Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
File:                     1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft (raw, json)
Hash identifier:          8blj8jGANW0HWUkRHL3msRnpdBOe0gE1twFmqwAjzcI=
Subject key identifier:   E8:43:B3:77:01:A7:7C:1F:3F:D6:95:47:9B:DF:D0:E7:FA:C3:CE:E5
Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
Certificate issuer:       /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Certificate serial:       01A13D80DC3F092ADF5F78E43BE57EA44B00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
Manifest number:          1AA3
Signing time:             Thu 15 Oct 2026 03:00:17 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:17 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:17 +0000
Files and hashes:         1: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl (hash: 6tfJBZiKWWmBDJpsQMjqx3vEHJRT5gdF/oTWdb92RzE=)
                          2: WKc4Vos6EgMcwq2jPs8Vo_T2gKg.roa (hash: cCxzpDSEtEshoJyIVMHZls1v4t+x9ri7tVY5Xlsvk/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:80:dc:3f:09:2a:df:5f:78:e4:3b:e5:7e:a4:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
        Validity
            Not Before: Oct 15 03:00:17 2026 GMT
            Not After : Oct 16 03:00:17 2026 GMT
        Subject: CN=e843b37701a77c1f3fd695479bdfd0e7fac3cee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f6:a6:42:7b:ca:89:8d:4b:4e:29:01:c9:45:
                    4f:bf:5c:16:cf:16:6e:49:79:cb:90:b7:94:c5:d8:
                    10:61:b7:d3:ea:ae:ee:6f:54:36:3a:3a:06:1e:bf:
                    f9:ee:75:20:a5:75:ee:bc:d1:5b:c4:04:bf:d6:bc:
                    09:a6:8a:68:9d:a8:ca:4a:16:59:3e:8a:bf:e1:f2:
                    52:ce:dd:8a:38:69:99:97:e5:94:31:ff:8f:81:fa:
                    b9:34:de:f5:89:4b:a7:f3:1a:e2:a1:85:34:04:ec:
                    9c:97:2a:22:3d:f1:98:06:40:c1:9a:9c:f3:b9:9c:
                    f9:91:f4:aa:9a:e9:73:c0:e7:1e:62:20:d6:83:0d:
                    03:91:6b:b2:01:82:60:53:59:46:1c:d9:ba:db:0e:
                    9d:d1:2f:cb:e9:75:ae:19:15:a6:40:c6:cf:90:65:
                    60:68:98:f4:05:2f:a5:97:58:07:a6:1a:79:52:d8:
                    f7:fb:b4:d3:34:a1:21:22:8c:18:ad:3a:be:c6:4c:
                    5e:c7:7d:ab:a6:36:76:bf:0b:f2:67:e3:bb:c6:31:
                    3a:60:50:33:17:87:0c:79:98:40:26:a9:71:55:c8:
                    08:df:46:77:37:f6:43:38:1a:53:fc:52:e4:6e:40:
                    30:8e:c0:65:37:74:2a:76:d8:4b:46:87:e1:21:d8:
                    ba:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:43:B3:77:01:A7:7C:1F:3F:D6:95:47:9B:DF:D0:E7:FA:C3:CE:E5
            X509v3 Authority Key Identifier:
                keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:b2:bf:4f:d3:d4:8c:e9:16:0e:e0:0a:6a:36:3b:dc:b1:52:
         d9:b8:69:e9:a1:61:a8:34:d1:b0:a9:db:f0:16:21:36:35:61:
         6d:0a:07:ec:7c:ad:ec:22:4e:b5:1b:1f:39:2e:dd:3a:b4:82:
         bc:7b:63:b2:6d:b4:94:16:3e:a1:52:ee:2f:b6:d0:72:26:31:
         87:f7:d2:54:50:9e:2b:91:5d:a3:00:be:62:6e:f2:8c:a6:90:
         bc:d0:c2:50:ce:86:1a:96:ca:3f:43:62:2b:ae:79:46:4d:60:
         42:eb:c7:fe:bf:fc:c2:3b:68:13:d9:6e:31:61:4a:e1:45:83:
         8d:65:96:8d:67:93:ba:9e:28:bb:0f:9c:96:71:6f:dc:00:dd:
         de:3f:1b:28:3a:b9:73:f8:3a:a9:e0:8f:ae:41:a3:06:5a:90:
         32:70:5f:2e:bb:1c:ec:2b:ea:85:7c:a8:8d:50:2e:73:70:28:
         ab:dd:4e:18:4d:f8:fa:74:9f:03:bb:10:29:4b:e8:04:3e:2a:
         c9:41:04:ee:fc:b8:fb:28:cf:71:a6:f1:c2:79:79:a7:30:59:
         9b:55:76:be:b2:8c:21:ac:e6:eb:80:d5:d8:08:5b:eb:2c:78:
         24:85:71:28:09:79:f3:9e:c9:d9:05:17:25:2e:09:d6:74:f1:
         66:82:fa:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:16:24 2026 by rpki-client