Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
File:                     V3GDYWiNFi_4AjwSJ81kTa45ocA.mft (raw, json)
Hash identifier:          xkXm979qNLfcTrzL8/ao3InL4YgsGVdvy5yDrqYhgE8=
Subject key identifier:   F5:1B:62:8C:2D:DC:19:D1:21:11:0A:ED:C9:CF:F9:0A:E1:1D:2D:0A
Authority key identifier: 57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0
Certificate issuer:       /CN=57718361688d162ff8023c1227cd644dae39a1c0
Certificate serial:       01A17BF30AB7511664B41414B9966517EF2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
Manifest number:          1A53
Signing time:             Tue 27 Oct 2026 06:01:27 +0000
Manifest this update:     Tue 27 Oct 2026 06:01:27 +0000
Manifest next update:     Wed 28 Oct 2026 06:01:27 +0000
Files and hashes:         1: V3GDYWiNFi_4AjwSJ81kTa45ocA.crl (hash: ZZ/SxB9GP9/QdH6fboEf7RJYxLcCxvDJQJ8oeg9ywts=)
                          2: mkD94LJIRNUZifr1ykr8u_Yv7sI.roa (hash: QezvNkk97Hcglta18duRAM2qGC7jYIu5wGU9v2UfcZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:f3:0a:b7:51:16:64:b4:14:14:b9:96:65:17:ef:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57718361688d162ff8023c1227cd644dae39a1c0
        Validity
            Not Before: Oct 27 06:01:27 2026 GMT
            Not After : Oct 28 06:01:27 2026 GMT
        Subject: CN=f51b628c2ddc19d121110aedc9cff90ae11d2d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:92:ab:ab:df:61:e6:e2:87:28:f9:75:39:
                    24:6d:80:ca:09:8a:cd:6c:25:02:be:d0:ac:7e:5d:
                    e6:65:fe:2c:96:c1:b9:2a:d3:ef:2a:ea:17:70:d7:
                    e7:74:8e:89:1b:04:0b:25:f4:7e:a9:40:f3:b5:f0:
                    7b:6c:e4:f7:9b:0a:95:d3:79:c0:54:63:15:b1:e2:
                    e4:be:7c:b0:7b:63:50:b2:de:48:bf:22:8b:07:0a:
                    32:f1:77:90:f7:82:40:cd:2c:b9:02:83:1f:d4:9e:
                    b8:da:25:12:97:8e:82:30:e8:30:66:ca:e4:8a:77:
                    2f:a4:c3:46:4c:86:05:33:79:f7:5e:59:b3:6b:9e:
                    51:0b:f5:4c:9c:ee:0b:fc:e6:a3:01:f3:65:e4:ea:
                    0a:af:f5:9f:ee:d0:37:e6:3c:e5:07:45:4f:30:ea:
                    2a:e8:e0:f2:57:fe:94:d2:c0:d9:ce:bd:22:c3:65:
                    76:cb:a0:18:2d:5c:7e:42:36:e5:1c:ac:f1:af:16:
                    bd:3d:ca:d8:57:bc:c0:ee:2a:cf:53:7a:20:5c:82:
                    ad:2f:61:1f:22:6c:b1:e4:0d:87:e9:37:89:54:1c:
                    18:be:da:db:83:19:ea:d8:cd:c3:1c:f3:95:65:2f:
                    a2:6e:ee:da:38:6c:84:e7:32:e8:89:e9:57:a8:73:
                    7e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1B:62:8C:2D:DC:19:D1:21:11:0A:ED:C9:CF:F9:0A:E1:1D:2D:0A
            X509v3 Authority Key Identifier:
                keyid:57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f8:dd:7d:8f:94:60:c7:85:92:cf:95:11:de:b6:f9:50:65:
         c6:b5:bf:55:d7:bb:7c:32:17:bf:97:f6:e4:1c:a9:56:65:87:
         0b:2e:84:d1:5c:75:b7:02:46:79:4c:64:74:a1:7e:a7:e1:64:
         e2:7b:0f:44:4e:04:2b:41:9d:49:a9:c8:83:79:43:95:c1:33:
         ab:0a:f1:52:db:73:ce:64:1c:7b:70:61:e2:27:71:95:0b:03:
         2b:38:75:21:3e:c9:74:ed:6e:45:3f:94:c2:b4:7a:9a:d6:fc:
         37:70:d4:bc:9b:ff:9b:f1:9e:6b:d0:75:42:c1:23:ee:ab:a3:
         bd:08:84:df:eb:c2:01:84:85:2c:59:a8:a9:ed:71:6b:3d:d3:
         ed:18:42:c2:6a:b5:6a:81:f2:65:cb:46:d9:19:98:05:93:91:
         62:ad:bd:5e:e5:c9:e2:f5:18:ec:e9:d2:10:f3:38:7b:60:77:
         d7:8a:27:19:20:99:b2:08:7c:cd:74:cd:43:50:35:2c:b4:78:
         08:d5:b0:b6:dd:12:bc:40:bd:dc:f2:41:c8:af:74:d3:fc:3d:
         8d:84:73:3f:a6:d5:31:10:38:52:25:69:de:f6:a2:62:05:3a:
         75:e9:bc:db:d1:5c:67:57:00:9e:93:9f:e6:bb:99:4f:49:c1:
         21:dc:fa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:58:46 2026 by rpki-client