Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
File:                     27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json)
Hash identifier:          scXZKo6LhvA9lV8MblnoKDZpS9cSsIs7Wn2l3UtpLeA=
Subject key identifier:   F5:D2:70:B3:5F:20:A7:18:56:A5:67:FF:4B:E7:35:11:68:50:BF:5D
Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
Certificate issuer:       /CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Certificate serial:       01A13D4A8E26CB8EFCD4FE98770FC75FF497
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
Manifest number:          1529
Signing time:             Thu 15 Oct 2026 02:00:58 +0000
Manifest this update:     Thu 15 Oct 2026 02:00:58 +0000
Manifest next update:     Fri 16 Oct 2026 02:00:58 +0000
Files and hashes:         1: 1-js5TVA1UkNXfyekBabOXD4itsk.roa (hash: YJD1GIjXCe4Si+mr4oD2BuzeRVKbRLslRw6eTMykWZk=)
                          2: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: hIQ0sY8q2NeOLcleAuYt7h0mQmt3imWQO1/Dh5FcSLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:4a:8e:26:cb:8e:fc:d4:fe:98:77:0f:c7:5f:f4:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd
        Validity
            Not Before: Oct 15 02:00:58 2026 GMT
            Not After : Oct 16 02:00:58 2026 GMT
        Subject: CN=f5d270b35f20a71856a567ff4be735116850bf5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d4:57:c5:c1:c5:96:8e:3f:34:66:10:ee:9c:
                    60:73:f9:69:2e:a5:a4:8c:dd:7e:9f:b0:4f:9a:cb:
                    79:ef:2d:d4:6b:c6:a0:d1:a5:30:ad:d8:b7:f1:c1:
                    5a:3b:4f:b8:11:a1:32:5e:8f:4c:fc:b7:14:b4:99:
                    5b:d3:4a:9f:57:68:56:ff:5e:75:3c:ad:62:2c:3c:
                    1f:d4:bc:4c:40:e2:61:fb:83:2c:3f:57:f3:e9:bf:
                    d4:ce:b6:37:6d:2b:ad:a0:02:26:1b:ce:16:dc:d6:
                    0f:37:95:e8:af:41:ed:69:54:53:ad:8d:e6:dd:98:
                    d0:16:da:13:b4:a6:26:65:43:a2:ba:fa:88:06:d9:
                    4f:a3:1c:5b:26:42:b1:45:02:9f:a0:67:b7:02:92:
                    0e:02:d5:5c:5b:bd:f4:5f:ea:ae:03:3b:a9:40:62:
                    14:7a:8c:50:3f:69:52:39:18:e4:37:6a:7b:16:19:
                    d7:f4:ac:a1:74:e1:3e:39:a3:2b:84:68:73:93:96:
                    5e:5e:11:b7:b9:bd:83:b7:4d:95:33:cd:66:2a:39:
                    63:91:bc:e8:83:46:31:fe:0b:d4:da:97:bb:4f:fb:
                    7d:30:b8:92:c8:53:2e:91:e1:ed:a4:f4:0d:48:92:
                    d5:d2:f8:97:d6:f3:24:8a:74:dc:ba:ee:15:1b:05:
                    43:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D2:70:B3:5F:20:A7:18:56:A5:67:FF:4B:E7:35:11:68:50:BF:5D
            X509v3 Authority Key Identifier:
                keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:43:32:8d:43:79:c5:5d:b2:43:4d:8c:b8:17:bb:4a:e7:3c:
         c4:5b:ff:20:f4:83:9b:c2:c4:05:ee:fc:5d:20:70:0a:3c:18:
         6e:18:6a:54:7f:96:25:78:0c:e0:59:73:51:97:23:ef:21:72:
         9e:d9:3a:01:16:87:b2:b4:45:04:3a:ad:fb:31:9d:9e:e4:0d:
         8e:5f:9d:0e:07:d8:ec:bf:41:bb:bb:0e:2e:ea:27:37:5b:cf:
         90:f8:ec:55:75:9e:38:34:64:0d:64:40:db:6f:38:e1:e3:99:
         f0:5b:b0:d7:fe:76:92:85:e7:b0:53:43:48:85:52:01:80:3b:
         85:63:fb:1c:e1:93:bf:52:74:de:76:b3:aa:2d:5b:5b:e1:9e:
         db:c2:b4:63:57:ef:7b:dc:30:90:af:32:d9:aa:35:71:ee:f5:
         52:21:c4:a7:53:a5:19:0a:bb:82:60:e8:57:3e:aa:ef:2c:b6:
         76:fe:54:3c:a4:bc:2a:d8:96:9a:3d:e5:29:a6:03:90:19:b4:
         e3:4b:2f:9e:2b:5b:27:23:a7:a5:3b:f3:67:72:ff:e5:3a:95:
         13:6f:5f:1d:77:97:f9:a4:10:8d:a6:cb:a1:df:23:7a:3a:9e:
         8e:35:09:f0:79:6b:c5:31:d4:74:d7:f1:e4:a6:25:c1:6d:0b:
         00:c7:06:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:14 2026 by rpki-client