Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
File:                     lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft (raw, json)
Hash identifier:          dz6m8retxUw/5eyDuTbL9n7n5pccRY+/mkZ12S48n1k=
Subject key identifier:   71:00:97:C8:CD:E6:16:39:F7:3B:63:96:2A:A9:5E:DE:EB:E5:B0:C0
Authority key identifier: 94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4
Certificate issuer:       /CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
Certificate serial:       01A110725FC69427C7265D02203BFAC290AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
Manifest number:          0107
Signing time:             Tue 06 Oct 2026 09:01:33 +0000
Manifest this update:     Tue 06 Oct 2026 09:01:33 +0000
Manifest next update:     Wed 07 Oct 2026 09:01:33 +0000
Files and hashes:         1: 8EFr4zmSfzqdm57D9xgzSL6HFtU.roa (hash: E2H7x7svspORsUyoZUb5Yy6dDt0MFzs6hrI962lU9pw=)
                          2: A20plLgDSbDYPkKsac_6bRMiLUY.roa (hash: z0V9AzxoQIFUzBV8fjyUMEhfk1VmSeC6U5leZPnjdgw=)
                          3: B99tftJ3bxlYsGehiZLdzdd8F0o.roa (hash: kpFT/C5y7FkGP0QbpdYmpJalSgylcnakuAFL8w1Cuvo=)
                          4: gR2LIMs8WBieOmDX2G87FSy4ukA.roa (hash: VVK3o6W1lujFw4qXvOpOtwOe6Lz78s4pIxVQ3DpiyXU=)
                          5: lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl (hash: nmaEi/dYrM7w6Defpp6ttqXhe/WHT2N8yDDOKcSn9iI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:72:5f:c6:94:27:c7:26:5d:02:20:3b:fa:c2:90:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
        Validity
            Not Before: Oct  6 09:01:33 2026 GMT
            Not After : Oct  7 09:01:33 2026 GMT
        Subject: CN=710097c8cde61639f73b63962aa95edeebe5b0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:ae:33:16:57:0d:7d:8b:33:d8:d3:30:1e:
                    41:43:d6:90:80:87:52:d8:fb:bf:56:80:ee:7e:5c:
                    72:03:0c:35:20:b5:df:67:15:75:56:fd:79:43:00:
                    fb:83:cf:44:d4:80:1b:2d:e5:b4:4a:19:72:fe:6b:
                    90:cc:45:04:d0:70:43:69:1e:00:3b:61:ce:9f:9a:
                    f0:0d:7d:c2:7f:1f:e5:b4:aa:85:fb:2a:c0:61:3c:
                    bc:87:7e:aa:6a:95:8d:72:bc:eb:78:89:ef:fd:7d:
                    c0:71:c3:b3:63:f2:ca:b7:96:99:dd:05:70:e5:17:
                    9f:1b:33:d1:0e:1e:4c:2b:9e:94:a5:3c:aa:a3:5f:
                    cf:ef:73:fc:fb:86:df:de:7a:5d:98:1a:08:96:85:
                    cd:60:85:59:84:5d:f6:c4:d2:a5:a7:12:13:63:96:
                    5e:7b:9b:24:6e:79:ee:c8:14:b0:ec:6e:14:61:17:
                    0f:c9:d0:26:73:2e:60:7e:83:ec:e5:8e:3f:19:4e:
                    ce:a9:14:e9:75:60:45:2d:31:c3:31:a3:58:e4:98:
                    e7:de:c2:c5:a7:35:37:56:78:cd:29:f1:60:66:59:
                    f0:6a:f4:92:6e:57:5a:6d:a7:92:f5:8d:00:8e:6b:
                    f4:b2:23:3a:ed:fd:8a:32:da:e5:4f:06:30:f0:b3:
                    16:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:00:97:C8:CD:E6:16:39:F7:3B:63:96:2A:A9:5E:DE:EB:E5:B0:C0
            X509v3 Authority Key Identifier:
                keyid:94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f1:40:6c:99:de:5d:95:76:27:e8:9b:8e:95:6f:d5:a2:20:
         d4:3e:0e:77:df:df:db:49:33:ae:78:50:ca:a0:3b:f6:0c:64:
         19:ed:b2:52:b4:23:87:66:6c:9c:28:fe:7a:2f:54:bc:a3:62:
         5d:aa:6a:47:62:5b:29:e8:1c:f8:45:88:d5:93:d0:f1:aa:d1:
         df:a6:9e:95:ee:c9:c0:50:6e:35:7f:68:54:84:37:c3:19:62:
         b7:95:48:6f:5d:a4:e4:1f:64:07:a8:01:0b:7c:5f:7e:17:30:
         bc:24:73:f0:bf:d4:a4:a1:62:31:f1:18:d4:f9:00:38:c8:78:
         b4:fe:6b:0c:d9:a8:eb:40:42:80:db:57:c5:64:e0:d8:b0:01:
         a7:58:77:66:3d:b9:61:41:2b:f7:6e:28:e9:de:7b:74:8e:da:
         07:ad:a6:aa:9a:ba:a4:62:bb:c6:c3:37:c9:9e:66:ff:98:53:
         0a:d3:eb:34:04:9d:10:ee:7d:02:16:61:23:c8:5f:69:9d:36:
         f3:03:85:c4:0b:1a:b4:e5:01:3a:bf:2e:c1:7e:fc:7a:88:0d:
         42:77:92:33:46:e3:3b:53:d6:3d:32:e2:26:46:7c:1c:30:a2:
         1c:cb:ec:f3:ee:03:c5:24:f2:86:52:78:59:aa:2d:bf:d5:e8:
         bd:d7:c4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:39:20 2026 by rpki-client