Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
File:                     Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft (raw, json)
Hash identifier:          O/EEBuhmalCe5q0pkSDoWkCLgOqn6eMdro8roKsT3tg=
Subject key identifier:   F8:3E:C0:82:00:82:9A:56:77:BD:0F:C0:0F:37:42:4A:87:FB:46:A0
Authority key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
Certificate issuer:       /CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
Certificate serial:       01A179CCB14D54F0ACEE3FC6350BA3DF750C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
Manifest number:          09C2
Signing time:             Mon 26 Oct 2026 20:00:20 +0000
Manifest this update:     Mon 26 Oct 2026 20:00:20 +0000
Manifest next update:     Tue 27 Oct 2026 20:00:20 +0000
Files and hashes:         1: 9MMTJC9bSYJjm0yH2SR40mWxLt4.roa (hash: 911epWb1C+HTij7xHBBtK6BFbTtOQmcCGUfZtk4CgN0=)
                          2: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl (hash: 31jFA58JwImZ8VIHeRKkHDvCvpmF2O1E4XDJ+z4nGVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:cc:b1:4d:54:f0:ac:ee:3f:c6:35:0b:a3:df:75:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
        Validity
            Not Before: Oct 26 20:00:20 2026 GMT
            Not After : Oct 27 20:00:20 2026 GMT
        Subject: CN=f83ec08200829a5677bd0fc00f37424a87fb46a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:11:67:46:a3:91:97:ee:de:db:5e:a4:45:d2:
                    1d:02:a9:3c:c9:f9:4e:43:59:ed:93:54:c3:bd:6c:
                    6a:a7:35:a8:2c:a1:fb:b8:5a:d6:6a:4c:8f:f0:14:
                    0b:6f:70:4c:37:c0:d4:98:f0:b1:dc:8c:28:42:d7:
                    5c:a7:5f:ed:c5:8e:09:21:5d:78:91:a1:34:66:ae:
                    bb:89:37:19:0c:f1:96:48:ed:f1:9d:46:87:4b:ca:
                    ff:6b:e0:3a:a1:3f:aa:02:31:ea:0a:fd:98:bf:25:
                    d4:b1:77:36:40:38:fe:78:cd:10:ad:c2:11:e3:5b:
                    85:84:37:34:af:50:93:d3:49:f4:6d:23:21:b4:cb:
                    2a:d4:74:be:79:87:db:29:f4:64:ef:a9:fd:52:4d:
                    fa:7e:e1:9a:3c:f7:77:b3:4b:7e:e6:dd:b4:01:46:
                    1c:f4:d2:12:bf:1c:b9:16:51:99:87:79:3c:21:06:
                    91:6a:3a:67:04:5a:91:e1:c4:a5:fd:8a:c5:52:82:
                    c3:e2:23:f1:dc:89:3e:dc:f3:89:2b:6a:d9:8b:7a:
                    73:6a:c3:5c:40:83:55:52:5e:a5:b2:3a:a1:ca:6c:
                    64:2f:44:28:79:a7:f9:af:77:45:10:b4:7e:5a:09:
                    28:4e:1a:2c:cb:e5:92:b2:c4:2b:b3:53:7f:38:82:
                    19:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3E:C0:82:00:82:9A:56:77:BD:0F:C0:0F:37:42:4A:87:FB:46:A0
            X509v3 Authority Key Identifier:
                keyid:3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:bd:8d:a7:f5:b9:e8:9d:c4:0a:53:97:f2:9f:d1:ba:4f:ad:
         5c:33:36:70:b5:c3:ea:97:5f:d7:58:c8:a4:fc:71:4c:1a:8d:
         a2:2a:14:56:cb:6f:da:0a:4c:ae:fe:87:bf:03:99:4b:34:21:
         aa:dc:fd:74:c1:86:8d:30:df:6f:e3:b5:60:52:c2:dd:29:7d:
         48:ef:23:99:48:97:0d:47:0c:c9:1a:0f:b5:ac:a4:19:38:c8:
         26:90:9d:9c:35:3c:9e:7e:64:5f:c5:2f:4c:0d:db:10:e6:5a:
         5a:2a:cb:67:ee:f2:b8:cd:8b:98:18:a3:77:30:c9:fa:37:02:
         3d:0e:03:64:df:0d:b6:2f:a8:13:7c:fa:9a:f4:0b:a3:e2:fd:
         83:78:db:2f:1f:7b:d6:75:4c:81:6a:56:8b:6e:61:fe:71:fc:
         9d:2c:80:11:e0:bf:2a:e2:7d:28:56:58:a0:6e:ef:21:1d:23:
         c7:05:b2:af:df:89:17:67:e7:38:18:00:3f:c6:dc:c0:70:df:
         17:1e:c4:ae:7d:c7:af:ee:ab:d0:08:da:aa:44:a5:1a:87:0d:
         0d:b0:b7:df:8e:6e:89:6b:23:c6:6a:90:cd:4c:41:97:20:5b:
         29:22:a7:0b:82:7b:6c:ab:aa:85:b2:be:c4:28:8f:42:41:48:
         6b:d0:f2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:50:34 2026 by rpki-client