Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.mft
File:                     P_1p8wXRvVnT_oiw4yQSiwna_Yg.mft (raw, json)
Hash identifier:          BEyFZgmeBAFK42A0Qb9YFqjwKLG44PivbPySILQtNOo=
Subject key identifier:   C1:92:2D:11:8B:E2:A1:84:4C:63:E3:D0:E4:65:07:40:08:BF:F5:1F
Authority key identifier: 3F:FD:69:F3:05:D1:BD:59:D3:FE:88:B0:E3:24:12:8B:09:DA:FD:88
Certificate issuer:       /CN=3ffd69f305d1bd59d3fe88b0e324128b09dafd88
Certificate serial:       01A17B8468D3C377FE800FB6D919B7051377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P_1p8wXRvVnT_oiw4yQSiwna_Yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.mft
Manifest number:          0132
Signing time:             Tue 27 Oct 2026 04:00:37 +0000
Manifest this update:     Tue 27 Oct 2026 04:00:37 +0000
Manifest next update:     Wed 28 Oct 2026 04:00:37 +0000
Files and hashes:         1: P_1p8wXRvVnT_oiw4yQSiwna_Yg.crl (hash: UgVHFRmiE2RO+9WCxN9ClVI5CT4ZiZAqRkelvxaPMmE=)
                          2: ZHfipkhj4ZBR5NV1YEBpfVvZkAk.roa (hash: ZipHrq8iiEQt8O7cV6/RGetNUyLW5eIr9JBTahVOOBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P_1p8wXRvVnT_oiw4yQSiwna_Yg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:84:68:d3:c3:77:fe:80:0f:b6:d9:19:b7:05:13:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ffd69f305d1bd59d3fe88b0e324128b09dafd88
        Validity
            Not Before: Oct 27 04:00:37 2026 GMT
            Not After : Oct 28 04:00:37 2026 GMT
        Subject: CN=c1922d118be2a1844c63e3d0e465074008bff51f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4b:09:25:c5:45:62:9b:d6:d0:77:1c:dc:de:
                    24:62:e5:2f:67:1f:02:9d:86:5f:0b:85:b4:0d:6e:
                    ae:75:a2:00:73:d2:15:68:b8:d6:05:05:22:14:f4:
                    89:df:35:bc:a5:14:c6:10:53:b9:64:b6:28:aa:05:
                    14:f4:ad:2b:77:d0:b7:12:af:47:f2:c8:f1:9e:ed:
                    70:28:80:c6:1d:4d:71:21:68:3c:f9:c6:72:86:4e:
                    a2:80:08:42:37:12:03:2b:bb:1b:b1:2a:3c:09:b6:
                    81:3c:25:e3:e4:5b:b8:dc:07:93:1f:7a:f9:4d:08:
                    58:5b:9e:66:6c:a8:6c:ef:bf:fd:d5:80:0b:06:f1:
                    ce:4e:c5:df:61:2f:86:5d:e2:15:58:32:03:c6:3d:
                    61:ad:ed:2e:c4:de:9e:26:d1:21:57:60:06:ce:7e:
                    59:1e:1e:1b:10:2c:2d:25:0b:c3:af:15:b4:d3:86:
                    ae:03:3a:2b:28:e8:c7:6e:92:22:a7:d9:39:4e:2d:
                    56:70:b9:02:de:90:0e:95:e7:2f:c6:a2:62:38:2c:
                    6e:0a:56:f3:f3:b7:a7:1c:a6:85:14:bb:46:5b:a2:
                    ba:69:b2:65:cb:a4:51:eb:5f:ad:42:db:1e:58:e5:
                    7e:63:19:35:eb:df:19:cb:d8:76:bf:c1:51:21:39:
                    fe:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:92:2D:11:8B:E2:A1:84:4C:63:E3:D0:E4:65:07:40:08:BF:F5:1F
            X509v3 Authority Key Identifier:
                keyid:3F:FD:69:F3:05:D1:BD:59:D3:FE:88:B0:E3:24:12:8B:09:DA:FD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_1p8wXRvVnT_oiw4yQSiwna_Yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:74:5e:a7:11:5b:19:6a:99:d9:c9:16:9c:54:dc:1e:fb:b3:
         13:10:b4:f5:71:d1:7f:de:d6:31:1c:5d:16:ce:81:55:e7:0a:
         f6:56:8f:38:b5:ba:fb:e3:39:4f:2e:b3:19:dd:19:f5:0c:b1:
         99:04:c9:f6:2e:73:35:17:06:4e:ac:e5:30:64:30:6e:1b:70:
         14:bd:54:c3:05:e2:aa:60:f7:f2:49:23:41:0b:4f:28:9d:3e:
         d9:d8:ad:68:d8:d6:35:b2:0b:83:5f:7f:59:9f:42:63:6e:a9:
         81:7d:9d:8b:fe:36:75:1e:1d:a6:a1:3b:e0:cf:ff:be:57:ba:
         33:f2:07:ce:6b:68:fd:54:4e:4e:5b:9b:61:d4:45:fe:f9:0b:
         80:44:a8:1c:20:44:5b:ab:11:aa:66:5e:12:30:4c:48:35:62:
         fb:71:d3:5a:87:c0:21:d0:16:27:dd:1e:fd:48:70:c0:d9:a6:
         c0:11:29:a3:f0:b5:c8:75:d0:29:5a:98:a1:57:06:5e:1e:f1:
         18:92:ac:1c:37:d2:6d:51:92:fd:2c:b1:51:d0:02:bb:43:6e:
         72:60:1f:87:8a:00:82:01:5c:77:28:d5:0e:f3:b1:ec:63:a7:
         86:78:04:21:bf:e3:91:55:31:5a:d6:f7:32:93:44:5e:48:5f:
         35:62:54:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:40:28 2026 by rpki-client