Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
File:                     V8e-KewTsKsBiXQR6G7Piw87NEo.mft (raw, json)
Hash identifier:          uBlOP/6ARz7vdu/NeQj4/yTxbWwU1ZlSlj7EnqWf0mY=
Subject key identifier:   70:41:93:33:40:94:6C:9A:5F:49:98:59:8F:6C:FA:66:B2:E4:DF:E2
Authority key identifier: 57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
Certificate issuer:       /CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Certificate serial:       01A17EBD2BB80CE3451531835133122A99E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
Manifest number:          1AC9
Signing time:             Tue 27 Oct 2026 19:01:29 +0000
Manifest this update:     Tue 27 Oct 2026 19:01:29 +0000
Manifest next update:     Wed 28 Oct 2026 19:01:29 +0000
Files and hashes:         1: HJyM-PK_Z2fkxB2cKtylCvP_oYs.roa (hash: aClMv3GmYl01FOx3i2RmdJlKAVOLcAqBrNkfkkFCYNk=)
                          2: V8e-KewTsKsBiXQR6G7Piw87NEo.crl (hash: 0j7IXB+38/JKfGSe3iZYpg3UuNEbioiIqK2uk9M2Vfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:bd:2b:b8:0c:e3:45:15:31:83:51:33:12:2a:99:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
        Validity
            Not Before: Oct 27 19:01:29 2026 GMT
            Not After : Oct 28 19:01:29 2026 GMT
        Subject: CN=7041933340946c9a5f4998598f6cfa66b2e4dfe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:16:50:68:f9:eb:51:aa:80:a0:68:0f:08:74:
                    1a:d9:6c:a0:fa:dc:47:9d:c9:22:67:8b:b4:3a:9c:
                    c7:6d:59:c7:fc:74:b9:93:69:50:42:81:d0:d4:51:
                    04:57:ce:17:af:ce:d7:5b:9b:a4:22:98:1e:e3:bb:
                    62:20:f6:a4:65:41:26:25:17:04:f5:58:20:90:dd:
                    19:a2:99:c8:ed:4b:de:ab:0d:78:c5:a3:d2:f6:c1:
                    6a:9d:40:eb:d8:26:02:cd:e5:78:b7:b9:ff:26:df:
                    3c:fd:e1:8c:57:75:fa:d8:13:10:dc:0d:01:82:d1:
                    59:33:36:a0:7e:58:55:d1:b7:98:e5:83:e5:67:e8:
                    23:0b:ae:96:18:da:28:d0:50:2c:3e:b8:3f:22:cd:
                    33:92:23:84:9e:e9:4b:dd:dc:13:ea:a9:b0:72:50:
                    7b:59:74:de:ab:3b:5a:18:b1:2c:bf:9e:ee:46:85:
                    10:b3:41:27:66:54:a6:6c:cf:f0:de:ab:82:29:6f:
                    f6:e5:5d:ab:c9:bd:4f:bb:a9:7e:e3:0a:c4:69:76:
                    de:f7:d4:e8:91:f3:42:7a:c2:6f:aa:97:d9:0e:c5:
                    ce:5a:0c:46:33:bd:46:72:3b:b3:d1:a5:7d:4f:05:
                    d1:b4:9f:a4:e3:e8:2f:e4:bb:2e:5e:6b:2e:e3:b1:
                    a5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:41:93:33:40:94:6C:9A:5F:49:98:59:8F:6C:FA:66:B2:E4:DF:E2
            X509v3 Authority Key Identifier:
                keyid:57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:17:af:bf:71:38:70:a0:0c:b0:00:c6:f4:ab:26:61:ad:84:
         26:65:a7:a8:30:ca:ba:d7:0a:8a:68:1d:99:e4:2c:51:a1:2c:
         40:09:c8:69:eb:a6:94:2d:91:81:ee:bc:91:e9:e9:77:a5:fc:
         22:6e:c2:88:6b:59:3d:6c:a4:d2:93:46:de:0e:c6:77:a4:24:
         a8:45:f3:0d:07:40:01:1f:4c:ad:43:90:e5:7c:9d:c8:44:bc:
         64:1d:18:47:ed:e0:f9:3d:3e:23:11:ed:66:f1:92:b6:49:f9:
         a7:5a:c4:f1:4c:b0:8e:b6:9a:34:84:7e:51:e0:12:b8:10:37:
         04:0a:52:64:58:c5:50:c5:50:82:10:38:f3:4e:3c:7d:17:af:
         f6:58:a7:cb:75:32:0e:e3:be:cc:2e:ad:d4:e5:60:3e:9a:89:
         c5:37:1e:f0:d9:aa:91:c3:55:cb:14:c6:3e:40:ba:57:3c:c2:
         55:47:09:f6:03:01:40:6c:9f:4a:bc:bb:c6:37:80:b1:cd:a7:
         7f:be:5c:4d:f2:46:06:6a:89:02:dc:8a:67:65:d6:4a:15:0b:
         ad:88:f6:72:b2:68:8e:d8:a1:30:58:d6:b9:9f:a0:af:27:88:
         d5:3f:16:29:f1:ac:a6:b2:1a:e0:c5:99:d2:9b:a2:7b:19:6f:
         f7:b8:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:51 2026 by rpki-client