Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
File:                     V1jLEehCvK8TI2R_O-_u4vxvDiw.mft (raw, json)
Hash identifier:          Nc/GD/zZ+HlZmD4TXpFz7ks+Z9/fnRfxO/pmpYUPePA=
Subject key identifier:   6D:45:95:1E:48:81:E4:F6:EC:AD:9C:EF:0D:27:FF:AA:94:62:B1:22
Authority key identifier: 57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
Certificate issuer:       /CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Certificate serial:       01A17CCEED3C6F70AE1517EA4461FBE845B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
Manifest number:          09BB
Signing time:             Tue 27 Oct 2026 10:01:38 +0000
Manifest this update:     Tue 27 Oct 2026 10:01:38 +0000
Manifest next update:     Wed 28 Oct 2026 10:01:38 +0000
Files and hashes:         1: 1ADxSOLpryixx3KGtIF_ySrFMIk.roa (hash: kQA7j8Zh8maSf1y4cREkUBQAokAzYETRF3rxDrOA8g8=)
                          2: V1jLEehCvK8TI2R_O-_u4vxvDiw.crl (hash: jI3Qhi0eHc5fZmHfeEfQogMqARONVPDKJjLTetkUZT0=)
                          3: rpxiUjoKnwHh744xJvOBFGn49wA.roa (hash: Hs/kvEaRs/h/B/Qj7Jzp4o6weuUSHswLl+1E3XDTp7c=)
                          4: sHT9uRMJFfzV4bMDWClaNZLXg6c.roa (hash: 1CccVeF+jPttRzzbL8y6u91VStwFjE2E+hkKFOv1shU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:ce:ed:3c:6f:70:ae:15:17:ea:44:61:fb:e8:45:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
        Validity
            Not Before: Oct 27 10:01:38 2026 GMT
            Not After : Oct 28 10:01:38 2026 GMT
        Subject: CN=6d45951e4881e4f6ecad9cef0d27ffaa9462b122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:73:71:f9:c7:2c:a6:64:1d:a8:0f:e4:59:34:
                    29:2a:9c:b7:e4:dd:df:38:e5:69:b6:35:e3:20:16:
                    d4:c2:b4:68:8a:6c:c7:8c:7c:02:8c:76:2e:92:b7:
                    d1:ef:3d:93:a5:25:92:fc:dc:cb:b4:35:86:3f:9b:
                    a9:40:a8:15:81:00:86:42:e2:d2:e8:48:85:8d:6e:
                    ce:cf:8a:84:3b:aa:c7:08:b4:44:bf:a5:8f:82:18:
                    dd:d4:ed:d7:ea:7d:c7:57:a3:27:a7:a3:8e:bb:ef:
                    23:d9:3b:37:e2:83:52:bb:44:0a:59:c8:5c:ac:cf:
                    a5:dc:7f:60:9f:ae:41:49:7a:f2:f0:67:22:05:09:
                    1c:05:1a:50:f6:87:b1:7e:81:37:57:de:bc:d4:69:
                    64:8f:69:e8:6f:20:e5:4e:35:b8:ff:8f:8f:89:4d:
                    24:91:f7:d8:b0:58:98:52:da:96:bf:65:23:38:3c:
                    33:38:6a:98:62:a5:ef:c8:a7:0a:ad:f8:f9:bb:d2:
                    5d:bc:0b:b0:0b:61:92:52:ba:1a:2a:34:b3:de:b5:
                    69:cb:c0:13:b3:7f:bd:44:fb:20:c8:3a:50:a8:4d:
                    33:97:f4:c4:aa:71:38:0d:2f:05:8a:ba:fd:d9:c2:
                    29:9c:9e:01:39:0a:4b:5b:f6:1a:70:34:47:88:0e:
                    e2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:45:95:1E:48:81:E4:F6:EC:AD:9C:EF:0D:27:FF:AA:94:62:B1:22
            X509v3 Authority Key Identifier:
                keyid:57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:c4:15:91:c0:c3:b0:f5:ca:65:f3:3a:bc:11:4e:0b:e5:06:
         4b:59:10:73:f2:e1:87:ef:2f:db:55:39:fd:ea:80:fa:8b:e9:
         4a:93:ca:40:82:5f:fc:eb:43:a7:5f:df:ca:f8:57:bd:17:c0:
         0b:da:68:0d:50:eb:46:e1:a2:96:c1:46:2b:ad:2a:ad:17:ce:
         2a:f9:3e:f8:ab:dc:6e:b7:87:26:82:0d:a7:30:75:86:28:bc:
         cd:f5:cb:ee:32:75:33:dd:04:3a:00:98:f1:f2:d9:4c:db:e1:
         36:07:c4:f0:b0:07:14:a7:1a:b4:c7:2c:2a:0d:3a:20:97:50:
         c3:04:73:0a:f5:47:83:32:b3:ba:6e:b2:e2:71:49:30:db:be:
         27:96:1e:eb:36:1f:e9:3d:b0:6d:e2:66:db:1d:ad:90:f1:c3:
         1d:89:86:3b:93:91:5d:9f:f5:b6:c3:5b:7d:d1:e0:61:e2:e8:
         50:d2:86:73:59:5e:8a:0a:a1:86:09:31:15:28:0c:ac:73:e7:
         1b:30:7b:2d:2c:16:7b:87:ea:e8:45:71:e3:20:7e:f8:51:e5:
         5f:0b:04:64:1d:fd:b4:5b:4e:09:f1:9f:c1:b2:75:cd:b8:5e:
         ae:b2:2c:c1:a0:f2:68:e6:34:d7:35:5a:d2:c5:b7:dd:1a:7f:
         ab:61:d7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:49 2026 by rpki-client