Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File:                     1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier:          loKx9J1ExX/qIBZ8TikA5VQ8sQKcyWb0Q80cNqomDGo=
Subject key identifier:   18:E4:04:AF:B0:F2:4A:01:9D:3A:4C:71:BD:D5:D5:BB:EC:72:A3:D5
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer:       /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial:       01A14014BB1F931BF8A312E243D0F28FF1AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number:          1AA8
Signing time:             Thu 15 Oct 2026 15:01:02 +0000
Manifest this update:     Thu 15 Oct 2026 15:01:02 +0000
Manifest next update:     Fri 16 Oct 2026 15:01:02 +0000
Files and hashes:         1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: B+m1yyIqDOXpdH3wixjnyubTcqGDQ+G4yHOpl9qwx7g=)
                          2: E66SedHd_vPzIOdI_rSea-dozpY.roa (hash: esa1VAeAMDp/AD53evHUHJNFCVMH1Oxb2JFWktl2xMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:14:bb:1f:93:1b:f8:a3:12:e2:43:d0:f2:8f:f1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
        Validity
            Not Before: Oct 15 15:01:02 2026 GMT
            Not After : Oct 16 15:01:02 2026 GMT
        Subject: CN=18e404afb0f24a019d3a4c71bdd5d5bbec72a3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:e9:04:59:06:ae:d1:30:89:a8:e8:46:a0:
                    09:25:39:04:e8:ba:74:df:69:f7:0f:8f:c5:14:27:
                    a8:fe:d7:3e:e8:14:5f:63:c3:ce:69:7d:66:19:cb:
                    cc:4a:bb:19:76:6c:de:79:25:8a:ab:75:65:fd:64:
                    e2:a2:92:47:16:0b:17:00:bf:c7:fe:d1:a7:8d:24:
                    ec:16:7b:73:d7:0e:02:ad:9c:12:23:bb:b5:ee:9f:
                    69:12:ab:c3:fb:2c:94:19:81:f5:3c:85:0b:95:95:
                    1a:98:cf:10:da:36:d9:68:17:86:aa:8c:8d:9f:47:
                    da:20:db:94:e9:97:3a:9b:57:66:9f:13:00:61:a1:
                    a9:64:51:51:d6:13:fd:b4:28:3c:2f:a0:86:02:a8:
                    cb:ba:ca:b8:f8:92:54:58:07:3b:87:17:24:bd:10:
                    4a:33:ad:59:54:e1:f5:de:2d:3b:76:bd:53:24:29:
                    4b:b5:80:14:81:4d:4f:76:e3:75:a3:2a:e8:17:41:
                    b0:53:c1:71:d8:e2:a6:5d:c6:09:77:7c:0e:51:10:
                    17:59:3b:13:71:46:39:b8:9f:36:2b:51:6d:b2:43:
                    c1:12:f6:54:91:0e:7d:16:56:79:8a:58:1b:70:6a:
                    4e:81:69:df:fa:8d:51:7f:34:97:03:e1:22:51:31:
                    b5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E4:04:AF:B0:F2:4A:01:9D:3A:4C:71:BD:D5:D5:BB:EC:72:A3:D5
            X509v3 Authority Key Identifier:
                keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c7:4f:ab:92:20:4e:75:22:c3:52:88:63:d8:79:5f:a8:4d:
         e7:b4:e5:e1:3f:38:b0:63:07:e6:2f:94:0d:39:0a:28:4e:73:
         0e:84:54:b5:85:79:42:53:62:08:91:18:ce:85:07:1c:cb:b0:
         db:c1:ee:af:2a:5f:2a:7e:f5:a9:b7:55:7a:91:38:b6:83:6f:
         3c:03:65:ae:43:64:3f:fb:03:08:0c:e3:80:e6:fd:e9:90:24:
         7b:76:76:59:fe:f3:d3:36:4c:e1:cd:46:4d:48:52:f9:db:03:
         70:c4:39:85:35:d0:a1:ab:b2:46:a9:c3:64:36:b5:ec:63:30:
         2c:b2:1e:08:dc:da:cc:d0:f1:b6:e1:86:a3:03:25:38:39:c1:
         b3:d9:6e:9c:8e:6b:83:94:3d:25:e8:ff:92:56:2b:1c:1a:8c:
         17:66:f4:3a:34:b6:61:15:cb:ab:10:18:eb:37:bd:1b:f4:78:
         37:75:03:b8:0e:99:e2:81:03:25:a1:3a:52:b3:d5:aa:f4:b7:
         74:55:8d:e9:de:33:9f:fe:01:0d:9a:6a:ae:c2:3a:43:27:6d:
         e4:ca:8c:39:2c:d1:f2:e9:59:bc:48:91:61:0b:ba:a3:27:d3:
         99:92:79:13:08:2d:3d:67:e2:20:ac:81:aa:4b:b3:ed:14:ed:
         61:81:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:59:23 2026 by rpki-client