Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File:                     eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier:          epINKDEOLZ0tmtBb9L2brJncpSMHtg2KRh6rpSkEMao=
Subject key identifier:   AC:BC:26:16:A5:D6:F0:6C:72:95:FF:56:E8:AA:17:EC:31:3F:1C:60
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer:       /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial:       01A13590F77ECFD8698773FF7147A3B1301D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number:          1AA4
Signing time:             Tue 13 Oct 2026 14:00:55 +0000
Manifest this update:     Tue 13 Oct 2026 14:00:55 +0000
Manifest next update:     Wed 14 Oct 2026 14:00:55 +0000
Files and hashes:         1: 91m9d-4rp7TRVtPcYvV9NGes_jg.roa (hash: I0D8Damt//4B0Kf8Q3SX0Wwm5LPekD0IgYEQxvGqNNI=)
                          2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: /yp+YtGw2v2UaMMGd1/VPvb9kitAd1fD64F7vKCfCgI=)
                          3: zHOXRdXkiM-RbCdgutluwx22gJ8.roa (hash: ddTQ3xyy/qh9SFlJgrOiIvTTzcQtTPf5+YJxupFgPas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:90:f7:7e:cf:d8:69:87:73:ff:71:47:a3:b1:30:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
        Validity
            Not Before: Oct 13 14:00:55 2026 GMT
            Not After : Oct 14 14:00:55 2026 GMT
        Subject: CN=acbc2616a5d6f06c7295ff56e8aa17ec313f1c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0a:04:b1:9e:92:30:06:72:2a:ed:d8:d9:20:
                    98:95:6a:4f:b0:7c:f2:92:0d:db:7f:13:bc:86:a8:
                    84:3f:db:e8:1a:eb:ae:96:51:d7:dc:5a:40:a6:0c:
                    78:78:a8:83:7e:06:5c:d3:71:ee:cf:8b:7c:b8:9b:
                    2c:99:52:9c:a6:27:e6:12:35:58:80:62:83:81:cc:
                    bb:b3:40:2d:f6:92:09:2c:6a:a8:16:11:15:64:e0:
                    ff:a9:e2:41:dc:83:af:3c:0d:c3:c2:9e:91:61:9c:
                    27:cc:08:0d:e9:a4:4c:4b:2b:31:3d:bf:67:3d:61:
                    78:e5:76:e0:48:c1:ec:4c:61:e2:6a:94:9f:c1:fe:
                    f1:18:5f:75:80:e7:28:0b:ba:6c:83:30:96:73:66:
                    32:27:e3:f0:e4:96:7e:5e:c2:9f:5c:68:a1:5f:32:
                    c5:e6:6e:b6:93:16:33:ce:64:bf:e7:be:b0:e5:0f:
                    6c:dd:5f:60:21:2c:28:36:35:b9:a1:2e:b2:d7:a4:
                    39:ab:ab:c0:39:20:2b:3a:18:c9:52:d5:61:0b:ca:
                    52:e0:9a:d9:ca:22:0b:e3:65:9e:ca:ac:b0:e1:29:
                    b3:3f:51:9a:0f:a1:e7:f5:b8:75:f0:2e:b8:80:50:
                    98:6d:56:f1:f5:15:63:f2:70:c0:dc:71:0e:8e:e2:
                    64:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BC:26:16:A5:D6:F0:6C:72:95:FF:56:E8:AA:17:EC:31:3F:1C:60
            X509v3 Authority Key Identifier:
                keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:18:1f:0a:9a:d1:3f:78:b6:d3:8d:a6:1e:3f:c0:54:80:fe:
         56:e4:7c:63:14:aa:9f:ce:ca:f3:9f:e0:df:71:4a:9b:ca:5c:
         28:e3:f1:e8:e0:30:46:70:75:80:b0:bf:02:19:f6:0e:7b:b7:
         c3:32:f6:d2:8d:f1:f0:c9:95:a3:7f:9c:7a:e5:eb:83:8b:11:
         a4:7e:76:ec:69:d5:9a:99:ad:da:9f:e7:57:bd:25:46:d5:05:
         f1:85:7d:cd:15:6f:ff:b6:4c:26:f6:d3:58:b2:25:42:7a:db:
         ff:9c:de:9e:76:25:11:8b:eb:e3:c9:ab:b3:63:35:25:ef:a9:
         19:70:87:1f:bc:e1:e1:76:24:09:40:60:be:77:bc:8e:56:f7:
         3c:64:84:b3:d6:2f:13:4c:96:57:b8:99:03:03:5d:14:93:a9:
         d1:aa:17:3d:0b:27:82:29:b2:49:b4:1e:54:fe:d3:1e:80:b8:
         ab:9b:d7:a3:28:1c:48:6a:42:51:cf:6e:67:37:56:ed:76:8b:
         a5:41:73:a4:55:9f:99:79:e4:9d:9c:bd:12:38:5d:14:66:b5:
         96:eb:fa:02:c3:07:c9:b7:1e:1d:b3:a1:4c:11:c0:79:26:bf:
         db:67:71:09:e5:77:89:8c:23:df:d6:2d:63:ad:88:16:ee:52:
         98:5b:ab:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:57:07 2026 by rpki-client