Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
File:                     AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft (raw, json)
Hash identifier:          UuBiLxsMJWbttB6iQP6T0p8vYMadOvSjew+/JX313Ro=
Subject key identifier:   67:C0:65:B6:6D:BE:87:77:09:C2:37:45:86:3E:14:C2:97:58:33:7C
Authority key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
Certificate issuer:       /CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Certificate serial:       01A1765E4F38797B2231D3F986D5322B5933
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
Manifest number:          1A55
Signing time:             Mon 26 Oct 2026 04:00:54 +0000
Manifest this update:     Mon 26 Oct 2026 04:00:54 +0000
Manifest next update:     Tue 27 Oct 2026 04:00:54 +0000
Files and hashes:         1: AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl (hash: t+335qu4eCyiPM1AWls4zDy6ksfC+g1IY4uXS1I75KI=)
                          2: fBIbvQJADoTSsS7Jr2fItA3urdI.roa (hash: nJwJY4zTXkwANtW2/l5/P1l6Tsdntj7S0CCj9dxcAGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:5e:4f:38:79:7b:22:31:d3:f9:86:d5:32:2b:59:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
        Validity
            Not Before: Oct 26 04:00:54 2026 GMT
            Not After : Oct 27 04:00:54 2026 GMT
        Subject: CN=67c065b66dbe877709c23745863e14c29758337c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f8:7d:17:67:61:30:54:d7:ac:de:a4:0e:3f:
                    8b:79:4b:04:ab:a6:59:37:33:cc:4e:2b:f1:2d:2f:
                    95:43:d2:28:45:57:46:41:2f:89:47:ab:78:1a:77:
                    5b:8f:38:3d:fe:32:e5:11:4c:c0:6f:94:6b:2b:cf:
                    e6:45:87:d5:7b:11:2a:be:39:2a:f0:e9:5a:ff:e7:
                    e7:e2:f0:82:eb:f1:7e:bf:86:ad:2d:a1:37:74:3e:
                    3b:35:74:93:44:a8:32:57:1d:25:1d:56:96:37:1d:
                    f1:dc:9b:23:f9:c4:dc:7f:1e:d9:a4:e9:59:f3:49:
                    51:7b:cf:a5:47:23:ee:2c:00:f6:40:a1:e4:1e:79:
                    f3:a7:20:9a:c2:d0:06:aa:a0:b8:62:a2:84:be:53:
                    ae:8a:4c:35:1c:db:cc:3d:00:1a:dd:b0:d5:90:d0:
                    14:d0:a7:1c:87:fb:fa:f4:69:b2:0f:7e:21:4c:7d:
                    67:42:86:ff:b9:99:52:8e:91:b3:35:d7:dc:05:f1:
                    3d:2e:44:5c:a4:8a:2c:4f:3c:67:69:c3:73:79:30:
                    01:9c:d9:0c:f8:6e:29:ef:6c:80:b8:89:b7:9b:4c:
                    bc:07:3b:b3:cf:b7:34:98:6c:15:50:9b:25:d2:f3:
                    65:84:c7:6e:4f:18:34:a5:88:37:35:46:53:9a:2a:
                    d6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C0:65:B6:6D:BE:87:77:09:C2:37:45:86:3E:14:C2:97:58:33:7C
            X509v3 Authority Key Identifier:
                keyid:01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:aa:e2:b8:c6:fb:eb:13:b9:5d:b8:a7:48:8d:f2:06:60:60:
         c9:6f:59:92:b9:e0:87:a8:48:47:05:dc:29:25:ab:1a:c4:3c:
         08:6f:4f:72:c1:a9:d0:dc:32:85:3c:90:7d:e9:50:7f:df:22:
         22:69:c9:ea:a4:b1:d8:2a:36:3f:0f:9f:94:e6:c4:af:75:f8:
         b7:fe:ad:ce:cd:37:5f:b3:73:7e:ff:53:c1:65:ba:36:f3:73:
         d0:7a:29:36:2f:b8:41:62:84:8e:12:13:da:da:fa:b8:42:52:
         d5:e3:e4:d5:8d:03:0c:98:1f:7a:e0:60:3b:a0:13:38:ff:bc:
         d4:ac:38:c0:64:0c:72:09:b3:00:4d:fc:ed:5c:38:88:61:72:
         37:c8:ad:85:e3:5c:a3:b6:77:57:73:8b:54:eb:d6:5f:60:29:
         0f:a5:96:db:fc:0b:1a:3f:63:f6:6d:01:0c:83:21:d3:e6:13:
         06:59:c2:b9:37:1c:0c:c6:74:6a:8c:19:42:0f:74:01:46:31:
         00:cf:22:92:bb:da:0c:1f:c5:a5:ed:ba:2d:80:e7:de:f9:aa:
         0b:51:f3:05:48:ec:d1:b4:6b:e8:80:a3:0c:25:f2:f4:d2:6c:
         65:f2:18:f8:7e:4a:56:3c:50:09:f7:e9:2a:2c:ff:bf:55:6b:
         48:ad:12:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:31:34 2026 by rpki-client