Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File:                     336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier:          C6wGbCUbLjHDzTOOhDtT06F0IlDXd5JY5zVSXPPLYjk=
Subject key identifier:   E7:A5:10:41:DD:AD:95:1E:E9:C8:01:C3:13:A5:F1:BC:B4:90:29:A2
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer:       /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial:       01A13D81229C7216542BCD9B07B130DFB2BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number:          1766
Signing time:             Thu 15 Oct 2026 03:00:35 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:35 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:35 +0000
Files and hashes:         1: 2hPXOHV1ep_bItNryXyJ204trKY.roa (hash: InaQZQvl49hVhhc59GUlXsSa2F8CdPOC6OK58+ZvGxc=)
                          2: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: pLBbNZyp+uBe0ymCzeHnP91R08UzY+2DGB9vZf7kGD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 03:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:22:9c:72:16:54:2b:cd:9b:07:b1:30:df:b2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
        Validity
            Not Before: Oct 15 03:00:35 2026 GMT
            Not After : Oct 16 03:00:35 2026 GMT
        Subject: CN=e7a51041ddad951ee9c801c313a5f1bcb49029a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:20:a0:b4:6a:32:9d:2d:6c:f3:59:6c:c9:
                    d3:9b:64:f1:55:47:1c:28:ec:d7:a8:a6:1b:e3:78:
                    0b:a0:95:ff:d9:61:01:1d:d3:c9:0f:4c:72:91:ce:
                    84:e5:1a:19:da:4d:e3:21:ef:ca:c8:05:8d:36:1f:
                    33:c7:17:fa:d9:b0:e4:0a:19:e9:34:3b:04:47:02:
                    f7:8d:72:a4:18:2d:f3:9a:a5:19:12:37:6e:83:cc:
                    97:bf:48:a5:27:ed:06:8e:a6:75:d4:0e:15:ad:cd:
                    7d:ec:76:d8:4b:3f:72:14:97:ab:d8:16:6e:a0:71:
                    6e:9e:72:fb:d3:6d:da:cc:2e:ad:55:65:70:4b:8b:
                    6e:aa:69:3d:8f:90:e8:a2:b3:d0:93:a7:03:71:10:
                    94:0d:ac:90:1a:37:cd:56:cc:a2:33:49:ce:c5:59:
                    34:e9:b2:03:3f:d3:08:0f:ac:9d:e0:a3:66:c1:8c:
                    74:57:45:4c:a8:6f:6e:76:8b:e4:c8:bd:c7:2a:75:
                    7e:7d:35:df:08:20:83:03:33:03:37:59:84:72:9a:
                    3e:e3:f8:b1:cf:24:bc:d8:50:65:72:17:a2:56:76:
                    d9:f0:05:1b:c4:2b:37:00:ae:ab:04:9a:5e:62:97:
                    4d:b0:bd:3e:eb:17:84:17:7d:22:07:c6:67:9d:ae:
                    e1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A5:10:41:DD:AD:95:1E:E9:C8:01:C3:13:A5:F1:BC:B4:90:29:A2
            X509v3 Authority Key Identifier:
                keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:21:67:af:f4:8d:ad:48:7c:6d:07:b3:0e:d6:92:e8:dd:72:
         5f:b7:75:b4:6a:49:9e:39:19:b7:be:32:95:1b:d5:25:3f:8c:
         1d:5a:6b:36:d3:a7:ef:eb:1e:b3:c4:6a:91:43:cb:0c:79:77:
         1d:a3:6b:43:03:29:e7:8f:73:3a:d3:73:2d:55:0e:0f:ca:32:
         07:f7:7e:8f:16:cd:39:ed:07:c5:ee:22:0f:4e:0a:b7:05:34:
         46:c2:25:ec:cb:cb:90:ac:10:55:b6:d2:63:5e:bf:ff:1f:1e:
         9a:b9:2f:93:e9:9f:82:ea:fc:59:52:ee:00:73:2a:e0:7f:45:
         2d:04:61:1e:3d:42:72:45:57:d1:a7:2c:8a:40:bf:6b:cf:d0:
         d1:0c:5b:eb:a4:e3:ff:a2:3b:e9:25:84:47:2f:e6:21:c8:5e:
         65:9d:ce:9f:7f:74:c2:46:b9:3a:5e:b4:87:ff:00:bd:9b:97:
         04:d7:52:9b:d0:79:95:a6:f7:32:ae:84:eb:19:27:75:5c:07:
         98:06:6c:c8:e7:60:32:a8:bc:e5:90:b4:f6:b0:c4:1a:5d:85:
         0f:81:12:ed:f5:4c:ca:77:57:b5:ad:0d:22:1c:38:21:63:21:
         47:77:06:6b:d2:94:d2:3b:35:f8:d2:61:46:72:fc:17:3d:e0:
         e2:b1:64:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:19:54 2026 by rpki-client