Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File:                     H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier:          1HYO+zkOCh+2Vk+2oYfAsD6bbA5K67dfWJv7zhfCrrI=
Subject key identifier:   60:05:A4:4A:B1:0C:CA:69:1F:C9:23:34:56:BE:B0:34:73:EC:1C:2A
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer:       /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial:       01A187516CEB20018657F740CC64C98754DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number:          1AD6
Signing time:             Thu 29 Oct 2026 11:00:22 +0000
Manifest this update:     Thu 29 Oct 2026 11:00:22 +0000
Manifest next update:     Fri 30 Oct 2026 11:00:22 +0000
Files and hashes:         1: 8gHT_lp19vgQo-djG0BRf5eWAE4.roa (hash: Vche9wHHqKAp5aWnmI6EY8xEE+HzW3Pog606cPmiZs0=)
                          2: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: AtRZx+nKF5TSG1auY2nokAHOKhEkVJhwR7qKrwUX8Ic=)
                          3: VhmojP-CFFZBA8BPvBh0GkaGc1o.roa (hash: b69Rk2zjrqAJ3RnqwjsPuQNOD6Vq27924r0nv/Rqjjk=)
                          4: vsf8LQXVSI_154WNFyRlxFSnkh0.asa (hash: NPO9cK2OOJcLqlWS9kD9KyKkEvllCdUMDHEWnkAZkdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:87:51:6c:eb:20:01:86:57:f7:40:cc:64:c9:87:54:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
        Validity
            Not Before: Oct 29 11:00:22 2026 GMT
            Not After : Oct 30 11:00:22 2026 GMT
        Subject: CN=6005a44ab10cca691fc9233456beb03473ec1c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:6f:e9:66:71:aa:27:5c:79:26:dd:2b:31:
                    3a:b3:8a:34:a8:22:38:91:c1:a3:ae:ce:dd:2b:7b:
                    b8:06:0f:6a:81:4d:4b:f1:e1:fb:ec:d5:84:2a:c5:
                    2d:ce:cb:e4:33:02:d5:81:47:5e:84:e1:e4:71:f8:
                    0a:53:34:6a:29:da:35:05:25:b3:11:49:f7:e8:40:
                    06:eb:cc:d0:1b:4e:81:4a:b1:dc:fd:a7:77:76:0b:
                    a0:2c:f3:91:a7:0b:d6:fb:48:4b:41:99:7e:2d:d9:
                    c6:e6:90:99:4d:6a:bd:c8:6c:20:06:da:03:e2:bd:
                    ed:17:2c:70:8a:73:ef:ed:f9:06:c4:67:b4:17:e8:
                    ef:c2:31:a0:bb:3a:02:02:de:fb:53:13:bd:bb:41:
                    b3:1d:90:04:00:6c:9b:6e:b8:a2:f0:cb:56:6c:54:
                    ca:3e:98:f1:7c:46:bb:b3:53:1a:e4:cc:5e:94:ce:
                    57:f0:19:6f:20:cd:4c:08:04:69:e2:4d:6e:49:58:
                    47:f7:db:85:a7:65:23:ac:70:14:d2:8a:40:4d:48:
                    f2:4c:b6:aa:7e:97:86:a5:3a:49:e2:41:89:60:14:
                    60:62:e3:62:e8:b5:bb:e6:25:73:ef:e8:3b:9c:17:
                    21:b9:c1:61:43:8c:3b:9e:e7:96:63:ee:37:df:7a:
                    44:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:05:A4:4A:B1:0C:CA:69:1F:C9:23:34:56:BE:B0:34:73:EC:1C:2A
            X509v3 Authority Key Identifier:
                keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ec:16:98:b8:6e:05:98:10:e5:29:34:b9:d4:59:b5:84:fc:
         35:8a:e1:23:c0:de:46:b2:50:88:bd:d5:85:21:57:61:36:57:
         17:69:dd:1f:9b:6f:59:24:76:ef:e5:db:7c:34:f1:84:18:37:
         61:fa:72:f0:d5:23:0f:55:1c:ec:e3:52:c1:d9:e3:2c:cc:f5:
         dd:66:2c:b8:fc:8f:e4:e5:28:e9:c9:d6:3a:b1:be:20:28:21:
         73:95:a9:92:2b:52:26:bb:27:ee:c5:c8:e0:6a:46:ea:28:36:
         97:e0:4b:e2:1c:82:cb:80:0c:c2:4a:08:48:a1:bc:e5:4f:0e:
         a4:a8:8d:2b:ee:c1:90:40:4b:05:8f:3a:54:70:73:8c:9c:01:
         a6:d5:6b:9a:e3:e8:55:bd:06:07:54:2b:3b:dc:1f:be:22:5b:
         76:59:ac:e5:a9:f6:a9:21:44:8b:c3:9e:78:19:45:b6:a7:b1:
         6f:ee:78:82:5e:fb:38:8d:5c:9c:2e:5e:0b:2c:b6:05:53:ed:
         d4:78:27:44:f1:1f:54:0a:61:f6:da:14:fe:5e:f0:ab:4c:57:
         6d:e4:d4:5d:e8:cf:42:6e:4d:b7:9f:6a:28:71:3f:dd:78:5e:
         38:21:9b:3a:31:e8:7c:3f:f5:fb:60:98:b0:94:78:c9:dc:64:
         79:61:6a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:47:23 2026 by rpki-client