Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
File:                     96i3CqEAabVRWpyzwUm4hbehKDQ.mft (raw, json)
Hash identifier:          DED9Zvd0g+Ffjyfet/O8RVKKSHLj1mnv8eDbmqfYbbI=
Subject key identifier:   AA:BA:52:25:BF:E1:80:C8:CD:0F:58:D4:91:12:96:B1:FD:EA:8C:75
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Certificate issuer:       /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial:       01A119AB2FA451E3E58E0995D21972C1216E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
Manifest number:          1692
Signing time:             Thu 08 Oct 2026 04:00:11 +0000
Manifest this update:     Thu 08 Oct 2026 04:00:11 +0000
Manifest next update:     Fri 09 Oct 2026 04:00:11 +0000
Files and hashes:         1: 96i3CqEAabVRWpyzwUm4hbehKDQ.crl (hash: QHWKdGZuaQDEgZca7Pza7oQNZl9Sa16DGoGB1x9su+k=)
                          2: f9y5C0Tnuxyj1cjyhKMncCOvWzs.roa (hash: x3B4LgDUPnspHBHjnqM8sp9Buwpr9ojlnB4dg3iOYh8=)
                          3: lJb5lAFohzfMydj804z3JPUVnyc.roa (hash: PyjYKIx7mQvs4uA+2fO0dKGHiZ5xO9frfNP8obB2rXI=)
                          4: szxqBPi8_UDn-uhuhXjcm5JHs4g.roa (hash: jJ5MzBH3uxRXTpd8fptqNDXoiNaS6rdm88cL+1mMd2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:ab:2f:a4:51:e3:e5:8e:09:95:d2:19:72:c1:21:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
        Validity
            Not Before: Oct  8 04:00:11 2026 GMT
            Not After : Oct  9 04:00:11 2026 GMT
        Subject: CN=aaba5225bfe180c8cd0f58d4911296b1fdea8c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a8:d1:b8:56:f3:fa:ac:1b:db:06:27:93:ab:
                    b8:86:e6:df:88:7d:b9:81:50:a7:5b:58:d3:c0:ff:
                    6a:64:de:12:a7:73:2d:56:c9:e9:78:aa:61:19:a0:
                    16:3f:0b:06:2e:fd:d3:54:75:39:54:d7:f8:e0:55:
                    3b:13:06:30:1c:7f:02:f2:fb:2c:23:1d:92:4f:12:
                    00:92:97:b5:5a:65:c0:36:a9:26:ae:04:22:7a:9e:
                    1d:b7:31:ab:22:72:86:a7:f6:32:af:79:af:a3:53:
                    ab:85:80:1a:8e:c5:a7:6c:13:53:20:7d:4d:df:bc:
                    79:6f:81:b6:ef:59:fc:41:ca:1d:3b:32:55:fb:95:
                    c6:5a:30:dd:be:f8:d8:2b:91:98:3a:ab:33:b8:ee:
                    01:e8:90:cf:60:44:74:f4:2a:ab:53:56:e8:01:fd:
                    22:58:aa:5e:db:ce:6b:57:fc:6e:b0:2e:a4:a5:a3:
                    df:46:b3:3e:a4:3c:cc:71:9f:3e:ff:25:66:06:be:
                    c0:fb:ed:48:a5:2b:83:78:72:04:59:68:f6:b5:4a:
                    6c:34:5b:83:de:53:ff:45:f2:7d:3b:bd:f1:d7:7a:
                    98:1a:00:9f:f4:f7:13:57:3d:ee:2e:a9:9c:07:f5:
                    6b:58:36:51:8c:c6:05:df:c3:9f:96:2a:62:84:49:
                    6c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BA:52:25:BF:E1:80:C8:CD:0F:58:D4:91:12:96:B1:FD:EA:8C:75
            X509v3 Authority Key Identifier:
                keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:11:fc:69:0f:02:7e:c4:9d:70:98:88:c8:1e:af:ab:82:98:
         3d:a9:22:e6:94:92:a8:69:56:75:92:15:79:ca:0c:77:09:77:
         6b:cb:3d:6a:fa:e7:fd:6a:e4:5e:9d:11:01:d5:1c:96:d5:90:
         d2:2b:56:a2:f6:d7:c7:3d:e9:3c:37:7b:b4:d0:77:7e:a3:66:
         0a:ac:1c:da:ad:7a:52:f9:60:01:cc:f8:f6:d4:0f:11:76:e3:
         58:11:5f:40:34:70:42:bf:a2:4d:12:8f:f0:f2:66:54:98:41:
         8b:4e:87:d5:43:18:c2:d7:b5:0a:ff:14:c9:50:41:7d:3a:77:
         16:65:8c:e3:1f:16:39:eb:ed:37:cd:c1:f6:21:d2:ca:96:14:
         9c:ec:53:49:ff:31:42:c0:e6:63:c9:30:2c:94:e8:ef:2f:69:
         b9:16:c8:9e:ce:b0:53:d1:3a:4e:4d:09:9c:fb:85:0e:a0:c3:
         64:2f:a1:d7:18:78:1a:4e:52:88:67:a9:b4:1f:92:9f:f4:a4:
         cc:30:30:f1:94:ee:eb:ff:cd:b5:fc:e1:66:8b:8d:19:d8:a1:
         04:7a:93:60:2b:a4:1d:87:6a:e8:8a:77:56:d4:86:41:82:51:
         e6:ad:3e:7b:52:96:13:bf:e5:15:5d:12:69:e3:fe:9e:22:f8:
         0e:f9:ce:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:53:06 2026 by rpki-client