Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
File:                     rAmEUBCEpHIgxczPVHi4l8KCLH8.mft (raw, json)
Hash identifier:          FS93v2hCAsaezoKkT916dR4iboTFXNhP8Z/HOBPSNdI=
Subject key identifier:   C9:A7:0F:C1:E5:B5:CC:54:31:0F:77:32:95:11:4A:B1:F3:9B:6A:C5
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Certificate issuer:       /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial:       01A117865C95CAE993FD90ED58C917D3BCFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
Manifest number:          1A90
Signing time:             Wed 07 Oct 2026 18:00:43 +0000
Manifest this update:     Wed 07 Oct 2026 18:00:43 +0000
Manifest next update:     Thu 08 Oct 2026 18:00:43 +0000
Files and hashes:         1: IgFQrerKfVP7wy44zfUDO_Ryu40.roa (hash: d+QkU0y4pn6BlJ50YCAOplUfwVp1JgVys4D+BWQE0Ss=)
                          2: eIsRP9-R0B5y8Q9SMASC2fuIFUo.roa (hash: Sf1KzRutRQ8Om6lChpX9qp6C7pNo5SKRUwiV8EG2Y1Y=)
                          3: rAmEUBCEpHIgxczPVHi4l8KCLH8.crl (hash: Sco72ZcRtXngftZx8ry6eU0b0MlL2DBuPOBFfhaD2Aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 18:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:17:86:5c:95:ca:e9:93:fd:90:ed:58:c9:17:d3:bc:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
        Validity
            Not Before: Oct  7 18:00:43 2026 GMT
            Not After : Oct  8 18:00:43 2026 GMT
        Subject: CN=c9a70fc1e5b5cc54310f773295114ab1f39b6ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e3:3e:5d:d1:43:88:cd:da:66:3c:a8:b1:cd:
                    9d:17:ce:1a:a2:f5:db:32:8b:ab:b3:4b:0b:ed:c3:
                    71:f9:f7:1b:6f:8f:bc:63:72:04:42:5b:ff:8d:be:
                    6a:61:a3:45:27:31:a1:38:57:61:15:3b:89:1d:41:
                    59:eb:0e:bd:d2:ce:80:fd:9b:20:ee:df:77:c8:c5:
                    52:1e:07:fc:98:91:f2:9c:5b:79:dd:db:87:8c:8c:
                    0d:2a:d6:93:f2:60:68:d1:b9:ae:3d:50:6f:0a:96:
                    b2:0d:f9:3c:1e:a6:90:df:67:66:cf:57:7c:e9:e0:
                    06:11:f7:06:49:37:36:88:9d:99:82:79:fc:71:e3:
                    ce:c3:93:98:ad:09:d8:d3:76:f2:9a:bd:19:8e:5c:
                    41:3b:75:0b:9d:66:70:3e:c7:41:30:bd:c6:42:c6:
                    2c:1e:37:fe:ed:db:10:8d:72:b3:ed:17:4e:e6:2a:
                    7e:98:0c:27:7b:c3:9e:e0:98:a8:5e:e5:40:54:6b:
                    3a:34:37:c3:1b:5b:ec:b6:ac:fb:d4:31:0e:f5:3a:
                    0e:81:61:49:ff:f1:91:00:f7:65:75:4f:4b:2d:99:
                    bd:2e:6c:38:c6:11:29:d2:d2:e3:34:b5:3e:50:d9:
                    19:81:0d:a4:7d:10:65:48:10:a6:2c:c7:0e:2b:b1:
                    5f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A7:0F:C1:E5:B5:CC:54:31:0F:77:32:95:11:4A:B1:F3:9B:6A:C5
            X509v3 Authority Key Identifier:
                keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:1c:9f:a8:82:c6:13:23:a0:f2:fc:9b:d7:d4:a4:f6:37:52:
         01:a3:dd:2b:9b:ca:53:20:21:6c:ce:d3:23:aa:96:ae:b9:e7:
         60:74:18:ae:08:57:8c:99:2e:63:33:83:77:a4:b2:9f:e5:76:
         a0:07:d2:93:02:c0:9e:67:d6:46:86:ce:55:80:22:ef:d5:77:
         b5:65:16:06:0e:ce:84:8d:74:81:3c:bc:5d:eb:f7:c6:5f:b7:
         eb:87:d2:1a:96:b4:2d:88:46:9d:b4:1e:ee:c0:34:5f:14:50:
         06:4a:14:e1:55:49:f2:33:e3:00:2d:57:a6:17:e5:de:7c:99:
         c3:3f:9e:0b:dc:2c:87:1e:ac:9c:bf:31:4c:2f:c5:46:11:d0:
         05:52:d7:e3:0c:05:01:b1:77:82:1b:bd:89:52:d0:08:de:f1:
         9e:0f:77:bf:03:a8:7b:22:66:29:c2:1f:23:58:c6:c9:a5:dd:
         79:b4:2b:cb:a4:d4:6c:d7:04:cb:df:fb:f2:35:82:d0:fd:66:
         ed:ff:d6:f8:b2:66:d3:5d:fd:ee:59:27:82:70:0f:da:56:0a:
         82:36:90:fd:1e:59:15:c1:07:50:fa:dd:60:8a:19:5f:32:a8:
         b1:49:7f:cd:95:a7:fd:7b:8c:eb:ff:d6:0a:b6:f5:19:48:b4:
         bc:85:db:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:54:08 2026 by rpki-client