Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
File:                     cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft (raw, json)
Hash identifier:          KvPp6p+KdWilbNwnBLeEwnyW/wxtJMCo6pTMRoJBB6U=
Subject key identifier:   F5:79:7E:4B:8A:3F:6B:0E:D0:6B:D4:C6:A7:56:F2:4F:39:F6:62:95
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Certificate issuer:       /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial:       01A1705D2795F8C733D74F3D0EBA56AC0300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
Manifest number:          1ACA
Signing time:             Sun 25 Oct 2026 00:01:55 +0000
Manifest this update:     Sun 25 Oct 2026 00:01:55 +0000
Manifest next update:     Mon 26 Oct 2026 00:01:55 +0000
Files and hashes:         1: 6lbjH1u_RRBqp8s7VeN6v911RcY.asa (hash: crYKWo72giDkjHeGLx5Dr4I9B0DQinAV3JD8SKE427s=)
                          2: cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl (hash: NzNca3/g7Qr2Mtm8BRvIVdKsqgr0RXtQeAxQ0oESp84=)
                          3: dXM6fVvG98pEOtZgdKH4ko1DNoE.roa (hash: Juz8s3csuQdQaJVkSot0gXLBmWSHq7VP8RYl4ErQ9cQ=)
                          4: iy0Xs4XuQmBiLTcIzewS0l8j2Mw.roa (hash: Z7LmDISHgR4hvkBzhbrt82iLoWV0bIm5VCFXVRx3m9I=)
                          5: lMXK44QhM_XGZjingG-V3KvqKAE.asa (hash: zRgv5ZQ5iUse5otb1U22dglWvU7KGSbM/j6SQavWefk=)
                          6: s_a0JO3ex3-5ZDMGwqCpSbvbnuI.roa (hash: JMIbNNgd33gdVxQwb9MZN65rvOB0PF/xYuksEln47Yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 23:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:70:5d:27:95:f8:c7:33:d7:4f:3d:0e:ba:56:ac:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
        Validity
            Not Before: Oct 25 00:01:55 2026 GMT
            Not After : Oct 26 00:01:55 2026 GMT
        Subject: CN=f5797e4b8a3f6b0ed06bd4c6a756f24f39f66295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3b:0b:1e:b3:e5:d3:9b:31:bc:d1:c1:d2:48:
                    14:40:40:d6:f4:28:b2:f9:dc:05:8b:bc:9a:53:b4:
                    97:13:b1:51:0c:16:ee:6b:a1:aa:f8:62:e2:09:76:
                    e8:b8:f5:1a:85:16:09:60:1f:94:5e:fc:b0:52:74:
                    07:d2:09:f7:f2:44:f4:bb:4e:3c:7b:9c:cf:71:74:
                    26:07:e9:e4:2a:18:48:4b:2c:72:21:68:15:7b:e4:
                    7e:d8:42:20:69:1b:7d:54:ce:fe:f5:3e:38:76:db:
                    0b:73:0e:47:1e:84:2d:7b:7e:ad:a6:93:bc:3f:1c:
                    ba:f6:e0:6d:1b:05:74:2c:da:64:a1:78:98:43:ce:
                    1b:26:72:79:35:1b:0c:86:ae:18:24:19:3a:a2:a7:
                    f4:44:f7:e6:19:4f:12:f2:6e:66:d4:82:5d:bd:a5:
                    76:c7:81:c8:32:5e:5b:d7:88:3c:ab:36:ce:9d:cf:
                    b4:d6:e0:1e:6c:ae:05:fb:53:22:69:5f:56:ba:71:
                    44:25:ff:48:64:3d:6f:ed:58:97:c4:61:24:db:e7:
                    76:18:4e:aa:0d:62:b9:2f:6c:3a:4b:0b:a9:34:e0:
                    ef:74:a3:0d:2f:75:af:85:f6:df:69:0f:af:da:cc:
                    5c:fa:5e:d5:e8:0f:5b:f6:cd:77:8d:69:b4:aa:b6:
                    5d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:79:7E:4B:8A:3F:6B:0E:D0:6B:D4:C6:A7:56:F2:4F:39:F6:62:95
            X509v3 Authority Key Identifier:
                keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:45:88:aa:ca:ae:3c:e6:a9:ac:e0:4a:b5:63:6b:b5:b4:41:
         49:6b:cf:3f:ba:d1:62:2a:55:2e:37:d6:18:79:99:57:90:01:
         9d:b0:2b:91:c0:7d:ce:97:cf:90:2f:23:5e:2e:a2:a1:18:af:
         92:43:5b:0e:9e:af:1f:e3:bb:59:7d:29:e9:57:2d:fd:15:d9:
         ec:81:a4:2c:98:54:35:1e:8d:17:d7:2a:25:2d:cc:26:d3:a8:
         68:ba:50:b8:f3:c0:df:c8:de:4e:a8:22:aa:90:ae:9a:9c:90:
         b5:52:aa:70:94:77:1b:ac:dd:c1:c8:27:d4:e5:22:32:5f:f3:
         d6:f1:e6:ee:89:98:ff:b3:25:30:17:90:19:e8:bd:4b:77:72:
         cf:06:9a:fd:a9:b8:de:21:dd:b4:9c:28:f4:42:dd:ee:c7:56:
         f7:19:d9:6c:7a:34:45:bd:46:0d:14:bc:d8:61:c1:04:36:e7:
         54:dc:7f:4d:ba:72:09:03:8a:f3:b7:01:52:dc:19:6e:6f:80:
         42:5a:2e:21:03:99:53:7e:77:c4:4a:7a:f6:eb:68:a8:28:2f:
         aa:23:64:3f:92:d6:cf:2e:2d:20:d7:4a:02:bc:72:e0:bb:ab:
         ef:63:4d:ae:86:4a:8c:9a:eb:94:09:1b:c8:d9:ec:c0:b3:1b:
         e5:d2:a0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:09:35 2026 by rpki-client