Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
File:                     CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft (raw, json)
Hash identifier:          R0oXX4j1ncwarUZs+ghw1d/+K9c2FxISfZTSK4i9wrs=
Subject key identifier:   FF:F6:BA:10:51:4A:C0:3E:F3:CA:DF:22:F8:D2:3A:EF:16:B8:6A:79
Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
Certificate issuer:       /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Certificate serial:       01A13CDC5AB3176E8C51CFA31EF65E02E764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
Manifest number:          1AA6
Signing time:             Thu 15 Oct 2026 00:00:36 +0000
Manifest this update:     Thu 15 Oct 2026 00:00:36 +0000
Manifest next update:     Fri 16 Oct 2026 00:00:36 +0000
Files and hashes:         1: CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl (hash: NM+jRkxKMXI4FhX5dIpzQfMRakRJATQlJt2Mo69n6tY=)
                          2: e1B2705bWqnmxFym6Lrtufuuh-c.roa (hash: hhYlxCpVJm2mMyzGqhpnxjIOnGS6n6nkCOmx8x2LUb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:dc:5a:b3:17:6e:8c:51:cf:a3:1e:f6:5e:02:e7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
        Validity
            Not Before: Oct 15 00:00:36 2026 GMT
            Not After : Oct 16 00:00:36 2026 GMT
        Subject: CN=fff6ba10514ac03ef3cadf22f8d23aef16b86a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:40:5c:3e:fb:01:35:50:60:b3:ea:20:00:
                    79:c1:a4:f3:78:60:f6:4a:b9:81:39:3f:c1:ed:e2:
                    3a:a8:e3:73:7f:75:46:f8:54:75:cc:3c:d2:3a:4a:
                    f2:d0:0d:f0:d6:f0:2f:18:78:18:d5:46:0b:fa:f5:
                    87:f8:c4:d3:32:63:a9:d7:60:27:09:eb:74:30:a5:
                    21:b8:33:52:f5:19:e9:12:c7:a4:6f:32:83:bb:88:
                    b5:f8:f5:ea:8f:1c:ec:9d:0f:f0:24:4b:77:03:ea:
                    cf:14:98:f2:95:df:0c:e5:71:2e:c4:24:37:f6:21:
                    25:73:72:19:ff:3d:1f:7b:90:c0:86:15:ba:bd:01:
                    cd:33:b9:71:02:72:bf:5a:47:3b:d8:36:d4:8f:5e:
                    bc:f5:47:cf:9c:a5:ac:39:06:db:ca:e0:1f:84:f3:
                    43:a0:b3:31:36:98:86:29:9b:38:83:bb:e9:a5:3d:
                    fb:8a:cc:60:9b:0b:b9:88:25:e3:cb:34:ed:ea:f7:
                    46:d4:c8:f9:e9:08:66:83:54:96:42:e0:97:df:15:
                    01:9a:09:c2:d0:10:b8:18:d8:1d:62:d7:44:14:46:
                    c3:e7:b4:02:e1:1a:35:f2:ff:81:8e:56:c0:07:cd:
                    7f:37:1f:42:31:34:7a:74:3e:4d:12:b6:c5:d5:3c:
                    06:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F6:BA:10:51:4A:C0:3E:F3:CA:DF:22:F8:D2:3A:EF:16:B8:6A:79
            X509v3 Authority Key Identifier:
                keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e6:16:05:4b:97:07:bd:cc:14:d1:13:d8:75:d0:01:37:34:
         52:81:81:8b:15:27:f7:70:1c:e5:37:ce:8a:78:d6:77:b8:50:
         95:dc:b6:5e:4c:0e:24:11:07:87:1b:80:98:f0:69:7c:3a:15:
         7a:d1:7e:04:3a:b3:32:cd:f5:aa:3b:17:2b:a7:75:37:2d:08:
         d1:f5:82:19:3e:bf:d7:22:88:58:83:3c:56:41:c1:41:91:bd:
         b7:ef:da:0d:de:96:94:8c:cf:66:79:9a:06:4f:76:b3:57:17:
         7f:cf:76:08:94:fa:18:14:78:b3:49:96:68:02:74:1b:76:12:
         46:42:73:0e:41:5c:f6:2c:13:60:60:f7:85:52:e5:f7:a2:de:
         72:93:80:41:39:1a:90:bc:f7:34:f0:70:59:3f:40:4f:97:9f:
         c7:d9:70:88:b4:67:ed:7e:9b:4c:81:e8:cf:76:d5:a6:c3:c0:
         20:0f:b2:10:4d:0a:c4:04:f8:10:cc:9d:2e:15:b6:d2:c4:9e:
         2f:e7:4c:14:ab:d4:62:ae:63:b9:50:fa:4d:7a:54:2b:66:bc:
         82:64:c5:dd:46:14:63:48:aa:45:45:9a:a2:0e:16:71:7d:b6:
         11:9a:5f:65:b5:d2:15:65:f7:76:7c:d9:b8:1e:1c:a4:f9:5c:
         2c:58:05:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:53 2026 by rpki-client