Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File:                     d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier:          /w00kAwjyMBFXnO8EZzwHVx2oH1/IXnGn2a8cq1DKno=
Subject key identifier:   57:BE:64:7E:7E:2A:F7:16:CF:51:E3:EC:94:10:5D:09:DF:F3:38:21
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer:       /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial:       01A18E9DBB9D0995CDA7DE3D925948FDAA25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number:          1ACF
Signing time:             Fri 30 Oct 2026 21:01:04 +0000
Manifest this update:     Fri 30 Oct 2026 21:01:04 +0000
Manifest next update:     Sat 31 Oct 2026 21:01:04 +0000
Files and hashes:         1: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: XCknXWQ2vJsPAlWyxBSHls+4f9pU38nnlNDvadKGkdU=)
                          2: r7X848yOsMLAWCps4RFGUNqeVps.roa (hash: xew4extflEyzwcFzFw7/R0LSDzXNfuSjZMgYv5CBRTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8e:9d:bb:9d:09:95:cd:a7:de:3d:92:59:48:fd:aa:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
        Validity
            Not Before: Oct 30 21:01:04 2026 GMT
            Not After : Oct 31 21:01:04 2026 GMT
        Subject: CN=57be647e7e2af716cf51e3ec94105d09dff33821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:2a:f7:67:1d:46:b3:d9:e1:fd:93:60:cb:
                    16:b8:93:06:55:2c:bd:dd:c1:0e:58:63:cc:3b:45:
                    bb:4d:f4:4f:8a:e1:97:c9:8e:0e:e2:92:2a:49:fd:
                    a1:cb:a5:53:1a:3d:58:4a:a8:eb:91:bf:dc:4c:6f:
                    31:73:0d:48:2b:0a:72:a1:01:bf:51:34:8d:84:6f:
                    75:50:f0:23:51:28:ba:75:bb:17:60:97:a9:bf:af:
                    91:0d:3d:51:a5:92:81:11:da:ad:4e:74:a7:ec:e3:
                    ea:c4:4e:01:e6:ae:cf:30:4b:fb:aa:db:55:a6:19:
                    a7:2c:51:5e:44:30:01:35:88:ed:5d:1e:2e:cc:be:
                    f8:c1:7c:7b:05:df:e0:c3:88:c2:78:02:62:98:84:
                    5c:d5:0f:4e:63:6e:66:fe:65:2f:02:35:ff:c8:35:
                    26:98:93:ac:4f:62:7e:54:02:cc:b6:72:45:d1:f1:
                    4e:65:60:e2:e5:3b:23:22:68:0e:d0:94:61:53:3f:
                    46:af:93:d8:25:7c:3a:f8:33:57:b7:bd:07:5e:57:
                    53:58:f0:0a:1d:8f:48:6e:ce:7c:36:8f:0d:72:54:
                    8a:9a:6b:03:31:ec:8d:cf:2b:a8:67:61:62:6b:49:
                    cc:c0:c1:3e:ef:50:34:67:8e:97:7d:30:12:c1:70:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BE:64:7E:7E:2A:F7:16:CF:51:E3:EC:94:10:5D:09:DF:F3:38:21
            X509v3 Authority Key Identifier:
                keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:29:2a:6b:77:d0:38:6f:1b:66:eb:01:05:e2:85:14:0b:a6:
         de:8b:91:e9:53:58:69:e7:90:d9:94:b2:8b:00:a0:9e:f0:fd:
         1c:cf:b0:86:41:12:14:a1:5e:7b:78:f4:11:dd:df:9a:1b:fd:
         25:fe:55:18:1b:8c:43:62:e2:be:03:9f:4b:f5:7f:42:db:23:
         49:4d:ac:7f:7b:de:2b:b7:1c:c7:64:54:11:b2:c3:b3:6f:15:
         27:2b:39:65:53:82:e4:a3:b0:7c:7c:17:d8:c8:70:df:0e:9c:
         63:ac:55:1a:cf:d6:a1:ec:6e:2f:df:a2:79:c8:1f:48:7b:23:
         23:42:1d:49:b7:d4:15:ae:64:bf:8d:eb:77:68:18:77:31:d8:
         c8:5c:4e:b3:d4:7b:60:f9:d7:e9:8f:d1:3e:80:a5:2d:e4:57:
         99:72:f2:00:49:83:96:dc:91:51:c2:95:2f:5a:35:fc:c4:a5:
         e3:bd:6d:cf:c0:1b:50:55:ea:4e:37:78:73:e7:1a:2d:69:3e:
         67:6d:f3:88:e5:9b:36:43:c6:1e:76:9d:09:b8:af:8e:64:20:
         be:b0:2c:ea:47:59:37:66:ed:09:7d:f9:3d:79:03:40:8a:64:
         2c:e4:f8:41:00:6c:65:44:b5:20:35:cb:ae:2e:ed:a0:28:14:
         ea:e9:fa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:45:26 2026 by rpki-client