Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
File:                     1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json)
Hash identifier:          Pze1yLJuN+fdsJ6WAxMHyOcirUWmHZcYUUOKQpOh/No=
Subject key identifier:   D3:A3:3A:EE:38:9D:81:ED:5D:72:7B:3F:D9:08:1B:4C:47:28:EA:0C
Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Certificate issuer:       /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Certificate serial:       01A17BF269A642ACD1CFBCBB21EF2B3DDC98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
Manifest number:          0A58
Signing time:             Tue 27 Oct 2026 06:00:46 +0000
Manifest this update:     Tue 27 Oct 2026 06:00:46 +0000
Manifest next update:     Wed 28 Oct 2026 06:00:46 +0000
Files and hashes:         1: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: BJA6cC+8WLGZWNU0D+/GxzHpNHtgTV4Gx9YEu1NcKQM=)
                          2: HvbqYPMAVepvi6ZtkrW2fUxUxMM.roa (hash: kj2P3vyd4ShtsXAZbQsRTziSHIgT6QC6RQY8zqv9EFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:f2:69:a6:42:ac:d1:cf:bc:bb:21:ef:2b:3d:dc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
        Validity
            Not Before: Oct 27 06:00:46 2026 GMT
            Not After : Oct 28 06:00:46 2026 GMT
        Subject: CN=d3a33aee389d81ed5d727b3fd9081b4c4728ea0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:51:34:35:99:30:67:81:c1:08:46:1f:ef:7d:
                    10:94:d8:ac:b5:f9:65:d6:d7:93:46:8b:32:04:e9:
                    3a:e0:a8:d8:a6:60:cc:5f:84:5d:41:8f:6d:8c:1c:
                    15:b3:13:33:ec:55:67:8d:f6:0d:1a:1f:97:8e:1d:
                    da:27:2d:7d:d1:f0:66:33:8e:de:e3:01:cf:0a:f3:
                    0e:c1:68:ac:1d:d1:54:ca:7b:b1:ce:de:9b:5c:1f:
                    e5:50:99:56:00:30:23:38:d7:e0:56:e0:b2:d1:cd:
                    65:3e:29:20:3b:49:b4:66:5e:38:a0:99:30:0b:a1:
                    76:36:2f:94:c5:e5:05:c0:9b:44:40:14:df:a3:25:
                    38:30:e0:e3:fa:6e:3b:7b:28:e1:30:b5:f0:de:f9:
                    42:7d:d6:58:21:c5:eb:9a:d0:8f:6d:41:fb:ed:5a:
                    cf:54:d7:b1:13:a0:3a:05:9f:2b:a4:79:c1:8c:5a:
                    30:ec:b4:0e:e3:38:1b:18:98:90:2a:4f:0c:bb:2f:
                    30:be:aa:a5:16:ce:a4:47:d5:ab:7a:fe:41:79:09:
                    19:88:71:ae:a5:ed:a8:b2:c9:8c:48:94:20:55:e3:
                    a6:ee:87:78:27:79:a6:ae:97:e3:7c:a6:e4:1b:2f:
                    f0:cb:74:f6:92:7d:50:9f:31:ca:b1:ee:45:93:47:
                    9a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A3:3A:EE:38:9D:81:ED:5D:72:7B:3F:D9:08:1B:4C:47:28:EA:0C
            X509v3 Authority Key Identifier:
                keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:07:76:ae:98:64:cc:de:15:c7:9e:2e:17:e0:8c:61:83:ec:
         24:5f:97:28:e0:2f:6a:15:16:fc:9b:0c:a7:fc:88:86:6c:a8:
         ad:30:85:53:fa:52:c1:ce:82:69:1a:73:f1:58:7f:b2:ed:bc:
         8a:f3:a8:93:87:b5:b6:57:6a:a5:50:ea:06:04:50:32:f5:7a:
         9d:b1:2e:f3:d8:1c:d2:2d:fc:8d:bb:05:99:71:b7:d7:41:54:
         bf:3f:28:24:5e:af:26:85:9b:6c:5c:c6:19:58:b4:8f:58:ca:
         77:0e:e0:ec:f2:65:d5:aa:96:c5:27:12:37:c8:c5:bf:c1:7b:
         22:13:a8:2b:c7:f0:11:b3:d7:5e:f4:91:bd:0d:9f:69:45:bc:
         18:9e:f7:7c:d5:4e:6e:28:5d:fa:b6:ac:52:24:bf:3f:0a:26:
         aa:d2:31:74:6a:dd:83:4d:85:1b:0b:43:42:11:4b:99:97:a5:
         1b:62:e8:1b:3d:7b:a2:cf:89:b9:fa:50:51:1c:7e:f5:27:16:
         6b:71:80:e0:d4:0a:b2:6d:78:f0:cb:58:10:42:33:4c:17:d8:
         d6:87:86:4b:b3:50:e6:90:0f:88:3f:13:ec:38:a0:c4:f8:e0:
         33:54:a1:1d:19:7c:fc:bb:17:80:e1:bd:6a:06:ca:78:e5:a8:
         5d:3e:5d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:50:56 2026 by rpki-client