Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
File:                     pdSlpdFMijuMuU0ctGwNbiocSEc.mft (raw, json)
Hash identifier:          Wyd8RRI2a/e7yA7v2QB+wqc8Q+w5PkvKgYueZOa/zn8=
Subject key identifier:   69:01:4E:42:35:48:0A:F2:11:37:B5:D7:F6:39:F4:E6:5E:A3:EF:72
Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
Certificate issuer:       /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Certificate serial:       01A12955FAC9EBBB4DB7E364B45C96490B7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
Manifest number:          1AA1
Signing time:             Sun 11 Oct 2026 05:01:02 +0000
Manifest this update:     Sun 11 Oct 2026 05:01:02 +0000
Manifest next update:     Mon 12 Oct 2026 05:01:02 +0000
Files and hashes:         1: 9R0cNh7tpRGDeQddrrwgSyExnk4.roa (hash: PqbwlQKDPSasGMUXgw1wOQWlaHSoiKJ6p6YuOnnchI8=)
                          2: Q9Nt9gX8DHi90LT4tMlOZ0m6IJo.roa (hash: UYO/NtK9AfbvXNvm3O/IQCzfg04aFD89bh7YW2P92Vk=)
                          3: pdSlpdFMijuMuU0ctGwNbiocSEc.crl (hash: u2SRwc1iSiD/hDPAj3Ny+rhWYWn5YzgOSnFvF/hLy2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:55:fa:c9:eb:bb:4d:b7:e3:64:b4:5c:96:49:0b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
        Validity
            Not Before: Oct 11 05:01:02 2026 GMT
            Not After : Oct 12 05:01:02 2026 GMT
        Subject: CN=69014e4235480af21137b5d7f639f4e65ea3ef72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1a:b6:cf:39:93:d6:a3:b5:33:49:d5:5c:49:
                    d3:03:02:bd:96:f8:d8:44:55:b1:05:17:07:3d:0b:
                    37:ea:77:32:94:d1:6f:1b:07:3e:9f:f3:2c:78:60:
                    6a:c5:11:84:68:2c:ec:c7:25:9b:d3:00:ae:b1:1f:
                    d1:59:8b:ca:bf:8c:0a:37:e1:58:19:c1:ea:93:dc:
                    39:02:62:db:78:63:b8:da:2f:94:6a:ef:1c:9f:1d:
                    51:a0:e9:04:e3:b6:22:d2:01:d3:59:36:43:74:95:
                    fb:bc:fa:a0:9c:20:54:e8:ac:a6:05:43:05:96:4f:
                    40:57:a0:ab:ed:b6:1a:21:d4:e6:a2:4a:a7:e7:3a:
                    36:05:60:cd:d5:31:07:8c:df:21:05:75:d8:98:d2:
                    b9:f2:ed:3a:06:90:79:4b:ad:b4:5d:39:cc:ee:81:
                    91:44:88:9f:fa:5b:46:29:87:72:27:4d:d6:96:b0:
                    38:ae:20:a1:29:cb:29:50:3d:8b:73:6e:07:c2:27:
                    d4:b7:c3:d8:46:d5:5f:c4:43:56:b1:61:15:12:7f:
                    21:ab:00:6c:2a:1d:5d:70:d6:29:a0:1f:c1:82:36:
                    ed:e7:49:94:9b:e0:c2:bc:16:cc:29:90:6f:49:42:
                    49:fe:ca:8d:62:69:74:c2:5f:69:85:b0:81:26:07:
                    5c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:01:4E:42:35:48:0A:F2:11:37:B5:D7:F6:39:F4:E6:5E:A3:EF:72
            X509v3 Authority Key Identifier:
                keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:61:2b:d0:0b:c3:ec:8b:c9:cc:5d:45:cb:61:f2:f4:7c:57:
         f1:05:38:e5:63:29:8e:52:e9:d3:27:c7:73:e2:6e:f4:1e:db:
         db:88:19:49:e2:e2:7d:a8:4b:2e:0c:7f:d9:a9:9e:5c:bb:6f:
         52:df:c1:9f:4d:a9:b1:94:2a:75:87:07:2b:a9:6e:18:9a:73:
         ee:33:81:a3:fd:59:68:65:a3:75:a1:a6:85:e8:13:86:ad:31:
         9a:cd:a3:af:af:3d:1e:54:6a:52:da:e7:08:36:92:72:89:b9:
         c3:42:d3:26:11:22:ed:e3:7e:d6:3c:1e:70:21:c1:45:0d:eb:
         25:98:3a:8d:6a:b4:db:7e:2a:db:be:f1:a2:94:dd:2c:f6:a6:
         5c:f8:f3:0d:02:e9:d2:15:f6:6e:24:35:ca:5f:18:62:91:b1:
         d5:78:50:4c:75:d9:1a:c7:5e:eb:29:48:fd:5b:fc:af:c1:47:
         cb:fe:b6:e7:8d:36:15:16:b6:79:1c:19:4c:ff:b0:63:bc:7d:
         41:2b:81:a4:79:00:f3:50:f6:6f:f9:af:7d:b7:b9:3f:8d:b9:
         6c:28:d6:ae:66:f4:7e:07:c2:39:b6:d5:6d:6b:03:f8:7c:6d:
         ab:3e:b7:81:c9:42:84:12:9f:db:e1:d4:93:cf:a3:64:58:ad:
         89:cf:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:36:01 2026 by rpki-client