Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
File:                     gU7b0ZY0y7kaDS2v11nUyafne3o.mft (raw, json)
Hash identifier:          +WM7+cfC8QWxT4ZitUciiBXJGg7M9z517CKk/+h39A0=
Subject key identifier:   CA:DE:30:D1:27:99:0A:30:5D:83:2A:81:65:D9:A1:13:7B:91:FE:3F
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Certificate issuer:       /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial:       01A178153F2CD64DC2DA88E40CF910D133F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
Manifest number:          1AC5
Signing time:             Mon 26 Oct 2026 12:00:20 +0000
Manifest this update:     Mon 26 Oct 2026 12:00:20 +0000
Manifest next update:     Tue 27 Oct 2026 12:00:20 +0000
Files and hashes:         1: 2mdLM4QMSFolc5LIsVCE-5xpuxw.roa (hash: Pb6j/jV8p9sMo1nrwtTOTYAV2/aTJmLOHn6ZswOsyqw=)
                          2: dTiJsEq_JJ5524hOgqQnN8Ddhhg.roa (hash: C8qRzW17uM9hsxbqGg5gMXnbyDi7MEbAVWHt31dT0Ag=)
                          3: gU7b0ZY0y7kaDS2v11nUyafne3o.crl (hash: 8xcyV8ZwENNJwwOtLFSPpnc1D9MH+KVp00QHU38VTpc=)
                          4: kPXbHwmFeaUgl0gADFGcVtXfM54.roa (hash: PFLTi3V9mE8UoiZOrhozT0x6k7lKbzmX0yMq70JlctI=)
                          5: zJqeRCb5j4Dd57Zj7b1drSwEVOY.roa (hash: kMSmGuO+kRwRxKV3HZvVShc5KQnbIWPqxWeSNvdxgoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:15:3f:2c:d6:4d:c2:da:88:e4:0c:f9:10:d1:33:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
        Validity
            Not Before: Oct 26 12:00:20 2026 GMT
            Not After : Oct 27 12:00:20 2026 GMT
        Subject: CN=cade30d127990a305d832a8165d9a1137b91fe3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:3e:6b:bd:af:c7:d4:c3:1d:ec:e5:dc:a5:
                    db:88:c4:42:f3:b3:6e:ce:18:ce:86:b3:75:96:19:
                    c7:e7:f2:ea:34:5f:55:3d:17:76:ee:31:af:31:46:
                    c5:d8:df:2e:d2:3f:67:52:54:e4:9d:e7:9a:71:9e:
                    ab:cb:2a:b0:77:e1:18:2c:ae:5b:6f:1a:cb:51:df:
                    53:38:65:04:97:e8:63:f2:f4:70:6d:79:cc:ce:3d:
                    e5:df:b5:a7:b8:90:6a:2c:ee:32:92:e2:d1:dc:4b:
                    4e:c7:54:61:27:5b:af:e1:ea:4a:74:2b:b0:87:aa:
                    a0:a2:6e:47:fd:ec:50:72:87:31:00:68:1c:a2:e2:
                    c4:c2:a3:3c:7c:76:e0:df:8e:c7:85:9f:ba:29:dd:
                    e2:6e:52:28:c1:64:f7:eb:3c:17:a4:56:f6:2a:fe:
                    e4:fd:8c:e2:b0:94:dd:45:9e:90:75:0d:fc:e3:cb:
                    9e:6f:fc:cd:84:72:39:ef:3b:50:b3:a7:ab:c6:3c:
                    f2:7b:05:59:dc:0b:93:01:61:30:ab:90:d0:f2:9f:
                    bb:ac:4f:09:29:a3:49:c8:cd:b9:7b:5a:85:ca:8c:
                    97:e5:bd:3b:d9:59:85:72:e0:77:84:88:21:2e:01:
                    04:de:43:de:25:8f:f2:d9:0a:62:34:a5:11:af:1d:
                    93:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DE:30:D1:27:99:0A:30:5D:83:2A:81:65:D9:A1:13:7B:91:FE:3F
            X509v3 Authority Key Identifier:
                keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c5:2e:90:9c:95:53:bf:b2:34:70:1a:e2:7e:df:a3:e6:0b:
         28:33:58:4c:dc:21:8c:22:70:1e:a5:f8:7e:e5:1c:44:c1:ab:
         6e:95:7d:43:0f:a1:58:c0:17:9a:95:91:d3:07:b9:ec:23:33:
         fb:aa:55:45:6f:e4:ae:0c:fa:05:5d:a6:e4:c8:c4:ce:60:bc:
         d5:80:50:27:9e:70:e3:89:e7:4b:b9:e4:f3:38:78:6b:6d:ae:
         f0:67:d9:45:a2:7c:a1:e2:8c:03:88:4c:16:54:94:8c:fc:7f:
         6a:92:0e:84:ec:9e:e1:e9:33:43:e9:3b:da:d9:cd:31:e8:f8:
         8e:32:c7:c2:de:c1:ee:a6:be:6c:45:1b:ae:1b:37:03:80:e4:
         5b:0a:dc:d8:e7:98:58:1b:5b:88:7a:70:1c:a3:13:34:06:f9:
         67:f4:0a:6b:01:2a:0a:38:a1:ca:4d:b8:e0:48:51:64:38:d7:
         7d:3d:c8:22:0e:9a:ec:09:d0:34:20:30:3e:bf:2a:4d:b9:55:
         92:6c:d2:3a:36:4f:e5:2c:fa:e5:77:71:16:97:61:d2:77:32:
         03:66:78:03:55:12:ae:f5:1d:a3:07:78:f9:99:e8:ad:21:9a:
         52:18:ed:98:74:5e:2a:d8:cf:26:a6:e6:a5:fd:f0:41:51:7c:
         f8:bb:41:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:51:47 2026 by rpki-client