Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
File:                     RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json)
Hash identifier:          7vJAilJwQyp3ceYM2jdnnxCWTVYh/mdG9tlWkjURRUw=
Subject key identifier:   11:51:B4:99:8E:D5:AE:A3:E6:B9:E0:37:7E:92:1C:9F:D9:4A:C9:28
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Certificate issuer:       /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial:       01A1532D9F372D104CC9546FEA6B85122994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
Manifest number:          12AD
Signing time:             Mon 19 Oct 2026 08:01:00 +0000
Manifest this update:     Mon 19 Oct 2026 08:01:00 +0000
Manifest next update:     Tue 20 Oct 2026 08:01:00 +0000
Files and hashes:         1: 1--457KV1-R-2AyDnu5gwQjLQg_o.roa (hash: 8N9wCT8kfIgyzoJcGZvHmJgv1bgcFxw3DbUmqgeqDIc=)
                          2: 4aqwAHha90l1eelclAQUVQR1I44.roa (hash: tcKMrTjhcN6vhODlC9CVcmb++R8Mkr/fDJOT6nlWeQ0=)
                          3: 9hzuEkfOLx6dbtvls8L-DK7YVvk.roa (hash: hKZSYd06joPWfMKvJuesIx8vrhQYzK0wkVb/y/gid8E=)
                          4: RBeFCjxIM7miAZu7QTFUMKs99XY.roa (hash: 632Ss4tpXpsH0DMtGlQw8IheEnppDKOHlGmiaPoTHgE=)
                          5: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: s4JIxbEM/errwSDXl2y9G81BGRqALArO3R9nPOnAR2w=)
                          6: e2mICNZ-ktWR8rRC8DNSqAlzYS0.roa (hash: Felav9tNWd/FcQPP7GRNQiXa/u4OHWKkmJPe4XvqDUM=)
                          7: eSTze8MlBFRraV4dsl31h2iw1VI.roa (hash: lDAECqzqHU746njNX6dpVZo+oFs2oTdwqB1k/OKzU9E=)
                          8: gxpF5Ywmi9CVdy65UZl-VezFpFY.roa (hash: u4fV+dkW37+bQyCJf6mzLseCn34MI5XSnX8fv1o7KNw=)
                          9: hLiW33dYFtk93njm1Q1HKa7zbas.roa (hash: tK/30Ejl4gGabl5/3tryRax+Y14BBBbKwIaeKOFx3Oo=)
                          10: l6wS_VO91DxNt91DRsp0DvYwmuo.roa (hash: 22h/qy7HYLT12nuxMyq//AhQ3qbzsI+VO3MFY5icjPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:53:2d:9f:37:2d:10:4c:c9:54:6f:ea:6b:85:12:29:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
        Validity
            Not Before: Oct 19 08:01:00 2026 GMT
            Not After : Oct 20 08:01:00 2026 GMT
        Subject: CN=1151b4998ed5aea3e6b9e0377e921c9fd94ac928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:06:34:47:90:6f:24:d4:68:f6:33:e1:15:
                    e0:21:b5:b2:28:e3:ca:36:0e:78:ea:6a:03:70:ec:
                    86:3c:e9:26:c5:89:64:16:f2:2f:24:77:82:02:d0:
                    5d:74:19:c0:a3:7c:06:42:9d:3f:70:ed:cf:ce:b3:
                    6e:83:44:a1:7d:1f:e5:1f:99:9b:4e:b9:cd:4f:48:
                    73:7a:58:6b:1d:28:bf:87:3b:23:c7:27:f6:08:53:
                    02:e2:ff:74:d5:ef:4f:95:ad:f5:55:ce:8d:26:3b:
                    07:bb:6f:0b:e4:45:20:35:a4:d2:42:d1:8f:2e:61:
                    41:e2:65:49:0d:6d:b3:78:88:f1:a2:e5:5e:48:8e:
                    bb:6a:fd:bd:a3:c0:8a:20:c5:1a:53:5a:c6:9e:c8:
                    bf:c1:f3:1f:a7:71:4d:1c:11:bd:fa:9b:52:29:4f:
                    73:4c:a6:9b:16:e4:9c:5e:19:c8:ad:4a:ca:c2:f3:
                    d0:ed:ac:ad:e7:82:8a:b5:9d:20:56:94:10:13:08:
                    ad:60:e6:b7:bc:8c:8d:d8:6c:26:ae:fd:ae:b3:cf:
                    10:a8:0e:5c:03:53:e7:3d:9a:ee:8c:d7:7f:2e:94:
                    32:b7:d9:be:61:8e:3c:75:eb:72:fd:f0:66:9c:10:
                    4e:3a:6f:92:26:ec:dd:27:27:fb:1a:30:53:30:15:
                    23:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:51:B4:99:8E:D5:AE:A3:E6:B9:E0:37:7E:92:1C:9F:D9:4A:C9:28
            X509v3 Authority Key Identifier:
                keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a4:1e:57:4d:5c:77:50:82:cd:20:ed:bc:04:9c:58:ca:a0:
         9a:ff:1c:fe:7b:7c:cb:05:d1:ae:2c:31:67:73:2b:fc:f6:b3:
         40:c5:bc:db:21:cc:a6:a6:a5:3b:eb:5b:37:78:bd:70:a5:14:
         85:06:92:d9:07:e8:08:d9:9a:3f:89:cf:83:0b:4a:73:74:2d:
         22:89:07:54:25:3b:96:a0:e1:77:4c:a8:c5:0d:a7:e9:60:b7:
         b9:76:2e:d0:74:8a:93:bd:dd:7f:42:63:be:1b:d0:43:50:c2:
         da:17:87:93:84:a5:4e:b7:75:24:39:49:3b:9b:e0:d5:27:68:
         b3:2a:be:38:1f:9c:26:4d:4a:1b:84:43:f4:82:b5:70:1c:84:
         cb:3d:10:95:b8:75:b4:b3:90:5c:45:8e:24:0d:a0:05:be:b3:
         be:03:23:25:f2:71:7a:b1:ec:ca:66:59:8e:bf:47:5c:2b:df:
         b1:b7:03:cf:b9:43:f1:bc:4e:6b:e9:4c:d4:85:71:eb:b9:d0:
         ff:c1:21:86:03:c5:fe:89:93:33:86:14:c1:8f:0c:91:3e:4c:
         6b:a3:4e:c9:9c:76:1d:69:a4:e2:84:a4:ff:d9:02:1e:dd:6f:
         10:a8:f4:7e:e6:db:f9:b3:28:4e:b6:70:45:ae:a0:1a:89:01:
         1b:0c:3f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:21:18 2026 by rpki-client