Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft
File:                     k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft (raw, json)
Hash identifier:          CN6I0l56oLrtBR0lSfhvgsyxW60wFSdgLkEMCV3WVIY=
Subject key identifier:   8F:78:A6:4B:72:0F:54:BB:BF:8D:28:70:AB:49:A4:F2:B0:C0:5B:E4
Authority key identifier: 93:65:6F:B5:86:0C:9D:3C:FC:B3:56:58:54:0C:72:30:A0:BA:1E:8D
Certificate issuer:       /CN=93656fb5860c9d3cfcb35658540c7230a0ba1e8d
Certificate serial:       01A177DE5F2EDFD920F8F1A85D0F6399499E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft
Manifest number:          0C82
Signing time:             Mon 26 Oct 2026 11:00:24 +0000
Manifest this update:     Mon 26 Oct 2026 11:00:24 +0000
Manifest next update:     Tue 27 Oct 2026 11:00:24 +0000
Files and hashes:         1: h6jOEDYxDLUoVsCN3vmFzWvRbqY.roa (hash: Dq8fSfxaD+7+r7IpW+mP/VEW9T3C/oyoQfLuLak8VuQ=)
                          2: k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl (hash: ry2frJbCMkgPH90vy+b4BUk3YdfOAdNQrJ8Geiz/ZO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:77:de:5f:2e:df:d9:20:f8:f1:a8:5d:0f:63:99:49:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93656fb5860c9d3cfcb35658540c7230a0ba1e8d
        Validity
            Not Before: Oct 26 11:00:24 2026 GMT
            Not After : Oct 27 11:00:24 2026 GMT
        Subject: CN=8f78a64b720f54bbbf8d2870ab49a4f2b0c05be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5c:2d:a3:e0:77:b5:c2:a4:be:25:00:5c:b4:
                    eb:50:94:f2:25:27:2f:47:2a:e3:7f:53:c6:e4:fd:
                    a8:37:1b:c2:25:cf:fc:5a:f2:64:94:06:d6:7c:54:
                    3d:2d:4f:8a:6f:61:be:05:26:93:49:11:60:b6:eb:
                    24:62:c4:08:7b:43:c0:26:08:bd:1c:1b:98:fa:cc:
                    e4:b7:f0:04:27:f3:62:f8:e6:18:3c:cc:83:ff:e7:
                    20:65:5c:02:9b:3c:0d:24:3c:b2:0b:00:0e:82:27:
                    d0:ab:51:a5:96:1d:f4:32:26:0b:c1:8f:78:d8:b3:
                    88:91:d2:18:8a:78:c6:14:1b:a6:06:58:1e:59:d8:
                    37:5a:21:5d:e0:4d:63:8b:9a:a3:ef:87:c9:09:4d:
                    a2:47:11:59:d6:f1:48:56:72:a1:cb:5d:a6:2b:a8:
                    69:c7:19:02:e3:ae:99:88:61:0a:f6:57:cc:4a:21:
                    67:9d:29:4a:f6:a2:c7:a8:08:09:ef:fc:3b:47:22:
                    b6:e0:56:17:c7:6e:7f:7c:8f:c6:b5:f0:e8:40:60:
                    7a:bc:db:3c:59:0e:0f:57:a7:9f:17:1c:a5:a7:03:
                    e1:dd:bd:f5:77:c6:72:ef:1a:29:70:16:33:12:1f:
                    c2:de:5a:52:be:13:4c:57:6c:5c:3f:c7:bb:f4:d4:
                    61:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:78:A6:4B:72:0F:54:BB:BF:8D:28:70:AB:49:A4:F2:B0:C0:5B:E4
            X509v3 Authority Key Identifier:
                keyid:93:65:6F:B5:86:0C:9D:3C:FC:B3:56:58:54:0C:72:30:A0:BA:1E:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ab:14:16:93:f8:78:65:1e:c4:aa:4e:ea:e9:4e:04:ba:e3:
         b9:d5:01:63:93:fd:08:d1:93:12:d3:fe:0d:e5:a6:72:e9:0c:
         5a:cc:5b:ba:7c:c2:89:2f:c7:27:36:aa:fa:1e:7d:6c:79:6d:
         e8:b9:9a:1d:46:5a:8c:9a:98:3d:c3:04:c9:1d:c3:38:6f:51:
         38:91:c0:73:92:58:f7:e0:c2:f2:88:88:45:8f:7c:19:ee:08:
         b8:d5:98:66:eb:54:d3:b9:0d:4d:10:fd:58:4f:a9:85:db:97:
         a1:bb:21:d8:1c:f7:62:98:29:ee:57:73:55:b3:a8:6b:b6:0d:
         5b:19:50:e3:5c:c3:79:97:55:99:4b:5f:79:12:09:76:d5:64:
         43:26:66:ab:4a:16:63:c2:03:f4:3a:f3:39:a1:6f:dc:20:df:
         83:ca:e6:bd:6b:91:6f:61:e0:14:d0:ed:5f:35:20:e2:8d:68:
         49:a6:84:02:af:ed:84:17:53:55:c2:0f:4c:7f:32:59:07:0f:
         e1:f9:f4:72:92:d5:8d:8f:d9:40:3c:41:1f:14:66:2d:65:0e:
         ef:3d:8b:ac:d0:e3:04:c1:4d:a7:3f:75:28:7d:a3:00:8e:08:
         f7:b7:f4:57:7b:1f:a6:50:56:ce:0e:b3:77:dc:97:7b:27:5b:
         51:79:a4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:56:38 2026 by rpki-client