Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File:                     29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier:          ktwjvj7QgwgikkNU/nWnzd/GlLxf14ID94+6LMcpCi8=
Subject key identifier:   47:EF:E1:F6:54:9E:B6:E7:AC:1F:87:53:60:E3:0D:C9:34:66:8D:30
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer:       /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial:       01A147297F0EB4045070EAE9555F8EE0F108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number:          1AAE
Signing time:             Sat 17 Oct 2026 00:01:04 +0000
Manifest this update:     Sat 17 Oct 2026 00:01:04 +0000
Manifest next update:     Sun 18 Oct 2026 00:01:04 +0000
Files and hashes:         1: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: 348fEsAzC7aZDuTCm7nMvzwyWCE7rxMGKul57gGpz4A=)
                          2: IPrRSq2gSatbbHi6fEa8RlmwLy4.roa (hash: RM5/PHoNGaX7XlREXjG/og78083kPTzGlX0ZOlSLFII=)
                          3: mVkogJ-xnAweLAL7bsWjhT8Cpqw.roa (hash: B0ZHTRT8wUE+jzJV8TMgxREJDsonVac0/VpJ6Sd0ekg=)
                          4: ngezMG7cjg7kdta93owuwynmRkU.roa (hash: AWPdd4TuywUrgEAGlpfA8F/3L75UudUwvDZHYHDHNyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:47:29:7f:0e:b4:04:50:70:ea:e9:55:5f:8e:e0:f1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
        Validity
            Not Before: Oct 17 00:01:04 2026 GMT
            Not After : Oct 18 00:01:04 2026 GMT
        Subject: CN=47efe1f6549eb6e7ac1f875360e30dc934668d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:54:f2:27:b5:87:a0:d7:9e:ca:c3:62:f1:
                    f8:21:d9:8a:6a:fd:ae:c6:79:40:d6:13:1a:e6:cb:
                    22:6e:9f:25:1f:08:80:aa:e5:af:b1:fd:7c:23:7e:
                    fa:71:12:74:87:d4:06:bd:4e:2e:d2:75:76:0e:ba:
                    cf:76:1f:dd:dd:9c:9f:23:79:e4:32:a3:12:67:fe:
                    aa:0f:10:a9:1f:e2:8b:19:82:df:b7:e4:7c:8e:90:
                    08:57:6a:17:d1:69:1c:cb:28:f2:bf:17:8c:e6:ad:
                    d5:27:c8:50:1b:62:0a:85:f6:62:4c:52:a1:5c:8a:
                    df:50:0b:15:d7:25:7e:58:93:f9:9f:09:74:10:23:
                    97:1d:29:6f:48:60:ae:32:cb:89:59:f2:88:e4:f9:
                    f3:e8:5f:b2:59:db:6f:9d:cd:fd:45:36:f7:b6:c9:
                    0d:2f:a3:e6:36:24:f7:dd:9c:99:e9:50:b4:9f:a3:
                    2c:55:5e:f0:48:2b:c8:61:97:ed:bd:12:38:72:93:
                    39:a0:68:34:0a:a5:c7:d2:41:7a:fc:30:48:61:10:
                    d3:8c:66:71:5a:6c:6a:c5:da:5f:3a:fc:9a:bf:32:
                    60:73:b0:66:b9:0e:c6:2f:29:41:da:82:26:74:5c:
                    b4:e3:74:fa:36:5e:63:d6:2f:5f:4f:75:31:00:ea:
                    c3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EF:E1:F6:54:9E:B6:E7:AC:1F:87:53:60:E3:0D:C9:34:66:8D:30
            X509v3 Authority Key Identifier:
                keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0a:f7:13:87:66:e8:c4:44:cd:2a:89:4d:6c:96:f3:fb:ba:
         9f:98:6b:2a:f1:52:74:fa:18:f4:8f:ea:fa:3b:94:85:9e:c1:
         43:f8:77:75:6c:28:f9:ca:53:a1:4a:db:28:a6:5c:3b:af:43:
         d6:12:95:b6:af:ea:b0:56:b7:06:fa:f3:d0:0b:93:2d:01:68:
         49:6d:05:c2:43:c1:be:8f:0d:47:7b:f2:81:d5:af:a2:63:ba:
         17:69:af:1d:dc:ba:7e:78:1b:66:c4:a4:cf:97:78:18:0c:14:
         af:27:c0:25:77:13:1f:76:a7:10:a0:09:7d:14:cc:87:4f:93:
         45:e8:5a:0e:d7:18:21:5a:a0:37:28:16:89:d4:f1:07:e5:41:
         79:0f:5c:40:be:36:ec:b3:3a:30:0a:18:5a:bf:d9:d4:f8:d1:
         73:fb:20:e0:80:a5:6d:fe:64:ea:40:51:c6:71:4c:99:a3:be:
         75:44:59:5d:5b:ee:3d:cc:fb:96:b7:99:12:60:db:2c:12:ab:
         13:b4:69:f2:ee:f8:cd:99:b9:9b:cd:c1:9d:6d:7e:e7:ee:e1:
         e8:3c:31:52:8e:1b:86:bc:a1:6a:6a:95:75:29:a0:42:be:4a:
         c3:49:31:80:e3:ce:b1:e8:a3:54:07:6f:d7:ee:54:68:d0:22:
         e4:68:f5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:49:51 2026 by rpki-client