Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
File:                     rVwudMbUbMc8mKTBYIeoo7Om91k.mft (raw, json)
Hash identifier:          47WRdyJjzQw+cgpAoRtDnM45CEjd/e1D7YM+xiPy0ME=
Subject key identifier:   D4:66:FF:79:F5:CF:BE:D5:2C:55:CD:52:6C:9C:2D:5A:DD:41:49:89
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Certificate issuer:       /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial:       01A171381377A7DAF3E80CA713ABD0A211C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
Manifest number:          1AD0
Signing time:             Sun 25 Oct 2026 04:01:02 +0000
Manifest this update:     Sun 25 Oct 2026 04:01:02 +0000
Manifest next update:     Mon 26 Oct 2026 04:01:02 +0000
Files and hashes:         1: Rxu6PY6T12eD6Vlw9k60_83v9Nc.roa (hash: j/YK/yQpe4IKOS3k5YPKzOKh1qWi6WCqC8bqntTBlxY=)
                          2: VFU37iQljI79t35JlR-w1IteaQw.roa (hash: J5t9v+o/rmxrY3dLqpHoI3srOK2b8Gw8LuwtD186cUY=)
                          3: gPtYr61h83pA7-mt902KElGDuI0.roa (hash: Kfj49mH4lsVszd4rTCsS6tC3nnBrcy/t3kH2S5AxGGo=)
                          4: nUBRGA1FEWK-usieosyBaTq-H8Q.roa (hash: vDMG9fme7VB9AauE97OnMRGk4k7A0gMGf6ktOmefSMw=)
                          5: rVwudMbUbMc8mKTBYIeoo7Om91k.crl (hash: 0lMIBzC12JI2PFV7ld97qvZOSt+dyr9b7rwYBWLta3Y=)
                          6: sixxThEQTX1zUHOzyF4MB92-RaY.roa (hash: secsUzL3O2X6Ac6rYvaZ+cU3vmetNixtbbwwWKOjrmw=)
                          7: uWkEc-fbIJqw99dNiiEwAeVlWfM.roa (hash: 1DSbIjvJqT3rylhutdS0OLOYTOnrBsAi7+g/hYhs1tM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 04:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:71:38:13:77:a7:da:f3:e8:0c:a7:13:ab:d0:a2:11:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
        Validity
            Not Before: Oct 25 04:01:02 2026 GMT
            Not After : Oct 26 04:01:02 2026 GMT
        Subject: CN=d466ff79f5cfbed52c55cd526c9c2d5add414989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:69:19:1c:9b:69:af:6a:d6:88:0d:42:29:39:
                    cf:bf:09:89:c9:ba:5b:f4:96:7f:8d:53:fb:30:1d:
                    e6:f3:6a:21:ef:e5:ae:16:f5:94:5e:c1:90:d2:6f:
                    7a:cd:a1:2d:aa:55:ac:97:67:f4:f9:da:c7:a9:c6:
                    45:97:6b:a6:c2:f2:8e:0f:22:55:43:33:43:8f:4c:
                    9a:c4:02:35:59:b2:44:83:55:9f:f3:2f:d5:50:60:
                    45:5c:42:70:20:c0:da:e6:34:77:24:ce:dc:72:55:
                    a7:ee:67:ec:a2:b0:ed:4e:b9:e6:28:8d:ed:18:c5:
                    51:0c:90:e4:fc:ab:a3:c1:20:fd:18:8f:f8:66:8c:
                    ba:67:a1:a8:ed:43:c7:77:8f:5e:3a:ff:b0:ec:54:
                    4b:76:bb:9e:60:2c:6d:3c:2e:d8:b9:99:b1:8c:7e:
                    81:74:d3:ac:9f:0c:96:48:9c:6a:00:87:ea:5d:34:
                    d2:09:4f:21:8c:49:65:53:e1:d0:c1:17:28:3e:0e:
                    fa:7e:c8:26:04:74:34:46:23:b4:93:07:05:cd:a9:
                    69:49:08:8d:cd:38:48:2a:62:32:b8:e6:e2:2c:2c:
                    69:e9:02:38:3e:18:c5:b8:a0:b1:fe:27:dc:8e:3b:
                    be:50:6e:7b:33:bb:e7:cf:8a:a1:1f:40:22:38:6d:
                    6f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:66:FF:79:F5:CF:BE:D5:2C:55:CD:52:6C:9C:2D:5A:DD:41:49:89
            X509v3 Authority Key Identifier:
                keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:40:c4:db:fd:fb:69:43:8f:3f:2f:b6:6a:51:12:5b:e8:65:
         3d:ea:81:51:9c:fd:8b:bc:18:99:2c:f0:a5:81:0e:ea:5d:54:
         51:12:c9:9d:30:9d:1d:2c:27:40:f3:c5:30:84:8c:55:51:be:
         cf:70:49:e3:00:de:16:a9:be:87:36:8b:27:04:47:6f:36:e9:
         c4:92:8e:de:c4:6b:c6:02:25:00:25:77:6e:b4:68:27:1b:3a:
         8b:ce:5f:b2:09:e3:6e:7d:32:b5:34:ab:06:5b:1e:1c:83:01:
         79:09:78:66:32:dc:2e:af:7b:9a:54:96:62:0c:67:81:09:84:
         4a:fe:71:d4:a4:7a:1b:33:a4:c0:55:ad:b2:57:96:98:ec:68:
         97:56:10:5b:7b:43:87:42:96:39:f4:7d:dc:3a:1e:7a:52:24:
         8c:fb:3d:e9:c6:44:95:98:6a:95:db:40:70:38:2c:2b:ba:68:
         01:4e:ee:b8:75:ed:f4:1b:7e:9f:65:d1:f5:c8:3c:8c:b4:96:
         e7:3e:5a:1f:96:00:26:7e:7a:42:05:ee:52:19:0b:70:06:57:
         4d:2d:29:bd:b6:1b:01:bb:77:dd:49:4e:9d:64:6d:83:81:cb:
         7f:66:3b:cb:ba:07:65:1a:a3:1f:19:04:98:f7:3d:c5:53:1f:
         1a:b3:05:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 15:52:46 2026 by rpki-client