Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
File:                     a0s-anyHg_yKVxn72fN7MsjHxco.mft (raw, json)
Hash identifier:          gT/AsXB5YQoNcAi21SOVbFrapdQuBWMBz77RJ3Tux8Q=
Subject key identifier:   99:C8:18:0C:31:57:7D:3C:69:67:0E:B1:D0:07:FE:B5:BF:91:06:6C
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Certificate issuer:       /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial:       01A1735D09EC26B18459123B523B284E709E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
Manifest number:          132F
Signing time:             Sun 25 Oct 2026 14:00:39 +0000
Manifest this update:     Sun 25 Oct 2026 14:00:39 +0000
Manifest next update:     Mon 26 Oct 2026 14:00:39 +0000
Files and hashes:         1: 1-PU-Hm_SbxZzdKhiYrsJyhJw6oI.roa (hash: F3ey1QrO2lAooe3dk5bBb9+xgHy1sfZAGBgLbjbxbY0=)
                          2: Bf9RdHQMdQL9V8vN6-doDD0kdao.roa (hash: OeRuEu23I1npxCLbqKUi8RpgkFTQ1kB32heke6+KB6M=)
                          3: GQIGNP3ib22FM0gmlZYEVyr6wsE.roa (hash: 6pjgMVqEKUSiLzAce+B/Gv6+j8GqxUjYg+qoHDWXENw=)
                          4: a0s-anyHg_yKVxn72fN7MsjHxco.crl (hash: GIPOPWe4ME5eCqoKVHRinwP6LgCUUaeytMWTKtvCuXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:73:5d:09:ec:26:b1:84:59:12:3b:52:3b:28:4e:70:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
        Validity
            Not Before: Oct 25 14:00:39 2026 GMT
            Not After : Oct 26 14:00:39 2026 GMT
        Subject: CN=99c8180c31577d3c69670eb1d007feb5bf91066c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:3a:99:ba:5c:87:9f:50:b3:f6:ba:fc:81:
                    47:36:4f:6a:31:3f:44:42:c3:5b:7d:b9:7e:43:04:
                    29:59:22:3b:2c:c9:c6:08:72:f7:27:55:a2:3f:ec:
                    62:e7:df:81:2a:d0:32:69:69:96:2d:b8:3c:46:27:
                    8c:ff:bc:e9:5b:a9:02:33:9b:4d:c0:84:7d:c4:1e:
                    2e:9c:61:18:70:0e:54:be:f0:65:be:03:d4:27:cb:
                    19:f8:78:1f:af:68:67:ef:ca:cc:a0:30:3d:9f:7c:
                    4c:5a:3f:11:e2:dc:35:9a:ec:69:92:94:af:1b:dc:
                    47:6b:46:9f:4d:29:a9:c1:10:c4:71:7d:25:c7:86:
                    3b:6c:6c:ec:86:61:1f:47:b6:21:61:1f:26:18:8e:
                    4b:8c:47:94:e8:39:ea:57:b8:ee:17:7c:76:7a:2c:
                    2c:33:12:de:5d:c5:54:11:fd:5c:c2:a9:03:76:8b:
                    4a:be:29:e6:1c:c9:9f:9a:df:66:ab:eb:80:ab:7e:
                    35:99:6e:bb:16:a1:32:88:c9:17:a3:ce:63:b5:39:
                    63:a2:27:0e:98:46:a2:69:18:7b:fd:ff:bb:53:b0:
                    ae:ec:02:d1:ac:1b:69:b7:fd:a0:75:86:1c:e6:e7:
                    c4:65:dd:c0:e9:d3:f9:c3:23:46:9d:7c:2b:b1:ca:
                    f3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C8:18:0C:31:57:7D:3C:69:67:0E:B1:D0:07:FE:B5:BF:91:06:6C
            X509v3 Authority Key Identifier:
                keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a1:a5:b2:f0:35:86:cf:3d:73:1a:5c:a5:64:38:a8:8b:c1:
         da:ef:a7:68:84:08:4a:b4:2d:be:c2:b1:f3:9b:02:75:a5:de:
         07:d3:b9:35:cb:31:52:c4:5f:21:e8:12:2f:c1:09:27:30:be:
         7b:0e:13:f3:40:7d:ff:e3:d7:98:aa:65:7b:2f:4d:a4:91:57:
         57:f4:cd:81:ce:6e:a2:ee:0b:22:8f:36:06:7f:6d:01:18:54:
         f4:b3:c1:27:c1:8e:5f:bb:5a:46:05:7d:80:e9:46:50:a5:c2:
         9c:6a:b2:e9:6a:99:c1:f6:0b:cb:76:d1:40:76:27:7e:53:0b:
         a3:89:94:3e:4e:94:67:32:d8:17:30:91:ae:1a:b6:67:78:32:
         fc:99:c7:e9:35:43:77:19:b2:13:e6:48:b1:f8:0c:3d:2a:2b:
         16:f1:36:2b:22:d9:61:ab:e5:85:38:49:0a:be:90:7d:9c:38:
         1d:38:65:a5:7e:2d:a3:76:7d:f8:49:ff:6b:5f:d1:17:be:21:
         7f:af:7c:2d:ef:ba:f3:b8:cb:be:bd:62:7f:b8:a1:d8:f5:a9:
         e9:2b:12:64:fe:30:7a:e6:0a:4a:7d:33:67:b5:f3:3e:14:5f:
         42:0e:3a:4f:ab:88:1b:e1:41:1a:f0:97:36:59:84:83:55:73:
         8f:a5:30:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:50:38 2026 by rpki-client