Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
File:                     i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft (raw, json)
Hash identifier:          2r/DiA9LQEJfqdu+pAz9mlo8HXNCfKAhE+u6cCYNkPI=
Subject key identifier:   D0:E0:98:75:8C:DA:64:BA:37:AE:37:F2:B9:6D:32:D1:DC:5A:45:0F
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Certificate issuer:       /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial:       01A1347E799EBE3092956A00684C7525C4E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
Manifest number:          1AB2
Signing time:             Tue 13 Oct 2026 09:01:05 +0000
Manifest this update:     Tue 13 Oct 2026 09:01:05 +0000
Manifest next update:     Wed 14 Oct 2026 09:01:05 +0000
Files and hashes:         1: 3_OcxNMN0KbC4UPvlpJB171qwi0.roa (hash: 1cdlCIkIH+e7JaWNBWdt/oRz9sz5GjqYx6XN0m/bmkI=)
                          2: BnDaXn6JXgpX35DdVWmNALLjVsg.roa (hash: X0eAvfAtk6gZOJ4XQkS/7CStvPQE5JyER3BxoLKJHGo=)
                          3: EIlm2UOK4a43mkGzeWHWkYSMea0.roa (hash: +wMjOafG8Bh/qQ6ngEeSs6Schjv6y2L45oZoRJ0DZNo=)
                          4: TnuPLr96NE4kvwBNRd_eqPgU9Tg.roa (hash: ruDz8U0cu+MiYTfXFQD2qaBTvL0XnsolTbruv0gDlxg=)
                          5: Y1PR61pG4-S3pZIKsHtLZ8aw3jc.roa (hash: TK5xw7cbmTT1CLiNVNH+590RxFXPO4Zc41/ra+oJwog=)
                          6: dMC5kaOJFzbPPpwcgfwhNgoxeCw.roa (hash: P/60n6uZdCvthPCA8K0fn77lvZmxdEM59WgcjmDKuJs=)
                          7: i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl (hash: eUMGqtIqgMf4xVWA0V4eSPXxlvO0g+1sLfhJziItxQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 09:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:7e:79:9e:be:30:92:95:6a:00:68:4c:75:25:c4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
        Validity
            Not Before: Oct 13 09:01:05 2026 GMT
            Not After : Oct 14 09:01:05 2026 GMT
        Subject: CN=d0e098758cda64ba37ae37f2b96d32d1dc5a450f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:2e:55:ed:d7:4d:d8:24:19:74:f2:ad:ab:
                    2b:6e:29:26:a6:27:0f:70:1e:fb:73:59:9d:31:d5:
                    a2:63:90:92:7d:39:0d:04:dc:64:87:b8:f3:71:38:
                    d7:e8:42:17:81:97:cc:a6:8b:d2:ed:8f:18:3d:e0:
                    cd:a0:3d:1d:55:a9:4e:d1:b6:bf:9f:8c:e6:04:af:
                    d7:12:59:40:9e:56:f9:12:9c:91:28:2d:76:db:2f:
                    e3:89:9e:ce:36:32:05:59:e6:26:18:e2:33:a0:55:
                    88:94:fd:f3:6c:72:93:3e:8d:86:a0:fb:1c:39:58:
                    b5:d1:30:17:01:f3:24:a5:2a:68:2e:02:0c:de:d4:
                    34:25:ca:d3:95:87:70:67:8d:8d:66:25:50:e3:47:
                    ae:8a:dd:c7:29:20:34:6b:58:2b:6e:97:d9:14:26:
                    f6:91:22:76:aa:bb:46:d2:ab:87:92:f1:86:da:0d:
                    10:b6:2a:1b:c3:be:44:08:f9:13:51:ec:c7:ff:29:
                    3a:d5:ad:2c:e2:1c:cf:dd:22:68:ba:59:82:fc:e3:
                    61:1c:ea:44:1e:04:69:2f:c7:e4:09:ca:b4:07:74:
                    08:9d:80:9d:6c:b2:cf:1f:74:bc:0f:ef:14:79:f5:
                    5a:3d:cf:be:51:36:98:47:6c:eb:4c:1d:d6:63:bd:
                    86:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E0:98:75:8C:DA:64:BA:37:AE:37:F2:B9:6D:32:D1:DC:5A:45:0F
            X509v3 Authority Key Identifier:
                keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:18:fe:3a:04:33:41:b1:ff:c5:70:55:66:f5:ac:63:14:03:
         03:ab:00:22:d8:63:73:1f:2f:08:a0:de:0f:db:c5:b0:8b:92:
         87:1b:d8:6e:51:c6:25:24:e4:12:cc:30:42:02:fe:0f:08:53:
         96:e2:90:28:8b:ad:46:68:10:1b:a2:c0:57:53:46:2a:4a:f0:
         4b:ac:6f:32:ea:9c:49:46:64:03:45:f1:57:53:5d:4a:44:bb:
         48:69:1b:6d:9d:9c:5a:0d:59:d3:a4:b7:9d:9d:7a:b1:ca:e0:
         1a:ff:70:e4:2b:9a:f7:a4:fe:e7:60:3f:89:66:0a:a2:42:2a:
         62:34:57:4b:ca:b8:1a:ee:f6:5b:d1:b9:39:41:ee:03:1f:24:
         e6:53:d0:62:56:c6:29:82:87:60:25:72:fd:41:31:18:c1:1b:
         95:29:a0:04:6d:77:f7:41:1e:53:73:48:94:dc:fc:1d:5e:9e:
         89:56:df:36:f7:4b:b2:1c:5c:89:01:60:4b:be:27:f5:b5:8b:
         37:55:a7:24:3c:97:8d:10:cb:75:e6:65:7a:f7:42:f7:09:a9:
         7a:40:d1:b2:fa:21:7c:1a:66:c3:c7:90:5a:78:9b:b4:5c:4c:
         9f:1d:53:13:70:a5:15:e1:0e:22:47:13:4b:27:d6:54:83:47:
         27:b5:4c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:47:26 2026 by rpki-client