Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
File:                     1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft (raw, json)
Hash identifier:          JXVCWt4r0sl+ICkHl/fFs9lz28sEfwMfj+C6trh3vbo=
Subject key identifier:   9F:73:A9:42:82:56:D4:B2:E8:5F:D4:0B:2F:C5:18:59:31:66:4C:66
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Certificate issuer:       /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial:       01A13F02DF438ED1A07AB2ED2E06F0A90ECC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
Manifest number:          1AAD
Signing time:             Thu 15 Oct 2026 10:01:55 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:55 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:55 +0000
Files and hashes:         1: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl (hash: b0s8s7Ivq4UQhqMbHBOhAAGQsNF4bJb8bgbCEjDItPI=)
                          2: 26QbXt6b5zHilNs1q7yDX1cYMsk.roa (hash: Tt6aUkRO9JUaW0NjcmeQVqAa3xnUCz7lJRJu/2xB7IE=)
                          3: Ezcrtmwo4iwn5JbCMNVESXorExE.asa (hash: QvhpQm5ictpOGI0Idhy4A39NC9Kpsm0fYAvwcjaUI04=)
                          4: ML7UkJFE6LlihRpTm5h-PoqRSVs.roa (hash: g+qfBPw45UpoVjFRiQZEbaH4MwvqddJi1qo+sHrhaFE=)
                          5: eU7ipBheHWkpemRqitvR9YpXrt4.asa (hash: jtdQZM+91cfrM18Rhgx+NL45kKIXn9gnr1VUiwGfKOM=)
                          6: lGdnHQ9JzbcCAf7aCdi2AtQWylc.roa (hash: /SsAkMvFx9VtM23+Xr14ddTXFb4dIacWZgb2bJ1bpX4=)
                          7: sk3Ng7M09_merP38zbn6ZinhfyY.asa (hash: Hg4VBYh1/4iAG5ztUnRTsrSfK7i/9u4qOnxuxq++vNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:df:43:8e:d1:a0:7a:b2:ed:2e:06:f0:a9:0e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
        Validity
            Not Before: Oct 15 10:01:55 2026 GMT
            Not After : Oct 16 10:01:55 2026 GMT
        Subject: CN=9f73a9428256d4b2e85fd40b2fc5185931664c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:26:b2:a5:73:92:39:53:63:a0:e0:47:b0:b9:
                    aa:6a:40:63:fc:22:01:63:26:1d:17:e9:de:17:ab:
                    76:3b:dc:d7:20:6b:fc:29:e4:16:f2:11:ff:ed:79:
                    c6:90:c9:27:03:7e:2a:dc:df:91:43:77:ae:fe:6c:
                    62:0d:03:08:9b:67:d3:7c:8a:7a:23:ec:39:13:00:
                    8c:c4:f7:61:cf:9c:24:f4:27:69:4c:40:1d:55:0f:
                    cb:7b:b4:97:6c:e7:38:91:1d:f5:5f:85:35:2f:34:
                    8b:cc:e5:66:97:d0:52:c2:4f:7e:a4:e1:53:8e:00:
                    02:03:c9:56:6b:ed:45:d0:3f:32:40:a9:2d:20:da:
                    f4:e4:6c:ba:cb:bf:1e:16:73:34:66:3e:84:dc:3a:
                    d0:d5:bd:0f:cd:43:dd:76:da:15:10:8e:63:4d:5e:
                    16:fb:b5:49:78:bd:82:23:7c:c2:4c:0c:22:dd:e1:
                    24:7f:bb:e6:57:43:cd:2c:f2:c9:3f:74:31:92:66:
                    ed:8d:7e:ad:55:4f:ce:9c:8b:d9:be:5e:f0:5a:76:
                    8e:45:df:98:39:74:0d:83:d8:de:c3:90:0e:12:16:
                    a5:a3:aa:66:b0:1e:ab:f6:25:11:d7:1d:6c:2c:a7:
                    be:16:14:81:7e:f8:d5:f6:06:86:84:93:25:4f:f7:
                    b0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:73:A9:42:82:56:D4:B2:E8:5F:D4:0B:2F:C5:18:59:31:66:4C:66
            X509v3 Authority Key Identifier:
                keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:78:7f:0a:43:c7:2b:e9:cd:90:c4:b0:bc:5b:cc:f3:94:a9:
         b6:cb:f5:75:8e:b4:5d:12:69:65:ff:47:be:b7:26:c3:da:91:
         46:a1:e4:bf:23:0c:9d:2a:f9:f9:dd:e5:37:8a:f9:dd:de:0f:
         4e:4c:10:b2:1d:03:10:13:14:1d:15:63:48:e4:3d:18:01:bd:
         f1:a5:7e:e2:12:18:0f:54:7e:df:03:e5:d0:af:7e:29:23:e9:
         64:ac:72:4d:d2:7d:d9:47:10:bf:4e:53:bc:d3:35:10:fa:8a:
         db:9c:85:f3:b0:69:71:c2:1c:05:cd:ff:62:02:b9:e5:38:59:
         f9:33:32:80:0c:bb:5a:83:12:bc:c2:e0:3d:c3:36:2f:74:db:
         e6:17:21:18:78:5c:02:02:4e:82:44:4e:5a:f4:96:47:6f:17:
         3c:5f:bc:8f:be:24:03:32:f2:7a:a7:b7:38:66:e0:cc:fd:ac:
         2e:29:67:ad:10:4c:67:81:ee:c1:18:74:69:18:68:c6:77:8d:
         48:cb:1e:3f:3d:54:b7:74:fc:ed:35:e4:bb:cd:f2:17:f3:44:
         33:c2:77:25:7b:73:53:b8:80:53:99:3d:03:6c:5f:82:fe:03:
         3c:43:4a:cd:05:d9:ed:94:64:7e:12:8b:dc:8f:e4:4f:4f:1c:
         28:6e:82:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:36:02 2026 by rpki-client