Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
File:                     sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json)
Hash identifier:          +nrhk2EojtLB29rlKEGxBzENdENN11e03bcfxlXkDCE=
Subject key identifier:   B3:C6:3B:D3:09:7E:46:99:E5:A3:02:A0:4E:C8:75:EA:A2:9B:B1:11
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Certificate issuer:       /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial:       01A12F42A4CFC9F2A25F8265772CE1169778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
Manifest number:          1531
Signing time:             Mon 12 Oct 2026 08:37:39 +0000
Manifest this update:     Mon 12 Oct 2026 08:37:39 +0000
Manifest next update:     Tue 13 Oct 2026 08:37:39 +0000
Files and hashes:         1: 41LKwPw-LLlX1iRyv05q0eGVxQA.roa (hash: /hldaDmFUq5ScLzS5Do9OQvpCy6tJ6Mldta+rPoVSBs=)
                          2: PxHWz5moTOIoq7lLr6ZUTCdq4LU.roa (hash: G/0ObNAWG5S5HRnt08VFe1x59GMhL5BOy9mX5utE8l4=)
                          3: QdmtMonnxjCquFhjrcUo8qpZ9bk.roa (hash: wbBSWKojB7pH/vu01mc7MlC/g/OxHu6eJE6dc+J3abI=)
                          4: _IvJfFzGHlNib8r-PrbygGaf9ME.roa (hash: ujiDP9ug2z8JoHMVWVWd8NY4OblKHkwk6gW1+3Pknes=)
                          5: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: 4V1M3GJ3vqIVPC2IKeGIc5mK36ZTSTBi98M12QO6Jjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 08:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2f:42:a4:cf:c9:f2:a2:5f:82:65:77:2c:e1:16:97:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
        Validity
            Not Before: Oct 12 08:37:39 2026 GMT
            Not After : Oct 13 08:37:39 2026 GMT
        Subject: CN=b3c63bd3097e4699e5a302a04ec875eaa29bb111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4c:c8:c3:0d:fc:a9:1a:f8:79:88:dc:b4:58:
                    95:89:a6:a8:91:4b:82:65:d1:52:8a:19:dc:be:de:
                    44:71:e8:b9:c8:11:df:b2:45:0b:ba:7a:9e:1b:4f:
                    6a:63:b9:4e:15:66:61:df:79:8f:b1:97:8d:80:07:
                    2f:44:d2:06:c2:0b:3c:7c:bc:67:b5:86:66:86:d2:
                    6d:1f:d2:83:6c:2d:2b:d7:f6:5c:ef:ff:00:21:70:
                    72:47:8c:b7:7f:86:9c:73:a7:31:69:09:c9:b0:32:
                    60:69:b9:c5:2b:97:48:1c:9f:35:da:7b:50:b7:e7:
                    c0:66:c4:9d:76:92:02:2a:e3:a5:01:6b:e6:31:b8:
                    d3:2c:e4:ba:fd:b1:07:11:fc:b7:76:4f:c6:95:f7:
                    06:31:fc:03:2c:25:df:6b:08:90:a8:80:81:3f:1c:
                    05:6b:ef:0c:61:53:5a:a2:c2:34:24:53:7e:38:d7:
                    f0:e7:6a:f0:b7:af:6e:88:a0:b3:7b:46:f1:9a:b6:
                    23:8b:20:5f:af:72:6a:47:4a:08:0c:2d:e3:a6:c5:
                    97:3a:e0:2a:b9:45:92:58:30:55:c3:41:01:4b:82:
                    32:c9:34:a1:23:c0:d3:ee:8e:42:99:3b:93:25:58:
                    e9:a3:d2:43:ca:d6:ab:d2:81:45:cd:c8:2d:69:25:
                    82:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C6:3B:D3:09:7E:46:99:E5:A3:02:A0:4E:C8:75:EA:A2:9B:B1:11
            X509v3 Authority Key Identifier:
                keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:84:47:db:8b:4d:2b:fc:4a:b7:68:0a:39:20:12:57:25:61:
         47:9e:7f:4b:fd:9e:d0:ce:17:7e:48:10:b3:ed:d6:86:53:32:
         bc:ca:b4:ef:19:f6:e3:aa:f0:a5:b6:6a:33:1e:4d:97:b7:8b:
         8d:a9:2a:26:f2:c5:fc:90:fe:ae:7b:4e:6b:91:5a:d0:8c:04:
         d3:f4:da:ac:e4:23:8b:e0:69:0a:20:11:34:25:ee:c1:2f:4b:
         b2:1b:41:c3:37:18:5e:55:05:40:2c:fa:59:46:f1:bb:be:6a:
         03:26:b3:9f:90:47:94:fd:04:9e:26:12:24:f6:b1:a6:1b:1d:
         a8:b6:b0:b6:3e:98:9f:93:17:14:c0:ec:b8:9a:01:49:37:e2:
         43:20:ec:75:8a:a5:9c:5b:62:48:52:ef:98:49:ac:f4:a6:17:
         a9:6c:e9:70:a8:7f:7d:56:08:38:a8:53:32:07:7f:40:1c:3c:
         7a:c7:23:c4:4f:c3:66:ca:82:95:83:8a:8f:8d:75:a4:2a:f9:
         34:ed:90:5c:82:a2:c4:12:e0:4a:55:91:7f:9a:77:b7:0f:0f:
         49:93:b4:cc:ea:96:8e:e0:b7:4e:be:d2:fd:f1:7f:12:49:03:
         a2:c1:23:78:1e:5f:8b:9d:5d:2d:bc:9d:09:55:e4:cd:ef:96:
         62:39:dd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:03:22 2026 by rpki-client