Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
File:                     d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft (raw, json)
Hash identifier:          K6HzZtWO4hzgjRkN54N+De321O7a1+XxuKngJA+kjGs=
Subject key identifier:   E1:EF:42:56:8B:02:0D:26:23:1D:E1:23:F5:E5:AE:23:FE:C1:C7:A6
Authority key identifier: 77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
Certificate issuer:       /CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Certificate serial:       01A175B9BEE7826CC00B0EA5A1AC156C6C6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
Manifest number:          013C
Signing time:             Mon 26 Oct 2026 01:01:09 +0000
Manifest this update:     Mon 26 Oct 2026 01:01:09 +0000
Manifest next update:     Tue 27 Oct 2026 01:01:09 +0000
Files and hashes:         1: 31s38qTNO6yt_t2cWViMVU8rzT8.roa (hash: hHBR9FRB8VGB5NgdUu2OjlV3tCFxVK0wgLqKuADUEY4=)
                          2: VXztzk4Ee02YToFvK1hXq4z0ngg.roa (hash: TG73c3Jp5R3Lk7QQ+JsM9RhJbp3eNPxZOiVn6niYjI4=)
                          3: XC2qgnZMd7KoCxUvbJDEOOAZ6gY.roa (hash: lNqu83Yibp25n37JenqiUawc+hvvEVurC151viVxI6Y=)
                          4: XPBmD8Gtnws4nIHrF49jMceOosg.roa (hash: O2+V+IZD88cCJbaxnDGHuAzNsGo6UPNKZgTbgUxV0l0=)
                          5: cwbV0vWcQ5Wj6E31oIeSxEVrBuY.roa (hash: /Is553alSS62yiVoav4+HU2iTt1j95KP3P9CAryXxjU=)
                          6: d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl (hash: BdOdlu1DZw9TdFHdBP0MBNGmLm0Rwq8kc8L2IuSgNe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 01:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:b9:be:e7:82:6c:c0:0b:0e:a5:a1:ac:15:6c:6c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
        Validity
            Not Before: Oct 26 01:01:09 2026 GMT
            Not After : Oct 27 01:01:09 2026 GMT
        Subject: CN=e1ef42568b020d26231de123f5e5ae23fec1c7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:40:94:9c:8c:f5:70:f8:1f:a0:21:29:f5:78:
                    9b:4f:53:8d:9f:b6:a1:ce:de:1c:ca:15:f1:86:32:
                    cb:0e:db:9b:53:48:8e:a6:5b:2d:49:df:74:b6:1b:
                    eb:e7:2d:ba:83:11:60:31:b0:4e:6f:63:e7:7e:b3:
                    0f:8b:1d:d8:7e:6c:72:90:8d:da:0f:2c:93:7a:8d:
                    b3:4e:11:f3:19:86:98:9d:f4:1f:9e:73:6b:81:06:
                    5a:c0:de:e9:a9:b4:48:03:c9:e2:db:06:77:b5:bd:
                    60:3c:73:e6:b9:e6:3d:e4:ff:eb:bf:0e:39:dd:24:
                    d8:8d:a7:2d:4f:4b:4e:7d:f5:04:7b:fb:c6:5a:2b:
                    70:3b:56:da:ca:d5:c9:8e:36:4d:b9:f7:1c:3e:f2:
                    e6:1f:42:33:54:61:d4:b7:a3:37:93:da:96:72:f6:
                    36:ae:0f:c7:71:3d:81:fe:3b:be:eb:3b:a2:ea:db:
                    b6:a9:af:0d:0b:1d:e7:92:9b:8b:fc:e7:51:95:60:
                    34:32:3e:38:45:29:6a:af:91:5b:fa:ae:c7:5d:7b:
                    ff:af:3e:a9:53:a7:58:95:d3:05:8d:79:07:a4:87:
                    a7:3c:99:eb:9b:3a:d2:7c:b2:80:42:ec:91:e5:5c:
                    fb:11:ae:c3:a5:8a:8b:d9:d0:a0:d1:23:74:88:f3:
                    59:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EF:42:56:8B:02:0D:26:23:1D:E1:23:F5:E5:AE:23:FE:C1:C7:A6
            X509v3 Authority Key Identifier:
                keyid:77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:09:4b:f7:30:86:f6:d3:47:ed:b6:f7:c3:ed:30:66:95:0c:
         99:f2:fc:b7:b2:ee:8a:c3:bf:ef:01:ca:82:6e:c4:79:31:e8:
         70:28:93:54:88:a0:d1:72:f5:e4:1e:58:07:3c:19:dd:c3:72:
         3b:c6:b6:d3:be:bd:31:7a:9f:23:1f:0e:f4:3c:83:44:a6:fd:
         f4:d0:06:b3:46:85:64:ad:04:15:fb:79:d1:01:86:fc:18:b5:
         bc:6e:8b:57:e3:63:f4:ff:97:d8:50:5c:69:e4:6d:ba:47:7e:
         64:c5:0a:c8:89:63:bc:e4:25:d6:91:d6:2b:e3:bd:5c:58:da:
         b2:02:7f:8e:76:08:8a:95:1d:f5:30:16:c0:f3:10:89:cd:e5:
         a1:40:00:9a:76:e8:fb:c5:c6:e2:29:12:ee:e4:d3:de:b7:c7:
         58:07:5c:66:7a:4e:51:c4:0c:c6:ec:44:08:c1:05:f9:b3:8d:
         a6:35:81:13:a6:5c:5d:39:f6:95:42:31:72:41:2a:69:3a:90:
         37:25:5f:98:5e:99:bf:38:8b:67:a4:e4:94:e2:a5:b2:ff:8d:
         f7:5f:df:16:19:ce:dd:85:f2:00:38:73:7e:3f:5a:30:0d:ce:
         df:2a:a3:2e:bc:70:9a:f5:0d:aa:29:68:71:ef:b9:79:e3:88:
         8e:35:e9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:18:06 2026 by rpki-client