Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File:                     RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier:          wFzPCdaudSVyecP3JoVa9IaDqWO/p6mwjkqkPVRqrAY=
Subject key identifier:   E1:B4:D9:54:6D:9D:DA:ED:25:F0:6A:D2:D0:C7:A4:AE:D1:E6:F7:3C
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer:       /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial:       01A119E232C3DAC8933568B9FF7F1E1CAA51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number:          1407
Signing time:             Thu 08 Oct 2026 05:00:16 +0000
Manifest this update:     Thu 08 Oct 2026 05:00:16 +0000
Manifest next update:     Fri 09 Oct 2026 05:00:16 +0000
Files and hashes:         1: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: WU1MlqWgYJ8xc6gANSvxWEg8xSPkB8tywUusCqI6oe0=)
                          2: xbkHK9BjxqqWppD29--gfkSmovk.roa (hash: hkkQkmlB4qFZaOaawyBYcXjPEkqDqcjHyvxZakCPMVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 05:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:e2:32:c3:da:c8:93:35:68:b9:ff:7f:1e:1c:aa:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
        Validity
            Not Before: Oct  8 05:00:16 2026 GMT
            Not After : Oct  9 05:00:16 2026 GMT
        Subject: CN=e1b4d9546d9ddaed25f06ad2d0c7a4aed1e6f73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:64:e7:2e:1d:e8:19:df:1e:7e:65:3f:47:
                    5b:09:08:76:ae:46:3a:07:fe:e9:43:56:f1:d1:60:
                    91:d4:4f:7b:8f:6f:ec:c1:77:b7:0b:3e:85:b8:ee:
                    23:11:f2:38:b8:2a:4c:96:8d:1f:b6:d6:31:b2:38:
                    9d:df:dd:eb:86:6e:de:de:b4:21:d4:5b:2e:18:e0:
                    ce:66:f0:7f:3e:52:a3:5d:08:4a:8f:ef:57:36:fa:
                    59:51:1f:2a:4a:38:74:b7:3c:b5:d0:b6:bf:01:5c:
                    5c:b3:ca:7c:ba:ba:bd:65:1e:0c:04:94:b2:c5:55:
                    5b:d5:41:22:f3:ff:89:3c:f5:16:86:15:d7:65:ac:
                    95:5d:fd:f1:aa:6f:09:00:b5:c8:49:bb:40:cd:12:
                    da:6e:6a:0d:fc:68:00:82:66:4b:63:96:5a:f9:16:
                    43:84:5b:ed:63:60:30:a3:9f:2b:c5:b6:bf:3e:aa:
                    be:2a:40:dd:1b:11:98:b8:56:a4:dc:96:85:14:e9:
                    3f:b1:90:6c:f0:af:dd:13:bd:c3:81:e2:06:cd:b2:
                    94:68:91:61:d7:a1:55:67:ad:92:2a:df:68:bd:5e:
                    b8:2a:20:18:51:3b:52:bd:d2:9b:1b:c6:fb:21:df:
                    6a:e3:a5:96:3d:9b:b5:7b:af:c9:d6:af:87:e1:7f:
                    6d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B4:D9:54:6D:9D:DA:ED:25:F0:6A:D2:D0:C7:A4:AE:D1:E6:F7:3C
            X509v3 Authority Key Identifier:
                keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:77:d6:03:66:97:79:29:ff:6f:fb:86:c0:8e:a7:da:d9:75:
         f9:74:5f:b3:b7:30:97:30:3d:37:ad:73:1e:0c:91:14:20:56:
         22:70:d8:0a:e4:df:e1:8d:6e:01:73:2f:b1:03:59:50:73:40:
         22:3b:d2:e3:6e:dc:68:32:8b:e6:cf:07:0c:80:fc:bb:09:dc:
         0f:c5:bb:de:9e:50:55:df:22:f9:65:89:2e:71:5d:9d:7c:0e:
         c5:3d:fe:9b:8c:1e:78:a1:e4:b0:6a:62:01:97:f5:d6:b2:be:
         df:c9:81:c3:40:8a:b3:3d:bd:cf:48:a6:5a:1c:56:e1:bd:c1:
         07:ed:cd:39:0d:31:f2:90:dd:ca:88:7b:f5:6d:f4:00:20:d2:
         47:1c:d3:f8:a1:e8:ba:d0:b1:c2:96:5f:1d:74:ac:df:dd:89:
         bd:e4:1e:99:fa:ee:a1:12:2f:80:45:02:e1:71:dd:da:99:13:
         43:c5:e6:a1:20:25:c8:d6:7c:80:5e:87:eb:d2:a4:b6:4a:65:
         c8:0a:72:5e:6e:54:db:5b:9c:d3:9a:b4:3e:63:cb:47:75:fc:
         62:9b:6f:14:54:e4:65:1b:d3:40:93:81:99:68:8b:b2:95:db:
         8b:c6:21:e3:31:be:af:7d:42:e1:15:0e:f5:a1:25:fa:03:7f:
         0b:e0:52:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:39:58 2026 by rpki-client