Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
File:                     cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft (raw, json)
Hash identifier:          DqM6Nh3FDeQjC0V63G6c8p3Ank8vOFRenP5V3Aa/2sM=
Subject key identifier:   EF:2F:9B:68:4B:4A:FE:23:D9:F2:EF:72:18:0C:75:4B:8B:2D:9C:A0
Authority key identifier: 70:85:77:56:AC:F3:39:FA:C2:29:A1:C9:E9:C5:7C:48:95:EF:A9:1F
Certificate issuer:       /CN=70857756acf339fac229a1c9e9c57c4895efa91f
Certificate serial:       01A1863F2D17CAD1743AA709919F4C560B81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
Manifest number:          019C
Signing time:             Thu 29 Oct 2026 06:00:49 +0000
Manifest this update:     Thu 29 Oct 2026 06:00:49 +0000
Manifest next update:     Fri 30 Oct 2026 06:00:49 +0000
Files and hashes:         1: cIV3VqzzOfrCKaHJ6cV8SJXvqR8.crl (hash: e3LIjxEZg01GGK7t9USBELGdGMrh8ZsuCF/mHA9MeFU=)
                          2: vV6KIbjbHUkMbwKENIBHTTXDdrU.roa (hash: EOt5kopYpNaYTBOsxtYCd3AAd6VIO4EI/DljsaKcEE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:86:3f:2d:17:ca:d1:74:3a:a7:09:91:9f:4c:56:0b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70857756acf339fac229a1c9e9c57c4895efa91f
        Validity
            Not Before: Oct 29 06:00:49 2026 GMT
            Not After : Oct 30 06:00:49 2026 GMT
        Subject: CN=ef2f9b684b4afe23d9f2ef72180c754b8b2d9ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a3:0d:70:70:b2:ff:cc:14:15:88:39:63:2e:
                    20:02:e1:22:ec:d9:bb:79:82:54:3f:b1:94:42:4d:
                    ab:5d:8b:5d:c4:9e:cf:78:7f:a4:a2:44:df:9a:7f:
                    ad:4b:be:ef:cd:ef:2a:25:74:0c:4e:f7:fc:e4:ed:
                    a8:36:77:cf:64:3b:ef:b9:67:f0:d9:74:9d:89:0f:
                    d0:6c:80:77:e2:66:37:b3:98:e7:7d:00:0a:04:97:
                    90:db:dc:e1:04:9d:2d:50:87:9c:68:0d:7f:a1:82:
                    8f:68:3d:bf:99:fc:d0:91:f9:b3:74:7d:87:2c:f0:
                    9b:34:9f:5a:5a:4b:84:1e:c8:04:31:e5:dd:44:8a:
                    80:d6:35:f5:c9:49:8e:c0:34:e1:72:5f:72:39:85:
                    1f:f5:d9:41:28:66:bf:e8:6a:42:a7:95:67:5e:19:
                    66:d2:2c:e1:f4:68:e1:4d:25:d0:89:ec:73:e4:88:
                    84:26:1f:85:ff:d1:88:a0:b8:72:81:86:7b:c2:36:
                    53:aa:b1:70:32:78:94:c6:46:e1:3e:dc:50:06:72:
                    80:02:82:cc:72:88:7d:86:9c:9b:35:1d:66:dd:5f:
                    6f:81:93:b7:ec:94:3a:67:20:27:04:b0:da:fe:01:
                    f4:7d:16:5a:5c:a9:3e:b7:02:a8:2a:c1:3b:a2:3d:
                    35:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2F:9B:68:4B:4A:FE:23:D9:F2:EF:72:18:0C:75:4B:8B:2D:9C:A0
            X509v3 Authority Key Identifier:
                keyid:70:85:77:56:AC:F3:39:FA:C2:29:A1:C9:E9:C5:7C:48:95:EF:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f12858-3ca1-453b-843b-adc4d5ab566c/1/cIV3VqzzOfrCKaHJ6cV8SJXvqR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:cb:50:91:eb:94:1c:ee:a3:6c:89:b8:46:31:98:fe:28:0f:
         e0:74:74:d0:dd:d8:7f:17:2f:89:9e:1e:91:58:1a:6e:01:b0:
         66:fa:f7:79:e2:8d:69:ed:39:a1:90:76:a2:e7:79:a7:15:cc:
         44:ff:47:61:e6:6f:5a:ed:ae:d6:b1:25:e2:6f:8e:77:09:b1:
         92:85:ea:fe:24:10:93:c9:51:8e:ec:f2:5b:ba:27:f4:df:95:
         55:21:31:dd:c6:bc:ea:7f:04:3f:bf:83:4d:d8:e3:fe:89:88:
         e4:92:77:d8:11:b9:54:f0:a3:e4:98:20:02:ce:6f:7c:da:51:
         6d:9c:ed:19:ac:75:f9:0f:72:20:8f:6d:fe:1d:7f:51:8d:24:
         53:c1:a3:4e:b3:a6:3b:e6:e0:35:46:97:84:39:d4:f9:a9:35:
         92:c5:8d:93:f8:44:ae:43:cc:4f:8f:06:b1:70:b8:b2:82:4b:
         c3:38:13:7c:7d:8c:07:30:11:73:95:34:12:ae:d2:ef:fe:59:
         29:91:a0:60:c7:99:80:9b:19:82:62:47:6b:71:ad:19:28:d1:
         4d:e4:2c:26:ec:b2:c8:73:ef:3e:e7:c8:d0:77:3c:08:82:ff:
         8a:dc:a8:f7:6b:ae:23:96:98:2e:59:12:e4:b8:e0:15:bb:aa:
         c3:44:ca:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:09:06 2026 by rpki-client