Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
File:                     AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft (raw, json)
Hash identifier:          edeKqxIuKV70Z7DT1JhYWaeXl/MFDzpYYQ3gBPVfceM=
Subject key identifier:   14:6F:FE:20:1C:41:63:CE:EC:CF:42:1C:D2:1F:FE:7B:39:AE:8E:5B
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Certificate issuer:       /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial:       01A187F6516D42377E2D1C2CF8139EB775FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
Manifest number:          0E2F
Signing time:             Thu 29 Oct 2026 14:00:29 +0000
Manifest this update:     Thu 29 Oct 2026 14:00:29 +0000
Manifest next update:     Fri 30 Oct 2026 14:00:29 +0000
Files and hashes:         1: 1vE6-KH4MdU7N2hv_um52mZD9OU.roa (hash: F9xU+2/qqKu1d965ooJJSZMmafwKTsHI7SAoZJI74E8=)
                          2: APfc6JNEU6PdULzFR5BxZMOlk6o.roa (hash: Hd78Iessw8olpkO1cT25elJbp1Ay+8DdMA34bYWrxMs=)
                          3: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl (hash: E/w6IVtvbWC8lAnd6LS2+VIRfx4sQG8AeiTT2Sw1zEs=)
                          4: DELZK5MwczuVxzj3X4of5HLO9Vw.roa (hash: GLmFQqmMgF4LsrUkccEanCYe2QvwLzSjgMEN7Qp7IPs=)
                          5: L9GldWcZhP-VtwQ-IrVBJjRxbvQ.roa (hash: i/vLhAVFm6Bpc/WiiZN81LZdAjQFDptqMqTGBS6saY4=)
                          6: MO2X-hKSVMmkU2wdt5M6rkMSJsQ.roa (hash: qgMxb6qJVo4sk1tLNRwm1PF/2ClIOldHiE0/SLkAAbQ=)
                          7: frbnQVPA6AMYX2oD_gTcyZulwfY.roa (hash: N+i+LJivHuJoPXNh9pH2cdBw0saTiGMUT1bVhtTAkgs=)
                          8: pttNsriY8yChB9BrtVjJhNIJyPY.roa (hash: tXY2XaK++NV5rGr1J0Fs5zNa7PQ/vWbv79WLgy93nbY=)
                          9: z_HTT3a31vAkFtPvUQtcTev0iQU.roa (hash: +OTmOuEmOD6LWIpLkfhzeYNBT0QjMtJvvZDBWFxGkTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:87:f6:51:6d:42:37:7e:2d:1c:2c:f8:13:9e:b7:75:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
        Validity
            Not Before: Oct 29 14:00:29 2026 GMT
            Not After : Oct 30 14:00:29 2026 GMT
        Subject: CN=146ffe201c4163ceeccf421cd21ffe7b39ae8e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:01:c4:c6:45:d7:52:d5:e3:5c:a6:48:a6:61:
                    58:e6:d1:83:80:c7:ad:4e:d8:8b:57:6b:3d:39:5e:
                    2f:6b:eb:82:b3:29:5b:91:9c:f7:86:13:a4:7f:a8:
                    71:36:14:de:03:96:0d:7b:13:dd:ab:d3:9a:29:34:
                    e8:36:8e:5f:6a:2d:85:59:82:55:b7:59:47:e7:99:
                    1a:b9:25:a2:9b:3b:41:1b:d4:d4:0f:e3:39:ff:e1:
                    ac:93:99:79:14:a5:de:22:6b:e8:d9:2f:e1:e6:77:
                    c0:a9:95:00:53:25:ec:53:3b:48:58:13:05:1b:c2:
                    2a:34:94:8a:d1:0c:62:39:eb:3b:f8:51:89:d5:aa:
                    51:25:e5:4a:70:79:bb:48:7e:69:6d:47:0b:9c:7f:
                    c7:7e:73:ea:8b:6f:ff:02:78:80:52:32:9e:83:8b:
                    f4:e1:45:8d:75:33:0c:22:00:11:f5:28:a9:40:1f:
                    e1:d6:71:8d:31:68:d9:12:b0:48:60:46:5f:6b:70:
                    e9:90:0d:eb:13:10:da:a8:7d:5a:e1:3a:d7:e1:20:
                    ad:d2:34:a6:e2:ba:32:fa:c4:8c:f5:d0:e7:a5:c3:
                    72:1d:cb:37:22:d9:f6:20:39:cc:8c:74:e7:23:3e:
                    59:e0:05:1e:ad:88:f3:5a:e6:a8:10:9b:79:8e:e0:
                    fc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6F:FE:20:1C:41:63:CE:EC:CF:42:1C:D2:1F:FE:7B:39:AE:8E:5B
            X509v3 Authority Key Identifier:
                keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7d:47:6c:7c:02:de:0a:34:b9:10:bc:89:ac:0b:ae:0d:e1:
         3a:a6:f1:96:fd:e1:60:c9:29:21:c4:49:63:65:76:45:b1:49:
         eb:08:d9:a6:f3:e4:37:45:5f:a2:42:00:3c:a4:3a:6b:4b:3e:
         b5:88:a7:f3:9c:77:d7:f5:ab:4d:06:75:2c:81:98:f3:8f:aa:
         62:57:ea:10:18:bb:c7:c2:d5:14:76:a2:d0:46:a9:9e:08:2b:
         41:59:be:11:19:c1:04:95:8c:eb:37:57:9f:a0:11:db:db:8d:
         fa:37:36:8f:a8:4f:2c:c7:93:34:11:20:2f:23:24:f4:ea:c1:
         e6:cf:f7:f3:fe:01:06:00:27:d2:b9:de:57:52:86:19:e1:3f:
         23:49:d7:d5:85:36:2f:bb:79:a6:0e:9d:ad:ef:bb:49:61:7c:
         35:e3:af:2c:49:72:d4:1a:53:27:58:c4:ee:bd:15:d6:bd:5e:
         7b:58:f5:42:bf:d8:70:9e:ed:fe:51:1b:8c:19:4d:d5:6f:a2:
         d5:7a:3d:ff:23:5c:0f:fc:5a:c3:c2:5d:56:7a:35:f4:c6:86:
         a0:7d:c5:56:a8:ca:6b:3f:85:4e:09:8e:2d:98:39:18:fa:54:
         84:b8:a1:42:78:a3:5c:59:91:23:c6:0c:9c:0a:6c:d2:55:4a:
         75:a8:eb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:58:34 2026 by rpki-client