Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
File:                     Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json)
Hash identifier:          X3MEdqbBQCW7XZRF/fvM4bjI6BWcxx5ruqpEZpLfMtE=
Subject key identifier:   6D:A5:C3:B5:11:95:75:91:68:01:AD:32:DD:34:84:19:A6:84:E2:2D
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Certificate issuer:       /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial:       01A13DB7D0E1F84A122DA04E798A3472F01E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
Manifest number:          1AA5
Signing time:             Thu 15 Oct 2026 04:00:19 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:19 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:19 +0000
Files and hashes:         1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: afiedv7mp/JcsFXGjaVKNtun4toz1MMUnDow8g6AdwY=)
                          2: yko62gQUpDznk6pbTXdM7BFWgrg.roa (hash: 4X0+42FTN6ZFQiCpU0LUUz9jtfGgyphhCU+pgUNgAQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b7:d0:e1:f8:4a:12:2d:a0:4e:79:8a:34:72:f0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
        Validity
            Not Before: Oct 15 04:00:19 2026 GMT
            Not After : Oct 16 04:00:19 2026 GMT
        Subject: CN=6da5c3b5119575916801ad32dd348419a684e22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:30:79:57:93:42:1f:e7:9c:06:76:12:f9:5c:
                    d6:c3:da:18:07:f5:61:e1:4b:6b:8f:bf:7e:cc:70:
                    8d:68:f8:6a:58:3f:3b:26:d2:64:f3:e0:54:cd:b9:
                    ed:cd:0a:1d:2f:87:d9:53:15:ed:7b:36:00:10:f1:
                    6b:b7:a8:ab:df:9d:3b:e6:e3:0f:48:48:0c:fd:8a:
                    45:84:65:ce:84:89:9d:ca:77:9a:50:dd:40:17:3a:
                    24:8e:ff:84:3d:54:d3:cb:d6:0d:e8:dd:43:bf:56:
                    bd:4c:f4:00:92:09:b0:dc:a7:e3:fe:0f:d2:9b:80:
                    81:34:63:f9:e8:9c:3b:82:9e:2b:d2:25:68:8d:39:
                    c4:3e:f7:97:99:e7:52:3c:39:94:dd:ce:86:8c:f1:
                    10:d5:3b:48:9b:8c:86:20:8b:28:b1:13:bb:5d:0d:
                    57:d0:0e:0a:90:05:82:a5:64:49:21:d3:63:c2:43:
                    68:f9:b3:45:2e:cb:11:30:ae:3f:79:a5:d7:6f:86:
                    6f:30:6c:34:b3:dc:9d:98:d2:63:f8:75:b3:0d:e9:
                    70:81:d1:03:43:ed:3c:4e:ab:15:17:40:1b:7a:5e:
                    0b:b3:34:75:e5:cd:fe:91:2b:48:e5:2b:01:f2:24:
                    89:fb:9c:a8:b5:d8:a2:8e:3e:85:8a:15:6b:6d:88:
                    21:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A5:C3:B5:11:95:75:91:68:01:AD:32:DD:34:84:19:A6:84:E2:2D
            X509v3 Authority Key Identifier:
                keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e9:ee:a8:d5:5d:6a:ca:8a:5e:c5:d3:36:fc:01:ce:24:64:
         f8:ed:6d:75:4c:26:41:34:1e:c1:e7:b5:31:a5:3b:45:60:a7:
         86:ea:f4:9e:dd:3e:58:9f:be:57:f7:a4:2a:90:1c:4c:90:cc:
         f7:f3:b7:d6:fe:11:d4:8a:54:0b:e3:cd:07:b0:8f:3b:77:a1:
         a6:64:80:74:f1:c6:59:fa:17:0e:ae:2a:30:d0:0f:e7:1d:14:
         f9:40:68:8c:02:38:36:0d:92:6f:b1:11:b3:69:86:78:05:a5:
         87:96:e5:12:b2:ed:c9:6b:3d:5a:77:c7:00:64:ed:df:6c:86:
         0c:67:de:44:d1:d5:73:b8:11:a1:21:54:e5:be:75:3d:27:2b:
         18:e8:7f:09:52:d8:c2:36:ac:8c:72:c2:39:7f:6c:aa:12:38:
         77:05:54:2f:26:4d:2d:be:ba:8e:78:41:05:0b:07:c2:36:b7:
         cc:8f:f6:14:1d:ad:5a:22:4c:2e:74:f9:60:30:88:3b:f4:ba:
         d2:d6:ee:89:5c:0e:fb:29:69:af:65:03:b7:09:09:d9:c8:e2:
         ae:3f:ba:4e:3d:a2:f2:c6:e3:c6:52:4f:e6:66:a8:5b:40:4c:
         51:a4:68:e5:95:96:f6:db:ab:a9:8d:a5:61:f1:48:45:ef:3b:
         41:88:35:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:21:10 2026 by rpki-client