Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
File:                     rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft (raw, json)
Hash identifier:          WQI5CXLAQyNWKbWo0xjFnu9Qs7c3ew/Brd2i+WXMBT8=
Subject key identifier:   BA:BA:CD:51:3E:2B:A9:DF:2C:2D:5F:76:49:26:47:CA:8E:04:D1:B8
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Certificate issuer:       /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial:       01A161FB7B4ADF2CA85AEC1089166E400302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
Manifest number:          1AB7
Signing time:             Thu 22 Oct 2026 05:00:33 +0000
Manifest this update:     Thu 22 Oct 2026 05:00:33 +0000
Manifest next update:     Fri 23 Oct 2026 05:00:33 +0000
Files and hashes:         1: 1cRlTVeHuriEMSuZag34rfiSKZQ.roa (hash: OlYfnvQCajHgPtwJVq37KeK/wVE1TX6e1PHAiHTVPas=)
                          2: 2pok9xJkRmV7G5KjO3Ssd6tFcqw.roa (hash: KoLqQThDszC4VMDHG0N47iFOrNC8BwC1qVShpNw7N6s=)
                          3: JyOMnJgKMoFcNN43M_f5LI8XErA.roa (hash: SNoMZNzmCYdIoiwDjZbbibJBXJA6CdM7GlaPizZt3KQ=)
                          4: aa2Z_aSbNPyZ2UsmfSQtTJhHn_4.roa (hash: FtDK49Ysh1r9A0NZdb70mTg5pImu9NrACPcmS/OHayk=)
                          5: rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl (hash: mIb3WWm+rb7qQBPsDcTAdtmt92N09biW5nvQEdGQaFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:61:fb:7b:4a:df:2c:a8:5a:ec:10:89:16:6e:40:03:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
        Validity
            Not Before: Oct 22 05:00:33 2026 GMT
            Not After : Oct 23 05:00:33 2026 GMT
        Subject: CN=babacd513e2ba9df2c2d5f76492647ca8e04d1b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:56:42:72:27:40:ab:f8:14:c6:df:fa:fa:ce:
                    97:d3:1e:1d:af:53:f4:47:91:9c:25:25:6c:a1:a4:
                    e4:d4:8d:57:e4:46:a2:ac:29:9e:74:65:3f:91:c7:
                    5e:08:21:f9:3e:07:a3:dd:84:c9:0f:83:d0:8e:a7:
                    3e:33:a2:a6:fd:35:23:94:f4:d1:49:ff:62:d6:bd:
                    9c:61:86:e4:4e:8f:ee:c1:5b:df:00:ad:75:54:cb:
                    9d:c8:f4:8a:00:59:45:83:e1:c2:f6:8c:6f:37:17:
                    e7:5e:3b:50:f1:28:c3:c0:d6:4d:3a:49:c8:72:29:
                    9b:01:86:ae:10:25:00:c8:ea:05:9b:2f:2b:35:31:
                    fb:27:e7:33:69:4f:60:70:85:0b:21:a3:27:55:6c:
                    87:9c:4a:76:f1:ba:12:ec:76:41:79:b2:cf:64:4c:
                    10:d0:d2:fe:e6:58:52:b4:7f:ab:b8:1f:f5:4d:61:
                    47:19:3a:5b:0d:9a:88:ae:30:a1:67:a5:cf:27:8f:
                    e4:b6:17:08:01:06:c0:ac:7f:a9:2e:02:72:e3:2b:
                    e4:93:34:37:ff:2d:1e:94:3c:c7:80:74:07:41:d5:
                    28:5d:fc:ad:eb:9e:70:b1:73:0c:0f:fe:28:b8:4b:
                    c6:f0:8c:6c:27:70:26:65:8a:65:e3:74:fc:64:96:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BA:CD:51:3E:2B:A9:DF:2C:2D:5F:76:49:26:47:CA:8E:04:D1:B8
            X509v3 Authority Key Identifier:
                keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:aa:a3:f7:a9:69:95:aa:19:d4:14:96:6c:5d:e0:80:d4:cb:
         a3:14:cd:4c:8b:3f:c3:b9:53:16:7c:3a:6c:66:02:3a:6f:3c:
         88:39:34:25:05:e1:92:2a:c6:10:4a:50:17:08:a4:ad:2a:d6:
         b3:d9:e0:99:8f:7f:fa:88:d0:85:f3:62:4a:4b:4c:73:dd:6d:
         cd:8d:37:00:29:74:98:d2:21:e2:3a:d6:96:2d:50:6d:4f:47:
         e8:b3:60:67:be:ac:14:db:04:5d:5a:4c:12:94:60:5b:6d:43:
         d3:62:5d:70:e1:eb:f5:e5:3d:29:af:d2:74:bc:2b:f7:9f:5b:
         1c:40:9f:ed:d3:39:04:7d:4d:ea:de:8e:99:4d:f5:bf:96:41:
         b9:21:41:03:9e:3c:4c:56:61:bd:93:0c:a8:d3:ef:19:df:96:
         73:b8:58:89:d6:1a:23:e0:9d:3f:34:57:92:8b:b8:d2:88:6f:
         14:19:b4:be:ac:90:72:d8:37:d8:79:b2:84:80:87:ad:92:f2:
         54:8c:99:4b:35:13:0d:09:7d:33:0c:ba:67:28:a5:27:d7:08:
         18:b1:2f:b8:ba:e4:7c:54:2b:3f:67:1b:df:e4:60:fa:74:b6:
         11:cf:3b:b0:c2:55:1b:02:92:e6:33:19:58:f8:3c:ca:09:82:
         01:44:15:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:32:40 2026 by rpki-client