Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
File:                     2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft (raw, json)
Hash identifier:          lVmi20aHP/9srDmme+kGrDxI9IKw+5piTulKS8D0Hi4=
Subject key identifier:   57:61:11:62:E6:A5:C8:63:79:4E:63:D2:CC:BE:9C:93:AD:FA:AE:14
Authority key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
Certificate issuer:       /CN=daf0a39cfadf910f6b132ad228e606561887a06c
Certificate serial:       01A13D80F7217222666E80880C1BDA3B3B3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
Manifest number:          1AAB
Signing time:             Thu 15 Oct 2026 03:00:24 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:24 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:24 +0000
Files and hashes:         1: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl (hash: Un0dxVyx7Yf3rS9/1cbmhKE5adsheC7HY0f46vE1VhE=)
                          2: kX0ln8n5R4ckT5blpr2Q8T6dxyw.roa (hash: m+DqRW/7H7lJLeLV4xP2QSBsOS0wlhVWEX4nGDQ/zJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:80:f7:21:72:22:66:6e:80:88:0c:1b:da:3b:3b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daf0a39cfadf910f6b132ad228e606561887a06c
        Validity
            Not Before: Oct 15 03:00:24 2026 GMT
            Not After : Oct 16 03:00:24 2026 GMT
        Subject: CN=57611162e6a5c863794e63d2ccbe9c93adfaae14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:92:ae:02:a1:8c:d4:e7:0e:82:d6:cb:03:
                    73:d6:c0:b4:5a:63:c9:00:8f:f1:a2:e2:6a:2b:3f:
                    0a:1c:e1:2c:c3:c7:11:0f:a0:19:76:8e:dd:35:4d:
                    4a:02:f2:e0:26:fb:fc:1d:54:10:05:13:5e:88:d0:
                    18:25:3b:f5:b7:6e:84:21:a6:e0:a2:f5:9a:c8:0d:
                    0c:b1:c5:75:a1:73:62:24:75:5f:2d:ee:c5:fc:d4:
                    19:fd:96:f2:3f:44:8b:85:0e:62:6f:f1:b1:a5:58:
                    ef:10:1e:b7:dd:b5:da:9d:85:61:24:6d:66:13:11:
                    13:10:0e:82:14:83:42:e4:98:99:64:59:cb:27:62:
                    4a:eb:ab:02:ce:fa:db:9f:85:64:f3:ee:03:a5:d5:
                    6d:38:7a:08:40:38:82:c7:4e:28:e1:e8:99:7d:f3:
                    37:82:bc:c2:94:b0:22:e3:3a:61:e0:22:af:07:30:
                    13:ce:66:24:73:ba:6e:4e:c7:68:e7:92:b8:32:51:
                    ea:b3:4a:78:8a:8c:27:10:b0:68:7e:03:5b:42:64:
                    75:50:89:fd:08:5a:7d:de:60:49:5f:d7:fa:67:d8:
                    9c:38:00:4d:8c:1d:62:46:ab:f7:22:bb:c3:11:31:
                    c7:73:79:46:37:27:f0:16:b8:ec:00:ba:c6:2f:8d:
                    44:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:61:11:62:E6:A5:C8:63:79:4E:63:D2:CC:BE:9C:93:AD:FA:AE:14
            X509v3 Authority Key Identifier:
                keyid:DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ea:6b:15:22:40:ad:97:b3:e7:56:38:6a:78:54:05:ac:60:
         08:6e:24:de:8c:d8:77:c4:80:fd:65:6d:50:64:0a:08:8f:b4:
         fe:da:c6:0e:53:98:85:10:c5:9f:f0:4e:eb:94:85:db:8d:56:
         41:2d:bd:3f:1e:ad:6b:84:69:5f:77:43:8f:22:73:e9:35:ff:
         69:ef:03:d8:bd:51:5b:09:46:b1:d4:ff:92:e0:78:49:62:53:
         cd:5c:c9:f1:91:c6:39:9a:a3:4a:31:93:6e:bb:a7:17:8b:44:
         2c:97:28:01:9b:75:bc:c1:89:42:58:14:2f:ad:c7:99:86:b2:
         a6:b1:00:a4:a7:ed:dd:d2:a1:12:9f:66:03:b8:b0:e2:0d:cf:
         79:4d:76:52:db:4c:32:bb:00:1d:3c:ef:ff:1d:62:6a:85:62:
         96:f4:6d:06:86:9d:64:a4:9b:dd:ca:27:5d:c5:7c:00:67:cf:
         d5:a0:8b:61:00:63:41:d5:78:8f:4a:82:4b:6c:4f:87:fc:45:
         85:cf:df:ed:82:44:2d:41:fd:80:65:d7:af:e1:8c:6d:4d:2e:
         51:61:62:2a:4e:d0:e6:73:20:2d:02:4a:4d:d4:a6:a5:81:45:
         c1:f7:ec:01:f2:94:40:1a:87:bf:fa:07:02:0a:a5:bb:5d:43:
         49:86:d5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:44 2026 by rpki-client