Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
File:                     dADVATwShSJCNDCTy_UUjU6uqvk.mft (raw, json)
Hash identifier:          mANAsFOzmYfmjc2vkifZh72sU+mRop4RB5dkdfMnAjk=
Subject key identifier:   17:10:B0:BD:A5:AF:99:03:05:E7:C1:F8:C8:F9:99:93:B8:82:8C:67
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Certificate issuer:       /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial:       01A162698F85C5D41184459E026FF43CE7C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
Manifest number:          1AC1
Signing time:             Thu 22 Oct 2026 07:00:47 +0000
Manifest this update:     Thu 22 Oct 2026 07:00:47 +0000
Manifest next update:     Fri 23 Oct 2026 07:00:47 +0000
Files and hashes:         1: BJ7HazHaGccfvxTQc_w6SKWhZEA.roa (hash: Pl+4ZXeFDCtsyZiimkR12UecWLcE8XYpnlEtA132eQ4=)
                          2: OkIPJfQ3ucjtNqmllyrXBPtOzcY.roa (hash: +8DQv1DEa2PzagZPd8ytxiVCfNd5z5SM1U3gJ24YFyI=)
                          3: ZadCjVxR3AIOm7k0nj6w8KvV6h0.roa (hash: RXuAVNn7DereOcaWIChil7CPM5HE7+AP2XZkUq1hg+s=)
                          4: dADVATwShSJCNDCTy_UUjU6uqvk.crl (hash: Bo0KV3QCL89TIqAtUcRpmLhUTyjp8rXcZIH9Xc1wTRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:62:69:8f:85:c5:d4:11:84:45:9e:02:6f:f4:3c:e7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
        Validity
            Not Before: Oct 22 07:00:47 2026 GMT
            Not After : Oct 23 07:00:47 2026 GMT
        Subject: CN=1710b0bda5af990305e7c1f8c8f99993b8828c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:ae:70:91:64:da:ca:92:8b:c1:04:6f:41:
                    b3:6b:6f:69:ca:12:9d:2a:0a:e3:26:93:70:8d:73:
                    8b:2b:4f:b1:cc:89:98:52:80:36:46:6b:66:be:0d:
                    7b:f9:fa:85:9b:98:ed:9f:ee:02:7e:fd:29:ef:84:
                    d0:c2:5c:4a:18:6d:ff:26:eb:14:d5:02:e8:89:5d:
                    eb:10:03:e7:09:b1:a7:65:de:38:e1:28:a9:ae:21:
                    8d:9d:a3:9d:88:52:5d:7d:0d:cb:97:b4:d0:95:ac:
                    da:ab:92:4e:46:9a:bf:11:9c:30:9e:0c:10:76:9e:
                    2e:81:72:b0:5b:af:62:95:b2:9e:9b:d9:d8:be:0d:
                    28:27:d8:f8:62:ec:e5:05:2e:c5:7f:1f:05:88:c1:
                    49:61:03:44:9a:be:c4:48:a8:6c:c0:63:b4:b2:b6:
                    10:b9:6e:5b:24:8e:e1:4a:88:e4:7b:d9:d5:63:0b:
                    8a:45:27:92:cd:49:81:28:55:ab:b3:17:3e:d7:a5:
                    d0:5f:04:b0:f7:3d:bf:fa:16:28:ec:cc:34:cf:93:
                    69:86:92:89:b7:9f:0e:a6:66:2d:51:0a:e1:3e:36:
                    3f:59:e9:83:e9:aa:b2:63:99:9e:d5:73:e9:eb:fd:
                    aa:1a:e9:4d:01:0a:00:25:8e:64:8a:55:71:34:4c:
                    49:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:10:B0:BD:A5:AF:99:03:05:E7:C1:F8:C8:F9:99:93:B8:82:8C:67
            X509v3 Authority Key Identifier:
                keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:24:e3:8e:3e:48:77:90:24:ab:c5:59:e9:09:76:28:d2:22:
         bb:0e:3a:ea:80:9a:70:84:99:eb:58:2b:62:3d:35:08:49:4a:
         8f:3a:2e:51:a2:46:23:3f:d3:48:c5:1d:06:90:a0:0f:b3:ef:
         89:11:eb:40:70:0f:ac:d8:9a:78:eb:f5:7f:db:90:d9:e4:fd:
         d2:e6:e6:14:7d:b8:32:9b:69:19:3a:48:fc:52:1a:b2:38:26:
         3d:84:94:33:dd:6e:60:78:2f:d7:2c:0b:84:39:88:a5:87:53:
         ba:92:bb:eb:0f:93:04:f2:fd:f3:bd:dc:c7:4a:df:26:58:a9:
         19:d2:ca:62:c5:be:4f:4d:1c:da:c0:15:33:29:95:4d:d9:72:
         e0:f4:6c:53:5a:a6:f1:b9:37:a5:b0:2c:0c:49:30:92:8e:b0:
         0f:a4:0a:c3:14:2a:d1:ff:57:68:09:b6:94:6e:d5:5b:23:07:
         4f:fa:c8:df:86:e1:e4:0d:eb:1a:96:ac:43:72:4b:b8:e0:1e:
         99:2f:90:28:bb:8a:8a:0f:90:bf:3a:30:b2:00:37:25:7b:73:
         1c:60:76:7d:a9:56:f9:49:16:9d:45:b4:3f:32:9c:dc:ab:cc:
         db:87:3b:99:e6:60:2a:78:bb:f1:98:d2:0c:a8:8f:c3:f8:69:
         74:c1:83:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:42:44 2026 by rpki-client