Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
File:                     lICKbds0DQqKISfGTaKNdw7t3pM.mft (raw, json)
Hash identifier:          fLs+juizCpbon/c4fnH4aN1t8sMwAUl0xQXEwJIfymk=
Subject key identifier:   77:F5:1C:D8:9E:99:60:D8:FB:5E:50:C0:1E:90:3A:AE:FD:12:4C:F0
Authority key identifier: 94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93
Certificate issuer:       /CN=94808a6ddb340d0a8a2127c64da28d770eedde93
Certificate serial:       01A17C294EAD51806B11B11577A65DDEE513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
Manifest number:          013F
Signing time:             Tue 27 Oct 2026 07:00:44 +0000
Manifest this update:     Tue 27 Oct 2026 07:00:44 +0000
Manifest next update:     Wed 28 Oct 2026 07:00:44 +0000
Files and hashes:         1: 0_aFekBMdFqNOphj1MEzPKVtmT0.roa (hash: YB/bN3AAooYOfmHTAnQ/FECmO0TWzvsn8QhVsoUQzUY=)
                          2: 64dQ7wuxDD-Gyrchphsdtk6oJ_8.roa (hash: BeGDi5VESth0C9pJC6qZlN6Zb8k5M9gWJV+LnTk4B3Y=)
                          3: Hz2P5UT2vq-r0W3iw6fkXQeM3es.roa (hash: jyeskLTbwVPBESh5W51wXjNVOuucTxX63WTMSQq/zQk=)
                          4: PdHeaDywJi7J-a3zuc6-1mdUfSM.roa (hash: l+ho2GKXOZvF0KZ6/PCYPC090Oshz6jifmJBVRB6i5c=)
                          5: VGNTVsc9nejbVwiuI2nbOHrhT4A.roa (hash: wG2E1ysGhVBc57CqY90n2KOFbOVGCHFK1WJuuKwNSso=)
                          6: lICKbds0DQqKISfGTaKNdw7t3pM.crl (hash: uDVyI/IBZd2kUll691qH44VVtlme4QDMOTNdbtSIK3A=)
                          7: oThXb4QmTGdzVtthRGYRVzspjNY.roa (hash: vrCmZWsAWrsHQ4ME8ZX38nmpmr/rd33lideKndjp8sU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 07:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:29:4e:ad:51:80:6b:11:b1:15:77:a6:5d:de:e5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94808a6ddb340d0a8a2127c64da28d770eedde93
        Validity
            Not Before: Oct 27 07:00:44 2026 GMT
            Not After : Oct 28 07:00:44 2026 GMT
        Subject: CN=77f51cd89e9960d8fb5e50c01e903aaefd124cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:69:ed:c0:e3:22:c3:81:2e:a5:b6:59:06:eb:
                    66:53:97:5d:c3:0d:32:ed:97:af:3a:11:46:5b:c4:
                    27:29:c3:3a:71:96:00:08:ad:b3:de:24:82:2a:f9:
                    1b:5c:2b:cb:b3:a6:30:a5:fe:de:db:b6:4c:33:bc:
                    49:2e:35:d3:18:87:71:1a:11:9e:e6:77:de:1f:81:
                    4c:aa:0a:8a:3f:ff:88:75:e4:19:f2:c0:e0:fe:f4:
                    7c:8b:6f:5f:69:99:62:ad:ed:1d:6d:b3:f5:cf:56:
                    49:44:e2:43:a5:ce:ef:c1:89:ff:59:cd:eb:d3:e7:
                    f8:c3:d6:d6:25:78:1e:3c:fd:7a:d4:46:9a:39:e0:
                    35:34:20:f8:d9:40:95:fb:7d:75:c9:33:a3:0b:4c:
                    d3:82:3d:9c:c6:cb:86:73:03:ab:00:ae:54:86:da:
                    7b:d9:17:25:b2:41:38:ed:e5:77:f3:71:5e:b6:a0:
                    36:c1:df:58:c4:16:41:49:8d:d4:7d:0c:13:44:83:
                    14:fe:33:1e:2f:39:6e:78:52:ce:ce:dc:df:9d:43:
                    39:19:dc:f2:fb:2f:32:65:de:b3:c9:05:dc:35:53:
                    56:d0:cc:43:19:69:f6:be:0b:19:0c:54:87:36:64:
                    28:c5:91:86:0c:e2:54:13:4c:42:46:76:77:64:8f:
                    9d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F5:1C:D8:9E:99:60:D8:FB:5E:50:C0:1E:90:3A:AE:FD:12:4C:F0
            X509v3 Authority Key Identifier:
                keyid:94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f2:b9:72:01:91:c6:13:cc:91:cf:58:bd:85:52:2a:5e:50:
         2c:c3:40:79:c3:4c:0e:86:9a:4a:c4:95:44:12:50:e5:42:4c:
         e8:21:1a:15:c3:71:87:64:87:ec:62:98:d7:31:14:ba:96:17:
         61:72:2b:3e:b1:5a:a4:5c:65:bf:ef:d1:ba:bf:a8:9e:bb:d9:
         07:69:86:a4:97:15:9d:53:8e:91:71:0b:7f:8f:27:73:da:86:
         d7:bb:ef:ef:a0:2b:2d:fd:83:eb:c7:82:aa:5b:14:cc:2c:5e:
         d4:76:30:b1:a6:29:ab:7b:a2:26:89:c4:e6:a2:1f:7a:ef:ba:
         06:b2:ce:a8:b8:f9:a8:52:c9:85:54:db:86:dd:bd:96:59:d5:
         79:46:59:7a:41:b1:24:ed:04:4f:ec:e5:93:22:8d:86:16:6b:
         fc:fb:9f:96:52:4f:6c:e3:19:47:ee:68:d0:ca:28:cd:64:11:
         87:ce:9e:43:d9:b3:ed:61:79:83:30:4a:6d:44:78:d2:e8:a0:
         44:6f:e5:3a:ab:e3:35:8e:3d:ca:c8:a0:29:dc:12:5c:d2:e2:
         02:ce:80:41:81:c3:6c:5b:71:b9:34:9b:7c:e4:3b:11:a3:09:
         bc:9f:c5:df:d6:d0:5c:e1:81:3a:59:85:dc:02:bf:88:3b:a4:
         dd:69:68:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:58:46 2026 by rpki-client