Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
File:                     adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json)
Hash identifier:          zfJJYbK4OoSml0Ssd9UB+3tN3/1X9UiMaN2fvjmB3Ik=
Subject key identifier:   A0:24:EA:03:4B:B2:EB:B7:B6:66:7C:2B:B9:75:60:7A:2B:83:E6:26
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Certificate issuer:       /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial:       01A14805455567C93C7B722E32B0DE0D07BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
Manifest number:          1AAB
Signing time:             Sat 17 Oct 2026 04:01:07 +0000
Manifest this update:     Sat 17 Oct 2026 04:01:07 +0000
Manifest next update:     Sun 18 Oct 2026 04:01:07 +0000
Files and hashes:         1: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: 9wGEr92yllMYgc+t56BPnin1yN76b8y6lo9FmKep4i8=)
                          2: c7nHfsLGVr2Hpf16MebsVtcpfOw.roa (hash: E4vHcrI652reSIpSis98/0RensPsP0hINBPiLEQ2aFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:05:45:55:67:c9:3c:7b:72:2e:32:b0:de:0d:07:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
        Validity
            Not Before: Oct 17 04:01:07 2026 GMT
            Not After : Oct 18 04:01:07 2026 GMT
        Subject: CN=a024ea034bb2ebb7b6667c2bb975607a2b83e626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:19:aa:fe:72:dc:c8:e3:18:aa:91:cb:8f:
                    f6:2b:c8:81:f6:51:ea:79:45:16:3d:b0:f5:df:09:
                    bf:e3:03:ba:8a:39:34:95:ef:c0:b5:c9:97:b4:07:
                    66:92:f3:74:39:86:31:05:e3:7b:8e:b1:4b:f3:c7:
                    29:05:10:b7:b5:f2:a9:e5:21:16:52:3d:ff:9e:1a:
                    c5:0d:fe:79:48:da:bb:93:8b:f6:be:ee:8f:8d:e6:
                    33:63:e8:70:28:a2:5a:65:19:a5:22:79:8b:0f:a6:
                    ca:8a:12:22:14:bf:7d:a7:dd:25:2e:5c:78:82:97:
                    e9:27:7b:75:07:41:19:32:1d:86:74:78:fa:08:a9:
                    a6:e0:05:61:1c:19:2f:75:65:80:72:71:5e:74:55:
                    41:15:54:6e:14:4a:9d:73:7d:e6:7f:e7:c7:6d:ea:
                    4a:c9:42:f2:d1:27:b0:3c:97:0f:31:73:5d:4b:3f:
                    01:96:9d:3f:0e:9d:9d:2b:6f:24:7c:d1:43:63:43:
                    24:38:97:91:ba:71:51:89:5a:31:ae:62:d3:c2:eb:
                    4e:f8:a5:e7:95:76:4d:82:55:12:da:61:6c:d7:17:
                    26:c4:a7:5d:e4:4b:74:64:1e:4f:ef:fe:2d:aa:59:
                    f6:5e:fb:1e:b4:8c:de:58:35:0d:73:75:69:fd:55:
                    7a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:24:EA:03:4B:B2:EB:B7:B6:66:7C:2B:B9:75:60:7A:2B:83:E6:26
            X509v3 Authority Key Identifier:
                keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b9:b3:0a:2a:6a:ee:22:bd:e1:1f:8d:97:21:db:1b:53:6c:
         7e:b2:85:f4:2c:5b:e7:7d:8e:b9:42:d7:dd:44:54:7c:f7:99:
         18:24:08:5d:7a:5a:b1:75:4c:b6:67:37:65:0f:fd:5c:af:23:
         05:4f:fd:6d:1a:88:24:cd:d6:2e:0c:6a:9e:7c:e5:c4:cb:14:
         d4:5c:ef:9a:47:bc:3a:2e:d3:17:65:d1:f1:93:5b:51:5b:39:
         95:d0:ab:8c:58:d9:ec:85:19:7d:bd:3c:08:e0:70:c1:70:ec:
         db:b6:08:58:a2:2e:d4:3d:05:a6:49:56:aa:4c:98:fe:8f:d1:
         ff:a3:17:d8:34:92:c2:b2:10:12:e2:03:0c:bc:48:a4:c9:f4:
         77:0d:67:76:2a:5a:bd:d3:62:7b:4c:62:41:00:49:63:ff:a5:
         bf:a8:df:b7:d9:6f:7c:95:c3:0b:52:a0:04:6f:23:ef:14:37:
         50:e7:92:fe:31:78:38:a1:7c:5b:b6:3f:59:90:76:74:a9:ec:
         79:ca:cd:db:4d:20:5d:af:fa:ab:b7:3b:05:55:04:09:42:05:
         f4:29:e8:6f:d3:80:73:6d:06:bc:24:4c:0d:63:a9:3a:62:91:
         30:6c:26:a6:f3:20:27:38:36:64:86:44:3d:4d:56:4c:d7:75:
         f5:bc:53:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:59:29 2026 by rpki-client