Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
File:                     m1WmQjec5XjznsDRBgPc-oP2404.mft (raw, json)
Hash identifier:          iakXhviD+tOcjpjCRw+OiCQP27OtvjYWM4aagWXq/Qs=
Subject key identifier:   B4:E4:03:E3:F2:54:EA:1A:C8:05:90:97:41:AE:7D:9D:6A:0A:AB:4D
Authority key identifier: 9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
Certificate issuer:       /CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Certificate serial:       01A177031D945690F3F25A6FA13C809A8F0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
Manifest number:          16A3
Signing time:             Mon 26 Oct 2026 07:00:55 +0000
Manifest this update:     Mon 26 Oct 2026 07:00:55 +0000
Manifest next update:     Tue 27 Oct 2026 07:00:55 +0000
Files and hashes:         1: m1WmQjec5XjznsDRBgPc-oP2404.crl (hash: jVraIxwEFIVreNlcXKUXtBHyPhib5DYgvkB/FAxpq38=)
                          2: uvET6Zdbf1uExwxmzflEOezn8Rc.roa (hash: OoCVZM5zRZmB6p+N+tNq0XseSeQIYStS8UgtYXAi4Xk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:77:03:1d:94:56:90:f3:f2:5a:6f:a1:3c:80:9a:8f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
        Validity
            Not Before: Oct 26 07:00:55 2026 GMT
            Not After : Oct 27 07:00:55 2026 GMT
        Subject: CN=b4e403e3f254ea1ac805909741ae7d9d6a0aab4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:e2:6e:3a:f2:d1:ea:83:52:5b:e6:6e:14:
                    db:32:aa:b9:e0:d2:77:1f:07:e7:2c:88:88:5f:20:
                    5e:fc:1a:51:61:4c:e6:1b:a6:cc:fb:a3:c9:45:4a:
                    d4:4a:e8:0a:d2:0d:f8:86:f2:44:90:df:ce:68:09:
                    fa:ae:a9:88:0c:1c:27:a3:23:b0:33:d1:21:0c:8d:
                    e7:17:c3:60:05:22:f9:d9:6f:87:85:3d:42:b7:2a:
                    25:10:e6:1c:bb:ac:40:b7:12:13:88:d9:6b:a8:84:
                    79:01:92:bb:07:26:2e:5a:32:32:0c:20:03:86:2f:
                    16:c0:c2:52:15:c9:00:33:e0:8a:0f:f5:97:25:5a:
                    aa:dc:4f:2f:07:6c:ab:9c:0f:b9:83:d6:1e:bd:6e:
                    af:08:d7:22:5f:ef:61:8f:37:b7:a4:69:13:17:00:
                    e7:e1:77:59:47:e0:f9:f5:87:07:fb:e7:38:83:c4:
                    8c:ba:f1:3c:87:4a:31:e5:cd:a9:51:e2:ba:77:f9:
                    88:27:24:e0:be:63:47:b9:7f:26:2e:3b:92:11:4f:
                    1f:e8:0f:95:c5:a4:4a:6c:3d:88:8f:37:d3:10:02:
                    13:09:f1:92:3c:c9:cd:57:a8:fb:39:79:4f:11:e3:
                    39:34:85:84:ee:e1:66:a6:0b:9e:79:96:a4:3b:17:
                    d2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E4:03:E3:F2:54:EA:1A:C8:05:90:97:41:AE:7D:9D:6A:0A:AB:4D
            X509v3 Authority Key Identifier:
                keyid:9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ea:9a:c8:90:73:02:04:df:aa:26:aa:da:67:be:56:0d:0f:
         69:de:0b:3a:a0:7c:d0:2b:7b:3f:cf:d9:8c:1c:36:e4:78:ef:
         ea:6b:ea:4b:45:6d:7f:71:34:47:f2:a5:42:95:3a:03:ce:19:
         c4:a8:db:a8:fa:f2:d4:97:97:d3:a9:63:30:e3:c9:51:6b:fc:
         e5:63:2d:99:0b:f1:25:57:99:0a:7e:5e:e9:97:52:be:07:30:
         64:74:38:a0:7b:13:de:0e:7c:64:8b:61:70:a2:4f:c6:63:c0:
         8f:e4:27:d3:84:e3:1b:84:7a:53:20:1b:83:9e:a5:a9:4a:52:
         eb:78:19:63:de:66:31:ab:c9:5a:0b:0d:9e:db:ee:89:94:c0:
         32:76:5d:e4:e6:88:1b:d1:90:5c:76:12:dd:cb:52:77:20:e0:
         5a:83:d4:55:7f:33:9a:2a:0d:9e:25:52:8b:0e:5f:25:7e:b2:
         1d:38:2e:3d:87:ea:ab:df:99:c9:43:28:8c:50:83:86:a1:52:
         27:b0:2a:17:c0:c8:44:3b:3a:cd:5e:b9:d7:fa:2a:91:e3:13:
         d8:3e:74:05:ea:24:5c:69:a4:81:62:b4:26:78:32:ac:a8:72:
         24:fa:18:0f:ed:46:64:2b:31:35:63:99:9b:57:d8:c6:d5:f2:
         d7:97:7e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:53:42 2026 by rpki-client