Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File:                     AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier:          u7hc2weegTu0kJ2d9g7tUO6v+DYbQ/G35L72MhBf460=
Subject key identifier:   0C:FD:E0:94:47:A9:32:AF:1D:83:67:01:AA:C1:8F:06:DE:F4:0E:AC
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer:       /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial:       01A185635AC8D683A79C562CED2903BB27C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number:          1AEB
Signing time:             Thu 29 Oct 2026 02:00:43 +0000
Manifest this update:     Thu 29 Oct 2026 02:00:43 +0000
Manifest next update:     Fri 30 Oct 2026 02:00:43 +0000
Files and hashes:         1: 3lE-OFcZg5HBfiXy0gupENM3iyk.roa (hash: bLLbFDCXQ+hwG1ZI2hchMxCwkBA94qpajMIUIPVAa8Q=)
                          2: 3yN1WaImxLytELQ8orv8zRs2JTc.roa (hash: xMQ9DHu/OHk2/N1Hs4FxQtyh2D3+E7jpj/gCToK104o=)
                          3: 6tH2d7DuA0R1l2Pidcpu6hElWDI.roa (hash: CfNi98riUNvkPkY0puJ/adG9NQhrM30w+euigtAJ/Sw=)
                          4: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: 1A1rLhX4D3kBtAUX+lk6k6hDE9mItPE8xIw64LywEeY=)
                          5: TzbPsDZ-cxzqjv8-LwUqnZiNDVA.roa (hash: Fw/wCqm5ct+1+LFhxRHPMU/lUojt4L4OVaEyFt+zO+s=)
                          6: ddUJNLSqBtnSmNldI4m1ICrrXaA.roa (hash: 3+OVO0aN+wd5+fw851/RNy2HHQdglPinsg8QGb8dxQo=)
                          7: eJhW9z5ku9_qhNiO6iw_ATXoEHw.roa (hash: EPkgNIk6bKUUZeeYQssHTaftEyd1+IqUJt3qVX40j0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:85:63:5a:c8:d6:83:a7:9c:56:2c:ed:29:03:bb:27:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
        Validity
            Not Before: Oct 29 02:00:43 2026 GMT
            Not After : Oct 30 02:00:43 2026 GMT
        Subject: CN=0cfde09447a932af1d836701aac18f06def40eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:b7:f5:9f:25:8c:4e:8b:50:0d:9a:b2:56:
                    51:27:da:43:53:31:97:23:24:51:88:49:58:dd:47:
                    8d:45:af:6c:5a:01:24:3e:2e:80:66:07:4a:41:de:
                    6a:0a:f9:4f:b0:f4:3e:3f:9c:75:e3:98:8e:37:97:
                    cd:02:bd:89:9f:40:e5:45:00:69:fb:3e:1b:8b:27:
                    21:79:87:ca:e9:ac:39:87:8d:d4:08:a0:88:6f:c2:
                    e9:c5:78:41:14:dd:44:d6:7b:f2:82:1a:a2:a4:26:
                    8c:8e:fe:46:aa:d7:79:a0:b1:55:ca:b4:fd:df:7a:
                    fb:46:18:32:5e:bd:39:ac:cc:e0:e3:76:b3:cf:1b:
                    26:8c:a7:40:49:91:31:f0:a7:0e:52:35:35:f0:e7:
                    4c:bb:21:3a:a9:ad:88:56:09:3b:5a:8d:ab:22:1e:
                    6a:07:88:5c:3b:5c:24:90:46:2b:76:4c:e8:b5:0d:
                    83:df:50:88:a6:86:c3:45:01:6a:fa:58:95:d9:85:
                    fe:22:ed:9a:c2:28:38:3d:96:82:bc:d0:31:07:e5:
                    a5:b4:c4:cf:5b:b9:7f:42:68:de:1c:23:0f:a3:d3:
                    09:b5:0d:34:36:f2:23:e2:d6:bf:85:8e:e1:c8:1a:
                    3c:45:2f:77:03:3a:e0:3f:44:75:24:8c:64:73:9c:
                    b5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FD:E0:94:47:A9:32:AF:1D:83:67:01:AA:C1:8F:06:DE:F4:0E:AC
            X509v3 Authority Key Identifier:
                keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:69:f8:5b:4a:6d:22:6e:a1:5b:03:61:2d:79:25:91:22:0f:
         aa:cf:71:15:e5:5c:61:87:d8:97:f6:a3:a4:c7:57:55:b8:63:
         43:81:42:0f:bb:6f:2b:cb:5f:b5:d8:89:53:d4:e0:4e:40:8d:
         fe:c0:e3:82:a5:2f:2c:fb:4d:11:dd:1c:36:2c:19:ce:d6:4e:
         ad:30:7b:26:34:e2:3d:c7:fa:cc:cc:13:14:e0:07:2e:f3:6c:
         fc:46:84:8b:a7:de:1b:08:83:20:0e:33:8b:25:b9:90:a2:0f:
         c5:a4:34:8b:87:b4:78:9b:16:a8:56:64:f7:0a:1d:6d:b5:be:
         1d:5f:d5:4c:3f:bc:a0:2c:b6:9a:da:ad:2f:77:f7:9b:e9:25:
         59:55:f1:c9:04:8f:35:55:95:e4:79:80:b5:7b:49:84:c0:34:
         a1:0c:c9:28:85:8c:ec:99:7a:53:0d:73:09:b5:c1:ac:9f:be:
         b1:15:fb:3a:c0:7a:e9:2a:24:a6:d4:be:66:84:68:6f:38:1e:
         63:23:39:0b:01:a9:a7:87:b5:17:51:92:1f:a4:1e:58:72:c1:
         74:ba:81:d3:fe:c7:26:5b:bc:d9:c2:ae:1e:8a:ea:1d:b6:72:
         38:a1:60:73:61:bc:ce:ff:c4:70:0c:fe:fb:de:22:92:a9:b7:
         2d:5b:05:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:48:19 2026 by rpki-client