c:64:73:26:d9:40:58:6a:8a:c4:67:cb:
                    d3:9f:f0:ca:b4:f5:0e:39:36:a9:b4:19:d9:ae:fa:
                    3c:2d:98:6a:2a:33:58:31:f9:59:a3:8d:99:f9:f1:
                    83:f7:b5:b3:81:e9:67:c4:44:c2:05:2f:44:08:1c:
                    3f:45:f2:fd:c6:54:bc:37:cb:d7:1f:9e:a1:dd:51:
                    f6:f5:36:2f:49:94:b2:d0:98:08:95:2e:eb:4e:cd:
                    78:70:80:1c:c0:6a:45:b7:db:53:c1:fd:89:f7:12:
                    92:85:56:a7:b3:35:17:31:42:5a:73:5b:29:7d:6e:
                    58:65:47:40:c2:3a:22:a7:68:b4:30:38:c3:28:87:
                    b3:b0:b2:6d:8c:38:1e:f3:13:71:b2:c1:eb:16:81:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:42:8C:4C:D0:25:5D:6C:BC:B9:B1:66:19:F8:A6:AC:D1:77:2C:AD
            X509v3 Authority Key Identifier:
                keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f8:04:19:85:bf:1e:06:03:68:6f:cc:2e:a0:61:39:94:1f:
         a7:76:ef:34:4a:11:8c:ec:55:22:e4:23:b4:b8:d8:38:27:1b:
         c8:31:24:a8:b3:6c:a9:0d:62:f3:2f:6f:ae:97:1b:87:71:f7:
         5d:f2:89:07:6f:c9:c5:e5:08:ad:e8:e4:dd:32:7f:0d:ab:46:
         6c:77:cf:c6:f5:95:a6:d5:03:70:80:12:4c:67:24:68:95:90:
         8d:77:51:76:4c:d2:66:27:5e:9a:df:6d:2a:38:db:73:db:0a:
         02:d9:ab:f9:d8:48:05:94:0c:ef:7e:6f:2d:9c:8d:df:99:c8:
         96:89:73:c2:30:6b:9f:c3:c5:12:bb:2e:5d:a6:a8:77:4a:07:
         0a:c0:14:95:b5:25:84:8e:e8:3a:79:32:29:8e:ba:e5:69:08:
         68:89:c6:3b:9f:a4:63:a7:f0:89:cc:46:24:aa:cf:25:fb:a4:
         8f:38:d5:55:24:14:a7:8e:51:2a:a7:8e:2f:c7:34:d1:97:84:
         51:2d:f6:cc:a2:d2:c0:2a:08:26:17:92:e9:10:16:31:45:de:
         62:2e:c9:29:21:0f:47:a9:fb:96:8a:2c:d3:57:92:e2:f6:b9:
         e0:09:01:ec:5f:55:b4:85:14:1b:7d:07:41:68:fc:d0:a6:0f:
         3b:3a:38:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:16:18 2026 by rpki-client