Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
File:                     dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft (raw, json)
Hash identifier:          CKlDLIRefQlwNsNvEVpwG7ej3flCDwonHrptkS8hJX8=
Subject key identifier:   6F:AB:F6:71:D4:9D:16:82:8D:97:4E:18:DD:80:0E:C8:6A:7F:88:4F
Authority key identifier: 74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64
Certificate issuer:       /CN=749304120ce64942efb3896623b386a041dcb364
Certificate serial:       01A173940C277CF6ABD854EC6A04369C5767
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
Manifest number:          014D
Signing time:             Sun 25 Oct 2026 15:00:44 +0000
Manifest this update:     Sun 25 Oct 2026 15:00:44 +0000
Manifest next update:     Mon 26 Oct 2026 15:00:44 +0000
Files and hashes:         1: 1-NkprLROBhIrxdMdpHs0gAbXRhI.roa (hash: OgYkvU3JluSk0A3KrSnV7EBSOaUe4dV5FbvvMxEA9E8=)
                          2: Q5a6HBab7XkMUuUmzB37I_bZ51M.roa (hash: usPWG+ZUU2Ik0VUcffT2eLkXW+tgdFOyEMe83evsQaE=)
                          3: dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl (hash: hwis2pvyC1b37O34manPQKsakDA9TkGsbPnSdRjizR8=)
                          4: x8Ef8kUk1ABUGDrdvpPX2q-sM5Y.roa (hash: eqyvuJE0kO0nJaVY9QksYF1dsyytJE+brJXIzn/oUAM=)
                          5: yn-UQ1pVJZDABMVLeJ9nhqXgCpk.roa (hash: 9X5Y2Cv2UIpJSqjKJPAjPpvZNJ4jzPmiAP1leQcKFxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 15:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:73:94:0c:27:7c:f6:ab:d8:54:ec:6a:04:36:9c:57:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749304120ce64942efb3896623b386a041dcb364
        Validity
            Not Before: Oct 25 15:00:44 2026 GMT
            Not After : Oct 26 15:00:44 2026 GMT
        Subject: CN=6fabf671d49d16828d974e18dd800ec86a7f884f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:ec:0a:6c:45:e9:b2:76:90:c2:26:b2:60:
                    c4:1d:e0:6d:f4:b2:0a:15:d2:6b:70:28:4e:2d:a1:
                    90:b7:77:87:8f:39:94:1c:ae:7b:b2:4d:1a:73:d3:
                    30:f2:27:92:85:cb:02:da:90:1b:ff:c0:ed:a7:7d:
                    c7:f7:06:b2:34:6f:6f:5f:6e:dc:4c:89:62:15:06:
                    6e:bb:88:ac:f4:13:7e:27:ac:d1:5b:8a:9b:4e:79:
                    e4:4d:00:4f:6e:27:86:f7:f7:8f:bf:cf:89:b6:c2:
                    73:a5:25:9a:38:e7:74:c9:c9:cf:e7:58:a8:21:f5:
                    b7:9a:be:b5:d3:40:63:3f:58:49:86:5f:1b:bc:74:
                    24:37:a1:fb:55:48:f8:fb:a6:7f:b1:33:0e:78:0a:
                    af:4c:9c:92:c8:c3:71:a1:ab:78:d8:fe:ae:b9:62:
                    f5:be:0a:58:c3:30:e0:c1:cf:dc:c2:20:73:77:a8:
                    39:2d:40:89:17:24:15:a6:14:c3:a2:7e:c5:86:ad:
                    3d:f3:d6:d1:21:29:f5:98:12:5b:72:83:08:3a:22:
                    87:3a:f5:47:c5:81:1a:3c:a0:2d:0d:2a:07:f3:ee:
                    12:e2:52:4c:3f:e0:df:9f:e3:11:76:9f:4d:d4:09:
                    04:59:d5:d2:df:4c:91:c9:13:24:eb:1e:40:bd:1e:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AB:F6:71:D4:9D:16:82:8D:97:4E:18:DD:80:0E:C8:6A:7F:88:4F
            X509v3 Authority Key Identifier:
                keyid:74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:98:24:9c:ea:bf:2b:06:63:32:ab:ad:05:cc:7a:58:dd:98:
         1f:ba:d4:f6:11:12:18:30:94:22:c6:87:25:96:40:46:97:c4:
         fb:2a:9c:d8:1f:f8:05:62:b3:b6:83:9f:98:cf:fa:95:87:77:
         75:37:29:a9:14:65:ed:80:2a:35:d1:ea:4c:d4:a4:04:8e:ab:
         02:ce:63:1e:2d:65:2a:e1:4e:ed:48:fd:ed:24:ba:9f:83:58:
         e3:60:ad:e0:55:b1:ac:25:3a:8d:5e:f5:71:44:ac:a6:5b:61:
         11:79:b0:cd:0e:45:ee:a3:8c:8c:f1:3d:54:59:03:37:13:0c:
         f8:49:8e:24:f7:e8:34:bb:83:ad:67:e1:0e:9a:fd:79:69:53:
         97:ff:27:a1:b7:c9:99:8e:3a:dc:dc:31:02:9c:7b:8c:6c:a0:
         3a:5b:5a:53:62:df:97:db:d5:52:92:95:6d:a5:cd:e0:1e:54:
         15:e2:a5:6d:ab:13:d7:18:b2:fa:c5:a9:c2:3e:02:c4:00:f6:
         24:8a:dd:3b:0f:27:e6:a3:6d:8f:1a:c9:3f:ef:37:d3:5c:41:
         cd:b2:53:53:52:6a:80:ce:31:75:01:64:53:52:11:49:d9:43:
         d1:04:a9:3d:07:31:2e:3a:9c:08:cf:01:7e:a1:98:54:b0:6d:
         cf:6e:5a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:08:15 2026 by rpki-client