Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
File:                     rvHu-qdX046xBPpMuk2WK3LlK1I.mft (raw, json)
Hash identifier:          APnfYnp/sX8l3UfuAMJBKotE8yerNMxXcbJv3NVtNv0=
Subject key identifier:   91:85:36:6F:AC:83:91:74:5F:D7:2F:79:83:26:DF:50:9F:29:E7:D1
Authority key identifier: AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
Certificate issuer:       /CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Certificate serial:       01A17EF420A55D49BF1A50BBBAA05806AAA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
Manifest number:          1AD0
Signing time:             Tue 27 Oct 2026 20:01:30 +0000
Manifest this update:     Tue 27 Oct 2026 20:01:30 +0000
Manifest next update:     Wed 28 Oct 2026 20:01:30 +0000
Files and hashes:         1: DYBh63uGiQF8Zb0DY6V3FWnzZsA.roa (hash: GPcPHlGT1cM3//wFdxafu8jpds/WwXi8baI3BDf4bMA=)
                          2: ZQWk0ApbY34Dhn4M0Jom15giHDs.asa (hash: vZpebPspr/YMdLuvvw40hU2LrzKCO2ZjjLv/VN5JEpA=)
                          3: rvHu-qdX046xBPpMuk2WK3LlK1I.crl (hash: Kiq3YkBl+OhbLIiZOLH2WrFpgXOP0EPWMt2FV7iWOHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 20:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:f4:20:a5:5d:49:bf:1a:50:bb:ba:a0:58:06:aa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
        Validity
            Not Before: Oct 27 20:01:30 2026 GMT
            Not After : Oct 28 20:01:30 2026 GMT
        Subject: CN=9185366fac8391745fd72f798326df509f29e7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e4:81:5a:73:4d:94:1e:cc:1b:ba:c5:6b:3e:
                    4d:cf:62:ca:d7:20:20:98:af:8f:2f:46:1c:5e:27:
                    8a:2a:0e:8f:b0:58:58:b1:e6:38:69:f8:f7:0a:87:
                    8b:43:fd:7e:70:44:c2:8b:b8:79:e7:0a:1d:62:3a:
                    e8:03:8e:e2:45:b1:3a:c6:9e:7a:ec:5b:18:bc:75:
                    04:13:12:27:1c:a2:4b:e6:b8:1c:32:43:93:4d:4a:
                    5d:e2:69:02:14:c8:76:8a:1e:27:12:a3:96:4a:13:
                    18:9f:ef:9c:6b:aa:71:d4:a5:3f:74:27:3a:78:bc:
                    62:f0:69:52:34:63:88:3b:e7:7c:41:bf:0e:55:e4:
                    e9:89:72:ca:18:42:d7:0c:9b:ac:a3:ca:8b:3d:85:
                    ae:9a:3d:6f:fc:40:47:77:56:f3:d4:68:5e:df:70:
                    f2:4d:dd:05:f1:01:81:17:c0:16:71:ca:69:0e:c9:
                    c7:0f:a3:91:6d:69:ff:09:6f:d9:23:3a:0f:09:23:
                    34:8f:6d:a7:35:fd:a5:c1:71:23:53:02:b6:bb:dd:
                    e1:09:58:4b:7a:b1:a6:a6:93:6e:e7:f0:a4:f6:f6:
                    2c:05:8a:d3:46:76:f6:7c:13:e4:dc:f5:07:69:04:
                    1e:d5:fc:5f:19:1f:e1:19:b0:0b:9d:7b:c5:60:28:
                    43:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:85:36:6F:AC:83:91:74:5F:D7:2F:79:83:26:DF:50:9F:29:E7:D1
            X509v3 Authority Key Identifier:
                keyid:AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:db:0a:08:7a:a8:2b:5b:0c:b7:03:4a:50:0f:bf:0e:c5:f8:
         0b:7a:d5:e4:3d:54:52:ab:c3:31:c7:d3:d7:e5:f7:52:a1:bd:
         a2:0d:a5:9d:d4:cf:11:98:88:ce:67:e0:0c:bf:1f:37:2b:b0:
         6b:58:9b:36:33:de:73:e3:7a:b5:94:6b:de:48:54:1a:1c:63:
         e1:4d:41:38:9b:5b:f7:ba:b4:93:5c:7e:52:b5:b9:b3:0b:cc:
         e1:92:de:c3:ab:6b:c0:fc:e8:ac:17:2b:cb:8a:de:ec:62:5d:
         78:96:f8:c5:b2:bf:5f:a4:e7:8e:96:d7:b6:eb:e4:f9:bd:cf:
         3d:ea:4f:a9:17:9a:92:bd:ad:5c:73:1a:a9:9e:42:ed:a5:4f:
         27:7d:ee:73:56:a6:f6:b1:f1:8e:5c:30:ad:dd:0d:7f:6d:e4:
         6c:e1:4e:51:e3:88:81:b2:8c:e2:f5:4d:12:55:57:5b:87:bf:
         f2:ad:0a:30:db:c0:76:54:40:57:c8:fa:17:f6:29:bb:37:39:
         9b:a8:57:9c:1b:f1:c8:f0:46:d3:1b:8f:f8:cc:f7:7d:1a:df:
         6a:06:3e:e3:e1:a9:6b:40:27:fe:7c:51:9f:ff:24:c9:6b:90:
         36:d1:2e:22:86:8a:27:61:13:91:8a:61:8b:8e:8e:88:4e:eb:
         19:f0:7e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:25:04 2026 by rpki-client