Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
File:                     aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json)
Hash identifier:          Afl1OylEWqn1JwuftPtMiNse6xkoEGqZlZCzbd2mMUg=
Subject key identifier:   BE:87:EE:04:99:E2:13:3E:B5:56:2E:B5:28:34:15:14:C0:3D:DA:A2
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Certificate issuer:       /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial:       01A188D1E0F2F39BBA7E691F42760BF332CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
Manifest number:          180F
Signing time:             Thu 29 Oct 2026 18:00:18 +0000
Manifest this update:     Thu 29 Oct 2026 18:00:18 +0000
Manifest next update:     Fri 30 Oct 2026 18:00:18 +0000
Files and hashes:         1: J8ydQUQXwbdeLKGsKIlOYLkn-2g.roa (hash: x5tw3RQ3h8IFbqDxJqbX4jZdtBMVMlLrubg1cBqUbGY=)
                          2: ZnincJbZ5PaTXoMonj_Ctiiqrus.roa (hash: isWE5Tfc29wZU5CXfTVoPdXm00k/FOrPBirq1sQW5u0=)
                          3: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: AwWL+l6gUYaOSJdakR8ZLs9WdXCgCmfhN1O13wJ2+Gg=)
                          4: djk33VTAFS7Xg0krsRI1T_nFwPA.roa (hash: 8hgR6br/pEJbt5XXEd2D/vHBDf8jYfgzmueO6ffVo28=)
                          5: knCed-keSzVEOPICx1gRMxep3OM.roa (hash: PwNnPjtHsrQvIYgK4ATN14eaGro5/ZgkqW0B/Ot+2cU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 18:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:88:d1:e0:f2:f3:9b:ba:7e:69:1f:42:76:0b:f3:32:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
        Validity
            Not Before: Oct 29 18:00:18 2026 GMT
            Not After : Oct 30 18:00:18 2026 GMT
        Subject: CN=be87ee0499e2133eb5562eb528341514c03ddaa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:72:9a:1b:45:ec:35:06:3f:ea:c9:1b:99:d6:
                    0e:86:fa:33:5a:a0:2b:51:6f:cd:7d:1c:d7:00:92:
                    41:49:3a:c6:6b:67:a9:80:bb:e0:c6:7d:9b:01:e6:
                    dd:92:07:56:6f:81:9d:8e:c6:12:56:40:67:f8:13:
                    cf:2a:e0:28:a2:16:eb:71:64:a0:5c:33:c5:17:c2:
                    27:d5:85:4e:f4:cb:7d:c6:94:6f:52:41:38:98:3e:
                    69:61:0e:26:4a:ff:4a:ca:4a:a8:3e:7e:62:1e:94:
                    52:c9:ff:3a:31:03:19:7f:01:d3:c5:b1:52:ff:ce:
                    e8:ca:d5:95:90:30:a0:38:c9:27:30:1d:3a:53:91:
                    63:b1:bd:5f:b1:c7:d7:33:aa:ca:33:be:6d:cb:20:
                    8a:a9:ed:d4:d9:09:b8:13:94:e3:e0:34:03:70:23:
                    ab:e4:6c:8f:0a:2f:c4:cd:45:37:c2:4b:e0:56:d7:
                    e8:5d:62:ee:4c:f6:f5:7b:73:5f:c9:70:e2:92:7e:
                    21:d4:c7:d1:2c:26:94:88:b7:b9:c3:fb:ba:5c:28:
                    77:d8:c4:a6:6d:59:93:a8:d3:4a:3d:02:7e:4f:28:
                    18:95:e6:dc:88:a1:e7:ac:0a:cf:3f:69:38:4d:79:
                    f3:df:86:ff:39:0f:72:1b:66:41:f2:ae:9f:70:84:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:87:EE:04:99:E2:13:3E:B5:56:2E:B5:28:34:15:14:C0:3D:DA:A2
            X509v3 Authority Key Identifier:
                keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:dd:f2:98:63:8c:c3:19:b9:39:3c:31:99:e2:fc:cf:c3:fb:
         db:28:84:13:98:53:f6:0a:8f:76:d6:5c:2e:29:dd:fc:cb:48:
         a4:b9:2c:db:61:b1:f7:00:53:ab:fc:db:be:04:81:57:9a:87:
         a8:f7:c7:cf:bb:5b:bb:48:de:76:1f:3a:51:16:4e:29:2d:dc:
         87:cb:8e:8a:70:24:f9:9a:94:6e:c4:75:10:af:55:06:61:f0:
         0a:93:e4:fa:f9:a8:53:c2:aa:c8:32:c7:05:70:f1:80:7d:20:
         c1:87:82:4d:7b:d9:8e:1a:d2:46:fe:41:83:48:6c:a8:01:b1:
         ef:9d:19:61:f9:5b:90:c7:b7:23:25:82:56:d6:a7:09:2c:f3:
         e4:83:0c:3f:81:c3:3a:94:15:f9:0f:12:b5:6f:8f:1b:94:9d:
         7a:03:39:68:d8:fa:71:50:1a:2c:05:6b:0c:ec:b8:66:6c:c1:
         f5:99:c6:ea:e9:a1:71:45:e5:7e:45:9d:c9:21:67:c7:e0:2a:
         3b:b7:53:b2:da:ce:be:4a:1e:42:00:07:0d:15:69:39:f2:e2:
         cf:28:20:40:14:1d:d4:f8:7c:31:3d:8c:43:71:cd:64:76:75:
         4c:77:68:0c:df:86:1e:88:8a:6d:e5:50:f2:b1:d3:47:73:98:
         8b:24:e9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:50:33 2026 by rpki-client