Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
File:                     ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft (raw, json)
Hash identifier:          82B1mr0ozS2jT/Lu93q6X/2cEunBVu1UzpD38TQ0s4o=
Subject key identifier:   D5:4F:80:73:DA:1B:94:99:7C:D1:F7:2D:36:92:52:BA:65:92:CA:E9
Authority key identifier: 8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
Certificate issuer:       /CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
Certificate serial:       01A17815A19BF855C20C596E8CAEAD92655B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
Manifest number:          1AC2
Signing time:             Mon 26 Oct 2026 12:00:45 +0000
Manifest this update:     Mon 26 Oct 2026 12:00:45 +0000
Manifest next update:     Tue 27 Oct 2026 12:00:45 +0000
Files and hashes:         1: 9R3X_Fbswyp0dlU7e0jgLCwlRc4.roa (hash: 48MU1qRcOJqUGd4gBSOu3MVRdMSx3ak0Iy7V4C0HIPg=)
                          2: FMytXTkalgyla6hJFj4eKXqjzf4.roa (hash: uaDRTElD/eQeLBmpMs0iWQkiUkgTUHVvQqy46V1pRPI=)
                          3: VfzZLy_qDdGJi9lSEwmjw7oLt5k.roa (hash: 1oHM+ulR5lgMRMtepZExqDQwuwKJ8Qpfg/fB1/zmAX8=)
                          4: ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl (hash: u4MXIwMK4iN5pbySUpnplbbfCV/LuygU3awawOnvZZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:15:a1:9b:f8:55:c2:0c:59:6e:8c:ae:ad:92:65:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
        Validity
            Not Before: Oct 26 12:00:45 2026 GMT
            Not After : Oct 27 12:00:45 2026 GMT
        Subject: CN=d54f8073da1b94997cd1f72d369252ba6592cae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:00:19:97:40:e4:dd:ff:cf:59:8f:6a:28:
                    d7:ff:c6:1b:13:4d:7e:58:44:15:a5:b8:cb:8d:92:
                    94:12:00:be:16:9d:c6:f7:33:b6:cb:b6:e6:4a:11:
                    26:af:7e:98:a3:31:ea:b9:59:26:c8:10:c1:0f:5f:
                    45:4f:ca:f5:58:b7:63:6b:34:62:c1:b7:78:f3:fc:
                    6e:be:09:03:56:9d:68:dc:af:94:0a:70:ed:c1:32:
                    19:2f:9e:65:eb:fa:91:1e:5a:0d:3c:d0:0e:69:29:
                    b0:65:4c:53:f1:b7:09:10:34:3e:13:73:d8:2f:1e:
                    79:db:3f:6b:5c:90:6e:e3:31:6f:ea:24:d9:00:bd:
                    3b:50:1b:7d:aa:35:21:b0:03:9e:80:62:80:49:d5:
                    29:04:bd:a9:73:c1:6a:03:f8:1f:0f:d3:2c:0a:5e:
                    8f:11:10:9d:87:dd:d4:a3:30:61:fb:1f:ab:2d:f1:
                    13:40:8b:d0:5b:03:cb:ab:b7:ff:6a:a7:b8:fa:60:
                    f7:26:77:43:7e:00:54:ce:fe:b4:bb:12:70:a1:96:
                    3a:87:bb:63:22:6f:59:e4:a3:f8:2a:66:c0:e6:88:
                    9e:84:ce:bb:9f:cf:1d:1b:98:da:71:2f:8b:ff:9c:
                    24:11:70:f0:81:73:01:ac:d1:84:be:04:63:ed:73:
                    4d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4F:80:73:DA:1B:94:99:7C:D1:F7:2D:36:92:52:BA:65:92:CA:E9
            X509v3 Authority Key Identifier:
                keyid:8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:7f:52:6d:46:1a:de:c3:ca:30:a2:48:e8:d1:c1:18:9d:4e:
         07:4d:30:90:22:08:a0:e2:9f:bd:03:fb:33:b3:31:a3:9e:92:
         ae:e0:94:17:e9:41:ac:0e:b6:b3:4c:6f:9c:14:d4:06:c4:17:
         c7:95:17:3f:20:25:4e:8e:ab:50:31:65:92:f7:b8:c9:4e:b9:
         db:e7:a6:91:e6:8a:a5:50:d6:af:db:96:62:6b:21:ce:7a:65:
         12:3b:b4:af:01:cf:a5:27:87:48:5a:99:c5:b5:a6:bb:f5:47:
         7c:e0:4b:6d:10:9e:f9:7b:fb:a3:b5:73:28:95:87:18:72:b8:
         d7:54:3b:c0:47:74:c3:ac:0e:f2:d4:ad:45:a0:54:79:b5:e2:
         92:80:49:40:43:53:5a:db:ce:77:43:33:4c:57:81:f1:f4:a7:
         69:54:33:e8:06:5b:03:12:ba:82:cd:f7:84:e3:98:b1:51:87:
         5b:7f:39:de:55:ca:7b:18:41:4b:56:bb:c4:9e:d2:f0:47:24:
         4f:c8:13:eb:03:d0:25:8f:3b:df:e7:16:32:17:de:a4:f1:55:
         e2:58:19:97:9e:bf:46:80:e1:5c:36:10:c6:23:ff:ec:9a:39:
         8f:1c:87:c2:f7:09:23:75:21:b8:d4:bc:1d:61:bc:e4:37:29:
         b6:d4:fc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:49:20 2026 by rpki-client