Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
File:                     93n18CiJhaveCYJ-A9eHpSFJ5-w.mft (raw, json)
Hash identifier:          ARA46uw29kZRmL0NrVuQ0PSSg0KrV8lbfmS3jcWaYDo=
Subject key identifier:   B2:36:67:CE:99:0C:AE:66:73:66:4E:59:B7:25:29:BA:16:56:D7:D3
Authority key identifier: F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
Certificate issuer:       /CN=f779f5f0288985abde09827e03d787a52149e7ec
Certificate serial:       01A13E26316FE3B89BA07841732549348556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
Manifest number:          1AAC
Signing time:             Thu 15 Oct 2026 06:00:52 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:52 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:52 +0000
Files and hashes:         1: 93n18CiJhaveCYJ-A9eHpSFJ5-w.crl (hash: tJEujffiFE/x9Sqe28ARUBnbn/8lzjF277JyHbAEchQ=)
                          2: c06tR7wEve3BgRsZfi2xd-31eVA.roa (hash: V2mYqL9ivwyeeA9Wbx55/u2xDyhE5GyqU/pPOSpOihs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:31:6f:e3:b8:9b:a0:78:41:73:25:49:34:85:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f779f5f0288985abde09827e03d787a52149e7ec
        Validity
            Not Before: Oct 15 06:00:52 2026 GMT
            Not After : Oct 16 06:00:52 2026 GMT
        Subject: CN=b23667ce990cae6673664e59b72529ba1656d7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:0e:4a:9b:b3:31:7e:09:e4:f4:7e:54:b2:
                    2e:b8:e0:11:8f:a6:df:69:02:28:7a:04:24:1e:48:
                    6d:f8:c4:3b:20:f0:c1:d1:54:0c:3d:7a:8c:7f:db:
                    64:b2:89:d9:04:12:1b:bc:db:4a:aa:97:d0:15:a3:
                    5b:f8:4b:39:e6:ed:1f:8f:6b:8c:38:89:99:3e:c1:
                    f9:b2:94:e3:57:48:d6:68:14:77:ba:37:a2:ba:32:
                    7d:3a:fc:c3:00:9d:6f:12:cd:d5:e9:05:ec:90:84:
                    7c:2f:19:67:b0:1c:84:e4:e2:e3:a2:56:06:0a:a5:
                    51:73:dd:b0:90:4c:75:03:09:25:79:e6:78:76:3b:
                    7b:51:5c:be:57:01:6f:f2:c2:4d:f5:c5:7d:7d:96:
                    24:5e:84:9f:c7:93:31:50:1d:e7:f0:b7:30:78:69:
                    49:8e:65:e4:b8:76:85:0a:e0:39:90:6c:1e:98:75:
                    3b:62:65:43:0c:e5:6d:5f:7a:db:71:90:92:b7:8e:
                    6c:3b:fe:36:20:9d:ae:04:42:77:ca:9c:b8:b2:36:
                    9a:3f:ab:14:73:3a:dd:b1:51:fd:4c:96:e0:46:8c:
                    a0:7e:75:2c:5d:e5:db:43:4a:e1:b1:ca:4e:f1:23:
                    56:ab:d4:d9:30:30:ef:1c:c8:77:10:2d:3a:0c:3f:
                    f1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:36:67:CE:99:0C:AE:66:73:66:4E:59:B7:25:29:BA:16:56:D7:D3
            X509v3 Authority Key Identifier:
                keyid:F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:fd:61:ac:7f:13:6e:84:a4:ae:80:5e:48:ea:35:18:9d:31:
         d5:45:06:6a:e9:1d:a2:b2:c9:9b:34:ac:f5:af:8f:c4:ee:d9:
         29:02:b2:a0:c4:09:0f:2c:23:fd:61:24:5b:86:a3:c0:04:ad:
         51:80:88:21:57:8d:9d:6b:82:d4:c5:93:a9:ed:e7:69:36:14:
         11:4c:44:57:b1:4f:56:87:7f:98:fd:71:13:3f:33:ae:30:db:
         d5:1b:9d:0c:7f:58:11:8b:4a:a9:55:c0:08:92:46:e8:de:f2:
         21:4a:fc:a3:99:78:03:ba:91:e3:83:b9:53:a9:a6:40:19:32:
         34:32:2f:79:9f:0b:17:ef:aa:9f:11:7e:a7:8a:d2:29:ae:fb:
         52:87:27:5c:5c:ff:d1:a8:fb:74:1a:1b:c7:bd:4d:62:27:a7:
         93:4e:11:6c:b5:a6:41:88:d8:84:61:99:aa:fc:d0:92:0a:78:
         cc:f9:cd:ce:0d:20:36:f3:c9:f6:61:e9:53:6d:26:44:b2:ba:
         96:b1:d1:97:0e:50:56:11:02:f1:c6:22:b1:6e:64:ba:51:f9:
         fb:bd:f4:c2:87:51:c9:f9:2a:4c:eb:0b:86:d9:be:4e:ad:fe:
         72:6c:87:fb:c0:b7:1d:cf:98:31:fb:a2:3e:f1:66:94:46:f4:
         8d:a8:0f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:54 2026 by rpki-client