Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
File:                     m_8VJ49T93YcLz0z3ZvneopPvZQ.mft (raw, json)
Hash identifier:          WCyAJXzP7b8pRLfVFcGsn3wMlxzYBfoNl2cFAvg1kL0=
Subject key identifier:   65:95:0B:23:C5:C3:53:C6:3B:57:D9:4A:BC:32:12:BE:68:C8:12:E1
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Certificate issuer:       /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial:       01A155531F2B3FAA6A0BB2100B446D4079FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
Manifest number:          13F9
Signing time:             Mon 19 Oct 2026 18:01:13 +0000
Manifest this update:     Mon 19 Oct 2026 18:01:13 +0000
Manifest next update:     Tue 20 Oct 2026 18:01:13 +0000
Files and hashes:         1: 1-g6OpGedOnxN63cJ1EmDTL-4hvw.roa (hash: JM6W0dxskOtwH/4wZYEeDey8i9ac93ewUEb24GlUyks=)
                          2: Aa1Io9t3sIo-WtxsEohOkeWJdAM.roa (hash: S+aGx+n6ISxqCC55cjAbl1MbyTBL4Nwo2Wu4VXGYGf0=)
                          3: IhZOkFGwlkPZaXkWZYfG9spp4fc.roa (hash: qCEy/Um8M7C4bgM3+k6M7uqAWAjO5DdffVhom4uQ+CM=)
                          4: TRB5S_43lNyOLKzxAGsR3jba-nU.roa (hash: K/IXnKVsdiRn2o1kH+FaE/QlEeszfs0vxtMbvnwDCbQ=)
                          5: fpA7fjE2S81kljXDif1BnIMzJ3U.roa (hash: +GtpLCAQlWQy/V/aDzm5C8pdpBx5/g/MzObmpvStFfg=)
                          6: m4hSv_mEGl1O7CcJ0lhgjYNl4mM.roa (hash: uKi5CjgcDmOAt0F3mDiM2fjwRKRtze0jB8esHr2tRSk=)
                          7: m_8VJ49T93YcLz0z3ZvneopPvZQ.crl (hash: mxSLkkLVwpDOvKSxkeXnLL+ostC1OgQwfYxZzaol8gE=)
                          8: vYpajsmf80MiyIj2QQ8skH6FUNs.roa (hash: pxdMLgEV+GE8y/CZ5aq08lqIZDvAwUSQwzOUir0h/FI=)
                          9: wTjmQameKdcpA0z8PRkcVGZwuuc.roa (hash: k2WV/2PH4Kau8EV05RXYKBWzXM8y2f7UYSrD2p5Z2q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 18:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:55:53:1f:2b:3f:aa:6a:0b:b2:10:0b:44:6d:40:79:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
        Validity
            Not Before: Oct 19 18:01:13 2026 GMT
            Not After : Oct 20 18:01:13 2026 GMT
        Subject: CN=65950b23c5c353c63b57d94abc3212be68c812e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:79:12:e1:e6:0a:f2:66:fb:a6:89:c7:e5:
                    72:38:f1:17:6f:76:f9:6e:69:81:87:ad:41:77:35:
                    c3:73:b1:5b:5d:0c:88:d1:6d:19:84:52:d0:d6:f5:
                    7c:da:be:d8:9b:ef:93:54:39:52:9f:2c:67:0f:42:
                    93:d7:2e:dc:58:e8:08:ab:77:a6:c0:82:61:77:8d:
                    9e:b1:78:ed:cf:18:ae:1e:ba:1a:05:f8:e2:47:cc:
                    de:d8:21:7f:b3:48:90:ae:fa:71:d5:4d:49:f1:c7:
                    38:68:bc:b6:96:3a:cf:a5:73:8c:3c:8c:fe:82:3c:
                    00:06:bf:c7:ed:02:25:1b:d2:f4:79:16:59:c9:be:
                    60:79:5c:8b:3c:24:37:5d:12:96:46:12:cc:b1:02:
                    53:77:fe:2a:fc:37:40:f5:75:f2:26:2d:d0:f5:1b:
                    71:72:dd:0f:a1:8d:89:fe:08:d5:36:16:3d:55:f6:
                    4d:9d:ac:32:9e:2d:7f:10:42:84:95:22:f1:4e:fe:
                    ca:d1:74:e1:ea:b5:55:b0:29:54:02:f8:b9:3f:b0:
                    18:0f:cb:75:a6:1b:6e:0e:17:d6:fe:e8:0a:80:1a:
                    dc:eb:8e:3f:49:e6:b9:32:f6:8e:ae:21:d9:86:ec:
                    c3:21:aa:38:b9:a8:ad:7f:7f:41:e4:0d:1f:da:b9:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:95:0B:23:C5:C3:53:C6:3B:57:D9:4A:BC:32:12:BE:68:C8:12:E1
            X509v3 Authority Key Identifier:
                keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:4c:10:53:75:45:bd:db:ad:68:2a:67:c5:d0:9f:24:fe:33:
         18:7e:36:eb:18:e6:d8:dc:e8:cf:4b:10:8e:e5:0b:50:5d:33:
         86:cd:9a:53:7b:c4:3b:84:88:52:f6:2e:fe:47:8f:fa:d1:f1:
         a9:64:75:e6:8d:83:0b:75:f5:6e:7d:3f:c4:78:80:2f:34:81:
         38:72:37:ee:86:5f:5a:73:f6:7b:70:5f:f7:3a:69:a8:a4:22:
         5f:1e:53:7b:09:5a:ba:7c:51:f4:85:36:bf:6c:82:9e:4f:42:
         c8:94:97:93:d4:de:9a:54:99:63:44:06:a0:38:7c:45:78:98:
         60:0f:99:30:5d:27:07:5f:18:65:29:2e:6d:f1:f8:64:31:66:
         4a:f5:12:7c:1c:af:3c:af:e4:37:9d:9a:35:ab:24:70:c0:37:
         e2:c5:b7:69:4f:78:a0:06:28:ee:1a:09:e1:d1:2a:60:fd:01:
         b8:f9:8e:80:54:43:02:39:0c:96:18:ae:05:96:17:63:85:33:
         d3:a7:9c:78:bc:25:9e:97:1e:9a:ed:8a:56:0d:85:bf:99:97:
         15:69:76:01:28:1d:54:29:41:9a:24:f7:0f:90:ba:ae:9a:c0:
         f1:f9:d6:04:5a:ce:8e:d4:c7:b7:24:3a:7e:26:82:ba:07:52:
         dc:a8:f4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:03:12 2026 by rpki-client