Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
File:                     rscJx80lRFyxg8_P69Syv8eEwxg.mft (raw, json)
Hash identifier:          AtC7unZ3WhLYpDhpJ3V1m+ZUmKuLTFuVymHrwLwKXE4=
Subject key identifier:   86:11:79:88:B9:40:E6:FA:07:0E:7B:B2:A5:9C:CD:A3:F2:19:86:CF
Authority key identifier: AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18
Certificate issuer:       /CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318
Certificate serial:       01A17F2AADE1368B4E7546D545EC530C9D16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
Manifest number:          1A53
Signing time:             Tue 27 Oct 2026 21:01:05 +0000
Manifest this update:     Tue 27 Oct 2026 21:01:05 +0000
Manifest next update:     Wed 28 Oct 2026 21:01:05 +0000
Files and hashes:         1: 3tnIJCAJuTxPdCjKH0LFyvk_cWc.roa (hash: VmbvOjv/8VA94bTsBK4HjtZFv7RcluBdGePjIzuzrpE=)
                          2: rscJx80lRFyxg8_P69Syv8eEwxg.crl (hash: jimnF1MOLMW59P9bzuDcUeDJ1ZHsy1gdAXNwyLaubxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 21:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:2a:ad:e1:36:8b:4e:75:46:d5:45:ec:53:0c:9d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318
        Validity
            Not Before: Oct 27 21:01:05 2026 GMT
            Not After : Oct 28 21:01:05 2026 GMT
        Subject: CN=86117988b940e6fa070e7bb2a59ccda3f21986cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:c9:5e:6d:fe:cb:90:09:65:e5:b6:1e:23:
                    eb:31:b9:fc:19:9d:91:3e:df:c2:8d:9c:ca:1f:3a:
                    01:3f:d4:69:bf:84:57:36:b6:60:0d:bc:ae:78:5d:
                    fa:27:82:10:c7:3f:bf:4d:42:28:cf:15:df:88:e2:
                    bc:d1:0c:b3:47:13:d2:98:07:48:11:87:97:44:cc:
                    2a:6b:a8:e7:aa:60:c0:7c:f1:12:30:c1:bb:1f:4d:
                    b1:14:e2:91:6d:55:81:2f:23:fa:2b:60:a4:d2:22:
                    9f:c9:dc:a1:9a:0d:d0:3c:df:2d:a6:c7:18:8c:74:
                    be:1c:19:ae:8c:3c:e1:74:73:7d:fa:06:82:c4:30:
                    92:07:26:f9:19:ca:60:3d:cb:de:a7:d1:29:f9:2e:
                    a5:39:a2:3b:24:9d:5f:92:0b:b2:4a:6a:b1:7e:19:
                    b1:4a:d6:9d:07:dc:e1:09:86:75:c6:18:6c:7e:bc:
                    c0:87:3c:01:b3:62:bf:b4:a4:2c:fb:d1:29:f6:51:
                    1d:af:f8:40:a2:a2:d5:b0:0b:43:47:c2:f5:9d:d9:
                    5a:30:a3:48:ee:0f:30:a3:9f:96:5c:7c:25:60:8f:
                    0d:14:90:7c:7a:16:1d:b0:13:ce:17:00:88:77:a9:
                    8e:cb:4f:b2:a4:af:00:d2:fe:cc:b8:25:28:38:40:
                    d1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:11:79:88:B9:40:E6:FA:07:0E:7B:B2:A5:9C:CD:A3:F2:19:86:CF
            X509v3 Authority Key Identifier:
                keyid:AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:86:ea:de:3e:0d:e4:24:3b:e1:68:82:97:33:25:77:d2:81:
         43:9b:74:99:ea:85:16:c5:c8:9c:ff:a8:b3:c2:a9:bb:5c:9c:
         95:24:f0:04:1e:00:8a:99:26:67:5b:18:5e:fd:62:ba:82:a9:
         18:65:e9:d0:26:d0:e4:0d:a3:e1:50:ca:50:2f:bc:80:9f:bc:
         07:0c:a6:ed:1c:75:3e:1d:9a:0b:50:62:ca:98:39:50:a3:64:
         44:7e:72:6f:32:49:e3:27:0e:18:a1:63:ca:86:91:78:0a:2f:
         5e:c2:02:75:94:1f:30:06:10:c4:d3:e9:c3:0c:7a:c9:7e:e5:
         00:8f:bb:5a:d5:76:67:7d:64:0f:88:78:7e:34:8b:77:6b:b3:
         39:f8:6f:38:91:1a:cc:9d:b8:90:af:38:17:60:c5:c2:7e:0b:
         f3:72:8f:14:ec:e3:1c:f5:74:3b:ce:ea:a8:64:4e:af:db:5c:
         3a:2c:0b:76:ee:c5:54:22:ad:46:81:75:18:96:cb:b3:57:64:
         a5:97:47:e2:4d:87:52:92:95:e5:57:b4:09:6e:e8:5e:80:7b:
         28:90:a3:64:35:a7:ae:1f:aa:19:2c:f9:14:f7:07:21:41:68:
         66:eb:c0:3d:4d:01:6e:88:0f:b4:a3:33:e9:42:9a:ae:e6:f5:
         28:31:f0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:17:12 2026 by rpki-client