Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File:                     mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier:          AWacQipHs6xT9CCAnaFV8lvUJpi13jNhNUj5qe3mdd8=
Subject key identifier:   37:05:39:B3:F1:51:21:89:5E:5D:6E:80:F2:03:1E:88:AD:8F:C0:1D
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer:       /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial:       01A0FF47BE86D3405B0AB446013D66F9229D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number:          16CB
Signing time:             Sat 03 Oct 2026 01:01:26 +0000
Manifest this update:     Sat 03 Oct 2026 01:01:26 +0000
Manifest next update:     Sun 04 Oct 2026 01:01:26 +0000
Files and hashes:         1: 8TyLnCMDPzgZ8FZyvfSKQcjoWSQ.roa (hash: 8UCd4ALkr3MSQe6tVhV16Z6R2CoDRh6brDobVRt1DEI=)
                          2: TnxLiTU4N8IxRzgKudiN6lBfkB0.roa (hash: 84h5erlaI1tFTllY8zVF7aYQ8Di+2iwxgRfjK8j6Kko=)
                          3: WlLOTRCWvlIYiS-TgTY4hAdHm7Y.roa (hash: bxPUG4RUFxYGi4wK66fAhQIJ42FQsayg/q85b6OoGU8=)
                          4: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: +akDsbC/smjVJVY5/F5q95GDjrS5014U+oLbHPXnjAg=)
                          5: yo062WtK3aPCw8GfSmsUaEUAqlQ.roa (hash: 7t8JTMWvQ5b+YuFMSIjbxw8YIYrsWUeqYO3jYfd5y6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 01:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ff:47:be:86:d3:40:5b:0a:b4:46:01:3d:66:f9:22:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
        Validity
            Not Before: Oct  3 01:01:26 2026 GMT
            Not After : Oct  4 01:01:26 2026 GMT
        Subject: CN=370539b3f15121895e5d6e80f2031e88ad8fc01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:ce:e6:06:1e:c7:ff:4d:ca:db:a6:d5:1d:
                    22:91:8d:96:6f:01:80:19:73:b2:48:8f:f8:9e:cd:
                    f0:48:f9:6c:e4:50:12:0e:77:47:41:2e:4e:72:af:
                    0c:47:6a:a9:2d:83:99:b6:ba:f1:93:5f:c0:b8:35:
                    80:9d:73:5c:b7:f8:b8:30:6b:58:73:14:1c:39:d6:
                    46:40:3c:7f:61:49:d4:1e:77:e9:6f:8a:3c:16:93:
                    71:52:c0:55:b2:a5:d9:8a:fd:f8:6a:b6:de:19:eb:
                    ce:bf:4e:81:0b:21:0f:4b:d4:0c:d4:72:cf:a7:2b:
                    e7:e1:ea:4f:72:2e:1d:83:eb:6b:ca:3f:29:82:ca:
                    ef:eb:bb:5c:e7:6f:1f:79:7b:f7:da:0f:81:c6:5a:
                    32:c1:c2:82:6c:e6:2d:54:87:ad:11:06:d1:d0:b0:
                    52:39:c8:d6:45:10:a2:74:6e:ce:c5:d4:23:6f:3a:
                    1d:74:4b:0e:6b:8a:da:b6:b0:10:8a:7a:e1:6f:a1:
                    cf:50:60:91:5e:16:a4:a6:8d:d7:de:b9:62:49:b4:
                    46:29:03:fb:10:19:54:e0:2a:e7:92:86:05:1c:d9:
                    0c:f7:5b:0b:5c:1c:16:f7:25:94:86:89:57:bf:01:
                    fd:e4:8b:38:94:41:54:9f:c9:e6:4b:7b:3f:64:8e:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:05:39:B3:F1:51:21:89:5E:5D:6E:80:F2:03:1E:88:AD:8F:C0:1D
            X509v3 Authority Key Identifier:
                keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:32:a4:36:5f:b4:cd:9a:f5:97:df:27:7a:1b:1b:0a:a9:6c:
         dc:fb:a8:a0:4b:46:cf:5c:f4:6b:1b:9d:08:01:51:ce:c5:1a:
         26:70:42:37:0d:da:a9:46:aa:87:42:31:c5:fe:36:70:e8:59:
         7e:f2:89:46:d3:4d:4b:b6:7f:d2:10:5c:91:0b:6d:dd:2c:d3:
         1f:18:09:4b:45:47:ec:cb:ba:84:65:06:7e:69:a9:b2:1f:ae:
         07:48:69:97:81:21:14:ff:be:e7:83:7c:a4:d0:3d:1e:a6:41:
         07:5a:69:fa:91:ef:cf:e0:e3:14:c6:cf:d0:cb:81:8d:ff:f8:
         39:6a:77:9d:4d:2a:cc:1f:7b:cf:60:84:75:41:9d:38:c6:bb:
         de:d7:98:64:76:8b:13:a1:77:a7:6a:0d:5b:be:b2:fe:4a:13:
         8d:a4:31:cf:ea:6a:7f:b4:9f:75:90:2e:ef:a4:48:8c:c6:09:
         a6:1f:70:20:c0:a8:e7:2a:e0:3a:6a:cf:80:22:fa:9d:2f:96:
         5a:95:9e:de:f3:45:fc:c2:01:a4:22:58:bf:ba:29:bc:91:cb:
         96:a0:55:11:45:4e:61:8b:f9:ef:36:ed:b5:58:75:7d:74:2a:
         f8:0c:0a:d1:85:5a:85:68:e5:45:d3:c6:c1:44:1c:cd:2f:90:
         7e:08:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:52:30 2026 by rpki-client