Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
File:                     rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft (raw, json)
Hash identifier:          LzeSEGRG9a02vALu6dJU6evvO73EtdJ3IxQvQ59OJD8=
Subject key identifier:   98:BB:A4:D9:84:EB:A7:50:D4:AF:2E:23:CA:4B:43:31:20:F6:0D:0D
Authority key identifier: AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B
Certificate issuer:       /CN=acfeacea5d812f3030c557e48c53758753fb6c6b
Certificate serial:       01A178F155A9B24DE48689BD6E15BB3DCA77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
Manifest number:          1AC0
Signing time:             Mon 26 Oct 2026 16:00:44 +0000
Manifest this update:     Mon 26 Oct 2026 16:00:44 +0000
Manifest next update:     Tue 27 Oct 2026 16:00:44 +0000
Files and hashes:         1: TC97HjNs0IC4EKR9enZJIqgEZ2Y.roa (hash: YzLzlBSzxjBcEeB8/fSR9TVjgk9aSxEfekBZqcoz880=)
                          2: rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl (hash: jeZMVmypSIJmC1WdqOx6QOAzFmi7cdv27X8zTBxj/8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:f1:55:a9:b2:4d:e4:86:89:bd:6e:15:bb:3d:ca:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfeacea5d812f3030c557e48c53758753fb6c6b
        Validity
            Not Before: Oct 26 16:00:44 2026 GMT
            Not After : Oct 27 16:00:44 2026 GMT
        Subject: CN=98bba4d984eba750d4af2e23ca4b433120f60d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:b1:01:29:21:43:52:40:a1:91:39:f7:b2:
                    e7:59:02:d3:af:a2:bd:88:55:85:a1:00:e8:30:aa:
                    7e:23:ef:67:f8:d0:e6:82:15:86:b5:46:1a:fa:f6:
                    06:1b:7e:b1:2c:fa:30:4d:e6:0f:30:b4:2d:08:d4:
                    14:35:05:ce:33:87:2f:62:a9:66:51:43:70:d8:56:
                    82:3a:b7:2c:41:dd:75:d1:f0:3e:bc:72:05:13:97:
                    f2:6b:ba:32:04:65:ee:06:62:05:03:dc:22:c2:c2:
                    8b:b7:09:17:9f:39:ad:e2:16:fb:d9:5c:f8:10:ec:
                    17:f5:f5:60:9f:f1:3a:ab:4f:b6:77:9b:9e:76:a3:
                    f2:f8:c9:93:9d:d1:d0:09:54:87:fd:81:27:e4:ba:
                    45:39:9d:13:22:ba:aa:8c:89:40:1a:7c:c1:66:cb:
                    20:9a:90:7a:91:c6:87:9a:3c:bd:c0:f3:83:cf:99:
                    ca:fa:4b:85:a4:18:70:86:0b:de:5c:5d:0e:0b:87:
                    e4:dd:0e:21:4d:34:2b:24:b8:ae:f6:77:1f:fd:92:
                    8b:75:46:24:6b:66:13:cd:38:e0:f9:c6:24:31:7d:
                    04:c8:8e:59:2a:ff:bf:aa:fd:fe:0e:6f:5d:e1:ad:
                    1d:4f:ed:d5:03:05:0d:bd:89:a5:88:4d:b5:ae:19:
                    d3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BB:A4:D9:84:EB:A7:50:D4:AF:2E:23:CA:4B:43:31:20:F6:0D:0D
            X509v3 Authority Key Identifier:
                keyid:AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:7f:03:bf:78:6d:d0:1c:4d:0b:5b:5d:7d:9e:48:f4:2f:4f:
         96:f7:9c:82:32:bf:5f:de:85:3a:81:e1:90:2a:4b:7d:8b:cb:
         18:35:a8:2f:00:78:2c:74:9f:2e:5b:d8:12:ff:9c:3e:db:d7:
         86:9a:9c:1b:0d:b0:81:34:95:6e:8d:3e:0f:8c:a8:50:51:77:
         bc:e4:2c:79:44:1e:2e:c8:43:cd:9f:55:01:dc:a3:6c:93:1d:
         a3:1d:ed:90:a6:bf:ed:9f:c3:c8:75:4d:0a:81:86:f6:3c:cd:
         49:38:8a:97:04:90:c4:3b:53:e1:c9:33:e7:b3:99:a3:04:48:
         76:74:2d:2f:dc:c0:4b:3e:0a:67:a8:d6:25:1a:c9:17:44:0e:
         37:3e:18:ff:4b:c0:76:5d:a4:6a:c0:a1:5c:b4:14:01:88:91:
         27:ec:68:8e:e8:f7:d6:7d:39:96:cd:c6:03:6d:fb:bb:f0:ad:
         a0:ff:ff:4b:d5:90:85:57:bf:c2:cb:92:72:22:f9:5f:90:15:
         79:af:ba:29:71:48:fa:a4:5e:20:c4:c5:c4:72:a0:78:90:78:
         8c:ae:c2:b2:34:c4:54:1f:3d:96:d7:d4:65:97:8b:90:3d:1b:
         b0:cd:7e:19:5b:cc:c5:b2:3c:a0:0d:71:54:fd:60:6f:a6:bd:
         3d:79:92:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:44 2026 by rpki-client