Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
File:                     pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json)
Hash identifier:          qGn6fQkutaSgExJP8tjUZtx8bNUzAV/EaJEolY7EEyw=
Subject key identifier:   E6:18:74:CA:DF:3F:F0:1E:91:A6:65:09:39:0E:D0:B5:70:D1:A6:94
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Certificate issuer:       /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial:       01A16F8037AE59AD18D23D3837AE264B8499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
Manifest number:          101D
Signing time:             Sat 24 Oct 2026 20:00:36 +0000
Manifest this update:     Sat 24 Oct 2026 20:00:36 +0000
Manifest next update:     Sun 25 Oct 2026 20:00:36 +0000
Files and hashes:         1: VBRvFj1EOS8ywtDDLAz1AuJ-F3M.roa (hash: ZcSJ73xAFGVAh8eRMHYLBDppD5u63RXHyLpMLnO53qI=)
                          2: mnODa5wDvkGX4Jfpz4BI1Vtzz80.roa (hash: jyMMr46dns8Qs3JvGsMvWCbFmVoKBoUCnfmLlBoBHdM=)
                          3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: 1TZagE+biD7FdM1p7u39YqloMTWwo+8zqh7QQXXLn0A=)
                          4: vmahc-gH9xY8uloECYneObmRUwo.roa (hash: 6npTr2kUzSthDDmcUqv6TyudZTdNiJRtH1eH8fs3DyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6f:80:37:ae:59:ad:18:d2:3d:38:37:ae:26:4b:84:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
        Validity
            Not Before: Oct 24 20:00:36 2026 GMT
            Not After : Oct 25 20:00:36 2026 GMT
        Subject: CN=e61874cadf3ff01e91a66509390ed0b570d1a694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:98:61:39:95:4d:65:23:c7:4c:f1:29:9c:ef:
                    05:73:d7:6f:39:25:9f:af:c2:c3:34:13:fb:2d:14:
                    b7:97:84:96:8e:ed:54:e9:76:6c:53:a8:da:14:02:
                    5e:6c:6a:ce:d9:2c:33:09:b1:f8:5b:71:3d:64:bf:
                    82:3d:10:d5:1f:f5:96:87:65:5d:15:c0:0e:4f:85:
                    40:7f:a1:d5:df:b9:26:24:a9:b8:be:7e:41:19:7d:
                    83:ac:b8:a8:64:d3:73:6e:74:96:24:4c:ac:9b:1c:
                    dc:11:50:13:78:ec:d0:74:9b:53:2f:b2:88:ac:72:
                    ca:06:7f:04:05:53:5c:16:a4:51:f4:0e:85:47:85:
                    57:a0:8e:5a:3e:63:cf:91:28:cd:d7:34:40:aa:bb:
                    36:56:c9:57:a6:e0:df:0a:c8:df:19:3e:8e:07:b9:
                    8e:95:2e:9d:30:af:44:28:7b:75:36:da:51:54:72:
                    d5:d2:a0:ea:03:07:fa:68:c1:67:2e:fe:03:e2:a6:
                    86:a9:a1:86:33:3c:b6:c6:9c:e0:2e:c8:8a:b7:bf:
                    63:01:0e:a4:bd:c3:92:54:2d:af:f9:ad:f3:5c:e0:
                    ce:32:71:6f:75:08:67:85:ba:13:d2:2d:39:1f:98:
                    c4:33:7e:15:f2:2a:ef:df:27:20:6a:3c:7c:79:28:
                    2f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:18:74:CA:DF:3F:F0:1E:91:A6:65:09:39:0E:D0:B5:70:D1:A6:94
            X509v3 Authority Key Identifier:
                keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f0:15:e3:5c:02:f3:5b:7e:51:78:4d:2c:f7:13:f9:2f:1c:
         e4:de:80:1c:b7:d2:02:5f:f9:49:44:ba:f7:26:0b:08:6c:ba:
         ea:f5:54:28:95:ef:79:98:d6:61:71:ea:3c:bd:5a:cd:1d:bd:
         09:b7:34:6e:51:ff:84:87:5b:d9:dd:6e:26:81:d7:73:fc:27:
         02:04:b5:1d:ee:81:a0:14:70:21:95:c3:f1:a1:dc:92:d4:9b:
         3b:d4:c1:4d:61:8f:cb:70:94:37:78:70:7a:3b:94:3b:f0:ac:
         20:17:1d:41:19:e7:7d:dd:48:dd:f2:50:34:5c:c6:57:81:3c:
         99:73:fa:7f:4f:64:7e:d1:06:01:7c:b9:2f:8b:25:c8:6e:1d:
         2f:3a:b1:58:ee:0d:d2:60:cd:90:64:d0:93:17:69:0d:ea:30:
         b6:d6:c8:d7:ba:7b:5a:60:e1:10:5e:3c:a6:02:df:58:8b:4e:
         3f:59:7c:2e:ee:01:77:17:c6:08:c9:3d:ca:6e:13:e1:2a:e1:
         58:ec:35:25:88:03:dd:5d:fe:29:ec:81:0b:89:8b:71:7e:89:
         1b:4d:1f:60:60:06:33:61:21:0b:c6:54:cc:fe:77:ef:f9:5a:
         73:c5:71:a3:8c:92:26:77:4b:fd:f4:5c:0e:8b:97:89:54:9b:
         ab:96:8c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:12:32 2026 by rpki-client