Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft
File:                     93QnJYYrkL2kUQoC6AT-860RQtw.mft (raw, json)
Hash identifier:          ncIHvqxSX+KHYbdolKkJ08vdFQ6tx4NHEhNw8pkdfjc=
Subject key identifier:   29:F1:B8:D6:13:83:10:F4:AA:18:70:05:5B:B2:F7:5C:A7:1B:E5:28
Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
Certificate issuer:       /CN=f7742725862b90bda4510a02e804fef3ad1142dc
Certificate serial:       01A17C29955AA0E0DF893C54D505E561A23B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft
Manifest number:          1ACD
Signing time:             Tue 27 Oct 2026 07:01:02 +0000
Manifest this update:     Tue 27 Oct 2026 07:01:02 +0000
Manifest next update:     Wed 28 Oct 2026 07:01:02 +0000
Files and hashes:         1: 93QnJYYrkL2kUQoC6AT-860RQtw.crl (hash: OHudTmmuQ6n/H774Kg+7pHZ8eFMixgWN8d08TH+iqd4=)
                          2: KYxy0pnh0MU9rfmWpequqe7xieI.roa (hash: T7Cq49LqPDm2mmMjfW8efC96Mjui5XiIDXZg/V5TnlY=)
                          3: n6xxVcjkCug-o7SUn1MPcYv_4gw.roa (hash: E2YghB0SYkXGzN8panSbLUgBzPNuukknYhzwjv2afJg=)
                          4: pnEqpSkACeNqn39zBs0kLzHEzpQ.roa (hash: DbpSnKPg4cFDLbXNeyhxRDeof5YCNChWvu5ZRYsbbIY=)
                          5: rS0ub271N0mgf5Pfb161dvFC_v4.roa (hash: cU/s0tr6dDuR+BKKqu2aSnnlyz5+VDlFiksMCpDRrOo=)
                          6: ts_rPkgwn2Qi8z7EXS6_3ekjy1w.roa (hash: b1xV7zGywXEyfDZVm80O+ik6/u2GYUW3YmbjuDySQh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:29:95:5a:a0:e0:df:89:3c:54:d5:05:e5:61:a2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc
        Validity
            Not Before: Oct 27 07:01:02 2026 GMT
            Not After : Oct 28 07:01:02 2026 GMT
        Subject: CN=29f1b8d6138310f4aa1870055bb2f75ca71be528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:6a:6c:22:73:2b:49:5a:b7:8a:fd:96:39:
                    8e:c6:92:2b:7a:c4:68:c1:f1:bf:60:15:00:c6:0f:
                    b0:c4:61:a1:0a:1e:a2:79:f2:ad:47:9f:f1:d8:c0:
                    11:f0:da:40:bd:7d:19:1b:88:4f:20:23:b7:28:96:
                    38:fa:be:39:99:12:ad:8b:f0:e5:eb:c0:bc:49:06:
                    5f:93:3e:4d:37:91:6e:18:c1:60:37:3c:21:dd:02:
                    a9:ef:a7:62:ce:68:b2:bd:cc:4a:55:a8:2f:91:79:
                    bb:3d:a5:89:4a:5a:dc:f7:40:3b:7f:73:13:31:d3:
                    7e:9f:5b:22:ee:41:b8:20:48:3d:51:47:f0:93:b2:
                    ff:15:bb:78:63:a2:70:a9:ba:e4:3b:59:b0:15:b1:
                    53:63:4b:ad:1d:f1:11:b5:05:67:65:f2:2a:c8:41:
                    2b:08:e3:e6:89:41:3e:f1:e8:13:43:be:06:1b:67:
                    26:2f:c2:a6:06:34:37:88:95:81:9c:86:ec:0e:3d:
                    75:0e:c1:5f:c5:d8:47:13:a4:92:bf:98:3e:eb:51:
                    1f:6c:de:02:83:81:52:b6:b1:19:78:ae:7c:bd:3e:
                    3e:ad:91:2b:e9:f1:7f:87:18:22:9f:dd:69:03:55:
                    d6:2e:f3:49:0e:cb:86:ca:11:87:3a:32:22:69:80:
                    8d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F1:B8:D6:13:83:10:F4:AA:18:70:05:5B:B2:F7:5C:A7:1B:E5:28
            X509v3 Authority Key Identifier:
                keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9f:ae:0b:c2:29:23:5a:8f:c7:cd:02:7a:e3:12:70:63:f3:
         24:8c:d1:39:15:da:bc:b6:f0:d1:d1:26:2b:bb:ea:3d:ee:66:
         c6:a9:b2:33:51:92:a2:14:ba:ea:1a:66:d3:0c:63:f6:c5:f7:
         de:7e:78:3e:b2:11:c0:83:27:f1:4b:35:7f:80:74:ce:ea:ac:
         44:31:da:fe:4a:e3:bf:36:06:69:f4:3d:51:f1:71:34:69:9e:
         94:ce:12:bc:92:f7:a0:68:fb:d5:1a:0a:f3:6d:ec:fe:29:5f:
         82:a7:4a:17:8b:a9:f4:e5:e3:51:a4:86:c3:ba:12:b2:e1:fe:
         14:7a:a8:54:88:7e:af:09:20:b7:85:32:d7:0f:db:b6:3c:18:
         21:bd:6a:75:8c:7a:9a:3f:a0:01:6a:7a:18:14:2f:71:f6:af:
         37:05:4a:66:81:ee:17:e6:be:a6:10:af:79:a1:7d:0c:c6:cf:
         be:ae:35:5b:c7:c9:80:96:08:a0:5a:48:83:f6:46:e0:49:f4:
         54:95:32:63:bc:3b:da:77:ca:d2:a8:d7:c7:6c:03:7d:fb:32:
         67:a0:b6:e6:f0:72:cc:88:ec:3c:94:af:21:85:1e:87:49:f6:
         c7:c5:59:c3:97:9b:87:a2:e6:e6:f9:6e:de:a0:f0:3f:8f:3f:
         15:99:91:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:23:11 2026 by rpki-client