Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
File:                     phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft (raw, json)
Hash identifier:          dFqWUW9DYtEPXgGn1tp3tQmWy5p5Abs33mvxLTmG2dk=
Subject key identifier:   EC:81:C0:A8:08:D5:FB:CE:26:22:FF:6E:2F:46:14:93:CE:52:C7:52
Authority key identifier: A6:10:37:10:70:66:77:30:AA:F5:90:2E:9F:8C:63:40:80:0E:EC:88
Certificate issuer:       /CN=a610371070667730aaf5902e9f8c6340800eec88
Certificate serial:       01A17FCFA8F2AB1154EE10FA074AF8FCF92D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
Manifest number:          0140
Signing time:             Wed 28 Oct 2026 00:01:17 +0000
Manifest this update:     Wed 28 Oct 2026 00:01:17 +0000
Manifest next update:     Thu 29 Oct 2026 00:01:17 +0000
Files and hashes:         1: dZDlbqsnapFIwj1HUHLInqN8JVw.roa (hash: bs/eDOvdIuJ1snvbff8tQ4iMRziNZ2Vwxnsh8r7rh+0=)
                          2: h087lucF2ivPyD3F1D3_NLkhOb8.roa (hash: deWexSQgKEOrc0A416IV+spDrpGZpTVS9EaD2+rgd3g=)
                          3: kdSBI_9pb4sru0XZjIhpyOoJDTA.roa (hash: AahhJx6gs1/aCr1ScQXRa/wo3nSdwYac1ZF6rIEWe98=)
                          4: phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl (hash: 3Kt3PELnLro0xcXwzNTs3ZniuB2kPmy2xF0jVjKEECk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 00:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:cf:a8:f2:ab:11:54:ee:10:fa:07:4a:f8:fc:f9:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a610371070667730aaf5902e9f8c6340800eec88
        Validity
            Not Before: Oct 28 00:01:17 2026 GMT
            Not After : Oct 29 00:01:17 2026 GMT
        Subject: CN=ec81c0a808d5fbce2622ff6e2f461493ce52c752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1f:29:61:e4:07:ca:7c:18:e5:e3:c6:7f:2d:
                    23:22:05:99:c9:6f:8d:a6:32:c9:09:af:47:29:02:
                    7a:99:18:bf:56:66:2c:7b:05:62:d3:8a:e9:f6:cd:
                    72:77:0c:f7:46:6b:eb:67:5d:c9:29:bf:96:95:0e:
                    3b:29:5a:1f:6f:4c:cb:e3:18:fc:3e:77:6b:d9:0b:
                    0f:fb:40:83:8e:1e:92:6c:c7:33:db:b5:db:20:6d:
                    99:18:da:66:3e:b2:0f:b6:8b:1d:c0:0f:47:79:5a:
                    b2:6e:77:38:4c:18:bf:c9:51:52:f4:b3:8b:fb:f9:
                    cd:6f:27:30:00:bc:89:c7:21:64:de:2d:b2:2b:01:
                    3b:86:45:bc:a0:2f:49:8f:e4:9e:ae:22:59:33:b5:
                    3d:fa:74:58:43:eb:8a:8e:9e:5c:ce:82:c6:b9:62:
                    45:d8:db:11:5f:71:ba:65:a7:0e:83:62:1d:d9:58:
                    4a:26:ab:a2:56:9e:22:f3:02:62:03:0d:3e:a2:23:
                    cb:d3:81:1f:dd:62:af:94:f7:f7:9d:a8:e8:fb:bd:
                    d5:2a:9b:46:ad:71:df:91:ca:4b:2d:af:92:e7:8a:
                    61:8c:93:e5:f4:86:ba:e0:2c:b3:c4:a4:8c:b0:64:
                    74:1c:f9:92:4d:11:64:50:c3:3a:68:be:d5:69:be:
                    d0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:81:C0:A8:08:D5:FB:CE:26:22:FF:6E:2F:46:14:93:CE:52:C7:52
            X509v3 Authority Key Identifier:
                keyid:A6:10:37:10:70:66:77:30:AA:F5:90:2E:9F:8C:63:40:80:0E:EC:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6f:fb:f4:9f:22:1e:7f:4b:81:7d:31:49:35:b2:79:70:21:
         66:c8:c8:04:ba:b4:12:47:13:0e:92:a5:7f:3b:9b:75:2c:ef:
         1c:57:c1:bc:1e:75:15:b8:09:88:93:c0:97:ff:fc:50:df:97:
         c5:86:a0:6f:90:98:a4:f6:89:51:87:70:9a:be:36:ea:ba:95:
         dc:43:06:5e:11:eb:1d:e6:2d:23:bf:c9:76:91:c0:2f:a8:00:
         3a:96:1d:7d:f2:cf:a1:ff:7e:97:3f:a8:43:54:dc:a4:73:68:
         e7:0f:43:5f:34:e9:a4:cb:ad:db:13:ff:7a:ab:68:89:5c:65:
         4d:ff:14:2f:a0:b6:f8:37:f8:92:7e:2c:43:a5:31:eb:90:e0:
         e7:5e:b6:e4:d7:38:94:14:ef:9e:23:02:5c:e4:87:5d:7c:46:
         23:73:5e:d4:8c:40:42:49:08:78:a7:f4:e8:9a:53:2a:99:bf:
         08:c0:71:43:08:07:19:a1:f9:e9:2d:a7:7b:85:76:79:23:e2:
         04:ca:bc:35:b3:b1:15:1e:bb:1d:58:a1:59:38:40:c8:0b:50:
         a8:e5:fd:21:f6:63:7d:d2:ec:9b:93:2b:a1:f1:92:18:1b:5d:
         95:40:02:52:f1:47:ea:9c:da:ea:6e:89:a9:a9:2e:f2:55:c3:
         d0:d8:9c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:18:43 2026 by rpki-client