Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
File:                     aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft (raw, json)
Hash identifier:          3nehk7WImpUm6ROdVYUeTx4usJ5LMvLxBf6o2J7QfnY=
Subject key identifier:   A6:4C:D5:10:27:4C:3F:2D:8D:AD:33:C0:9F:AB:B9:AB:9C:6A:57:2D
Authority key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
Certificate issuer:       /CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Certificate serial:       01A18ED4F49ABDDE3A8665608786512ECFCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
Manifest number:          046F
Signing time:             Fri 30 Oct 2026 22:01:23 +0000
Manifest this update:     Fri 30 Oct 2026 22:01:23 +0000
Manifest next update:     Sat 31 Oct 2026 22:01:23 +0000
Files and hashes:         1: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl (hash: zTfTFbaPo5T9IiuycI4pR7FeGjDfaduVsl/RQWfbvwc=)
                          2: zIyAUwF-LJlT9SOUOwU0Pdyt4G4.roa (hash: /Tmx9Ly9zFoq7yV+T0VGCTT8klLFQNZ6UtKDdkPo4ik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8e:d4:f4:9a:bd:de:3a:86:65:60:87:86:51:2e:cf:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
        Validity
            Not Before: Oct 30 22:01:23 2026 GMT
            Not After : Oct 31 22:01:23 2026 GMT
        Subject: CN=a64cd510274c3f2d8dad33c09fabb9ab9c6a572d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0d:b7:3e:54:71:2e:5f:97:dd:27:04:38:85:
                    9e:9c:b0:22:68:3a:19:4f:c2:60:49:6d:83:36:40:
                    ab:5c:55:17:fc:8b:77:1b:57:e8:b5:db:4d:7b:34:
                    bb:8d:b8:23:4c:2e:86:77:e0:94:14:de:4d:85:0d:
                    68:8e:fb:a7:b5:29:fe:a7:fa:5d:f8:01:76:6a:e9:
                    db:9e:38:48:e2:e9:f2:d9:25:7b:72:65:79:2c:c2:
                    90:ee:87:37:1e:0a:b9:04:4b:19:7f:a2:33:33:bb:
                    21:23:da:32:ca:42:a5:ab:6d:a4:cf:25:42:7e:3d:
                    57:05:fe:30:b0:92:42:45:de:17:55:b6:f4:3e:ab:
                    75:77:55:cb:cd:27:94:22:b5:e5:20:14:96:be:30:
                    28:80:ad:31:de:65:a9:e6:8e:84:e9:ce:7b:5f:58:
                    6d:0c:66:06:1d:eb:73:c4:82:8c:71:7c:3a:4b:33:
                    c9:59:e0:e8:06:91:67:c6:16:f0:0c:da:8b:e2:06:
                    89:45:96:b0:62:3e:8a:d9:12:43:95:3e:71:fc:8b:
                    75:83:72:86:88:a8:cd:c9:f0:4b:90:2a:49:47:4d:
                    c7:6b:ef:02:5c:2c:1e:70:63:62:15:70:95:2c:d0:
                    a8:98:c0:12:1d:56:3b:d3:4c:78:34:77:7e:65:fc:
                    0f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4C:D5:10:27:4C:3F:2D:8D:AD:33:C0:9F:AB:B9:AB:9C:6A:57:2D
            X509v3 Authority Key Identifier:
                keyid:69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:16:99:50:14:ba:63:c9:e7:a2:ee:07:35:51:5b:99:ed:b2:
         85:06:14:72:ff:58:f3:41:da:f8:5b:9f:67:9b:3f:57:e8:9c:
         da:64:84:7e:5e:e5:bc:5a:cd:13:a3:ee:38:7b:fe:7c:29:91:
         8d:b6:60:1a:04:8e:58:bf:a5:14:67:41:57:3e:9f:38:39:d9:
         bf:aa:67:a4:89:a8:9f:d4:58:8e:c5:ae:e8:1d:26:0a:55:2d:
         80:cb:28:51:f4:d2:b8:b4:59:a7:a8:fd:11:47:51:9a:21:a7:
         33:86:ab:64:97:18:be:9a:09:96:4e:1e:ca:fb:9e:3e:6c:49:
         2a:dc:19:07:ae:18:f2:4b:32:9d:5e:4f:e5:f3:83:a5:75:5a:
         3e:ed:34:f1:97:98:4f:8f:a3:47:7a:2d:9b:2b:9c:86:70:56:
         99:86:3b:3b:4b:81:b5:07:4b:13:53:60:97:a7:71:d7:4e:f7:
         68:53:cd:a3:63:fb:60:cb:02:e2:9a:13:5c:af:6f:df:86:c5:
         78:61:6c:23:68:b1:ea:71:e9:bb:16:9c:ca:65:94:05:cf:8c:
         14:5b:ff:29:dd:ed:7d:3f:b2:aa:16:90:e5:e4:f1:35:ca:4a:
         cf:5c:8e:0e:5c:6e:c2:ff:1e:e9:e7:0a:63:c9:69:ff:59:c1:
         5e:3d:45:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 03:25:46 2026 by rpki-client