Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.mft
File:                     rgLNgCbGDDyINkigv_cRbPJnB9Y.mft (raw, json)
Hash identifier:          39gyg8zjBJpOAlv7zlAem1Bxma6d7cZRDrd5RKoQ1K4=
Subject key identifier:   07:E6:3D:FF:E1:ED:0E:B1:BF:65:E2:54:4F:BD:04:99:AA:49:A2:9E
Authority key identifier: AE:02:CD:80:26:C6:0C:3C:88:36:48:A0:BF:F7:11:6C:F2:67:07:D6
Certificate issuer:       /CN=ae02cd8026c60c3c883648a0bff7116cf26707d6
Certificate serial:       01A15EFB1F32FED5F42B92127F6A0F118094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.mft
Manifest number:          012F
Signing time:             Wed 21 Oct 2026 15:01:18 +0000
Manifest this update:     Wed 21 Oct 2026 15:01:18 +0000
Manifest next update:     Thu 22 Oct 2026 15:01:18 +0000
Files and hashes:         1: JFKsJ81EE5IntvacpLswwWGFsTM.roa (hash: LHjq7NdJ7WIHgdVnj15fjVJfqra4lVivu4YVbUPdLsQ=)
                          2: MYiR6d13wnOJyMgIVOtD39N0N2Y.roa (hash: 1MsnnpZMhXZvlE3ZAn7W0Wa3woN4DjCUknVa97haYzc=)
                          3: qZg3vuSLjrxt2okeYN8jOZEzgyM.roa (hash: 5PbHk2X8krzBF8kEH0yjcg64xwxwW6OFin9CiO9Dif4=)
                          4: rgLNgCbGDDyINkigv_cRbPJnB9Y.crl (hash: Qxumq5sj+RqET5gcwFeAUiSs8lmJ9LEo8Np0f+LRwGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5e:fb:1f:32:fe:d5:f4:2b:92:12:7f:6a:0f:11:80:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae02cd8026c60c3c883648a0bff7116cf26707d6
        Validity
            Not Before: Oct 21 15:01:18 2026 GMT
            Not After : Oct 22 15:01:18 2026 GMT
        Subject: CN=07e63dffe1ed0eb1bf65e2544fbd0499aa49a29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:1c:f9:e0:63:7a:20:3b:e2:68:69:01:87:
                    ec:f2:82:3d:07:57:e6:84:15:4e:d4:5e:15:57:71:
                    a6:58:fc:ec:5b:40:39:3f:29:54:fa:e9:f4:31:7e:
                    88:82:48:6f:f2:32:80:29:20:36:42:11:43:e6:88:
                    5f:fa:5b:62:b0:44:e5:f5:35:52:b5:6c:af:97:58:
                    59:92:d2:6c:e2:2a:5a:b5:33:0f:03:7c:da:31:d6:
                    70:c0:ff:6a:7a:ba:f5:dd:48:1f:2c:9d:7e:37:71:
                    eb:b2:96:13:91:eb:bf:87:3b:19:f8:f7:8f:f9:ed:
                    88:2a:36:90:52:e8:23:4b:66:63:ac:29:89:b2:53:
                    d4:f0:fe:69:82:ec:01:c9:17:4b:b5:ad:f1:9b:93:
                    d3:2c:10:4a:cf:0a:2d:ee:3c:8e:0f:ba:b2:9a:4c:
                    8b:60:f2:b7:c5:29:de:45:a0:b0:e4:f1:e6:17:12:
                    8c:d0:ba:ef:26:f8:44:1c:fe:f5:10:63:80:ee:1f:
                    e8:7e:96:61:96:38:d1:a0:fd:ae:8b:49:a8:47:84:
                    24:f8:e4:d3:00:ce:62:1d:0e:11:2d:d2:52:42:45:
                    a1:4f:aa:49:6a:d9:40:8a:b0:2d:23:c1:37:df:2a:
                    d1:f1:b6:1f:9d:5a:16:47:ff:c0:8f:a5:16:27:54:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E6:3D:FF:E1:ED:0E:B1:BF:65:E2:54:4F:BD:04:99:AA:49:A2:9E
            X509v3 Authority Key Identifier:
                keyid:AE:02:CD:80:26:C6:0C:3C:88:36:48:A0:BF:F7:11:6C:F2:67:07:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:77:0b:23:01:3a:ad:29:59:d1:84:43:cd:43:11:23:eb:b8:
         41:52:8a:4a:ed:cd:bf:ce:f6:d2:bf:e1:0c:c6:f5:58:f2:6e:
         51:11:5a:51:68:d0:ed:12:96:dc:7e:55:d4:8a:21:b6:8b:1f:
         8f:8c:aa:32:c6:70:21:76:5b:00:5c:b0:cd:e5:eb:c3:6a:79:
         db:42:67:8c:22:3a:51:c8:9f:d0:72:a9:52:b6:4a:65:b3:a0:
         fb:65:a6:08:4b:d3:75:24:2f:fd:d8:25:78:db:14:b5:48:ed:
         b0:93:be:47:d6:56:11:91:da:c9:8e:0a:31:02:cb:4f:02:05:
         c3:75:8d:1f:46:55:67:1f:15:af:5a:7f:b2:27:bf:0d:9d:7f:
         a0:0e:a6:f1:85:63:df:a8:c5:7a:d9:0f:7f:5b:63:40:9d:26:
         79:c7:cc:82:b2:f9:40:65:19:a6:32:47:e3:d7:cd:61:cf:01:
         ee:3d:ca:6e:11:ad:7c:20:f3:e2:75:75:76:01:68:6b:fa:42:
         9a:6e:36:97:4c:f0:23:58:c8:29:28:c7:de:64:93:a8:4b:8a:
         0d:b2:a5:02:d2:8c:b6:43:0c:4c:44:b9:d2:24:49:98:0e:2d:
         77:6f:af:6c:1c:f2:9f:4c:95:d6:34:fc:8f:76:e4:28:30:ba:
         60:8f:94:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:19:40 2026 by rpki-client