Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
File:                     Dm2P132t49P5bLSZMZSMJymtoN4.mft (raw, json)
Hash identifier:          H+qC7J98kkIb5Tjb3L0Za4i6nYSZNB6CDX3PqfPfh1A=
Subject key identifier:   CA:B9:3C:33:CB:A3:C5:3B:D7:B0:2D:F8:D0:F7:D5:30:CB:77:0B:AE
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Certificate issuer:       /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial:       01A13F02D0830C290110AA2A5D19DD4619E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
Manifest number:          1AA7
Signing time:             Thu 15 Oct 2026 10:01:51 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:51 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:51 +0000
Files and hashes:         1: Dm2P132t49P5bLSZMZSMJymtoN4.crl (hash: wRTC7rAQkQUkBAytdw8Hc5e0tRHf21f22xucoI5xlcY=)
                          2: DzslbHixmzBYrsPf_coOdi4vCac.roa (hash: VreYJplCemlpCEq1mBOMn3xaebIevlMt/pCSqFrimOU=)
                          3: ROslS2q2gassZHFsPyNfMnp6lnQ.roa (hash: KypsIjFPEkDmNdlDZHjTDjD0J5MLcaB0s63R8Glt4Zo=)
                          4: iglWtYkBC9ngDdbZompM_rZYncA.roa (hash: nTTJKP/icYG9HF3qJuhxJ0nRjLYKtjmOl9gPDGv0VMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:d0:83:0c:29:01:10:aa:2a:5d:19:dd:46:19:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
        Validity
            Not Before: Oct 15 10:01:51 2026 GMT
            Not After : Oct 16 10:01:51 2026 GMT
        Subject: CN=cab93c33cba3c53bd7b02df8d0f7d530cb770bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:7e:20:ff:58:d5:80:b8:b2:96:07:71:cf:
                    76:72:e0:6e:15:6a:58:42:59:d4:23:7d:1c:ff:76:
                    5a:be:b5:c2:4d:59:bf:e5:84:79:e1:9d:ff:a8:16:
                    3c:30:37:b0:15:5f:68:46:94:db:85:47:1b:ea:22:
                    72:a1:19:dc:87:43:2c:c7:50:60:29:e1:7a:e0:00:
                    97:2d:70:67:88:f6:91:1f:01:25:75:2d:6a:b9:68:
                    c3:1c:cf:98:50:c7:a3:92:6d:fd:24:ba:56:72:4c:
                    8d:98:bc:8b:47:2f:fe:ab:00:d6:f9:f5:28:07:f1:
                    19:a3:7c:6b:01:16:62:82:f0:4d:bf:7c:63:b5:15:
                    fd:7e:4b:ba:94:82:31:ec:5a:d0:91:c3:3b:34:c3:
                    db:ef:8d:1b:cf:e5:1f:20:3b:dd:3e:59:af:38:c6:
                    77:26:1b:71:82:f2:35:62:12:0e:17:9c:d2:d8:8b:
                    fb:0d:09:26:35:4c:eb:ca:0c:56:b1:78:e0:7e:f5:
                    f4:2b:8f:86:75:05:92:94:9c:e3:b2:65:dc:c2:d5:
                    d7:c3:20:08:a0:2a:61:eb:0c:86:55:68:c0:2b:69:
                    20:da:b8:c9:9b:71:42:03:88:54:92:41:b4:16:ce:
                    74:2d:88:fd:0d:38:13:04:7c:58:54:b3:07:5f:34:
                    93:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B9:3C:33:CB:A3:C5:3B:D7:B0:2D:F8:D0:F7:D5:30:CB:77:0B:AE
            X509v3 Authority Key Identifier:
                keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:91:90:e3:1c:a7:43:13:51:15:a8:75:1a:bd:30:71:64:c2:
         53:f2:45:cd:62:48:24:ab:91:e3:63:a5:34:f1:4a:c3:82:0b:
         63:5b:55:25:77:12:5b:24:7c:8a:a2:4f:4b:e5:55:7a:0b:4d:
         c2:dd:98:82:ff:3c:13:77:aa:86:5f:49:d9:9f:53:00:ca:45:
         58:72:e5:99:82:4f:67:a0:a9:04:74:08:ef:33:a4:39:95:b1:
         a6:09:e4:c2:da:7b:ff:96:79:0d:ed:66:df:fe:d0:22:4d:26:
         e3:19:2a:4a:8c:df:c0:57:19:e0:f8:c9:7c:8f:1d:9c:86:19:
         bc:e6:5d:5c:0a:80:1e:37:b7:d1:86:c0:20:d9:fa:72:c0:1f:
         73:45:5d:b9:ef:01:18:c2:57:68:50:48:a4:66:07:34:ae:ec:
         72:df:6d:d7:76:74:0f:79:0e:4e:2c:4e:71:91:fb:5f:1b:25:
         8a:5b:c6:ca:6b:4b:68:fa:28:af:f0:27:35:ac:48:c9:f8:a4:
         38:6c:a5:f7:4c:6d:16:a3:d3:ae:aa:3b:65:33:95:c6:1e:05:
         1a:4e:4e:6f:bc:f0:65:96:f1:d7:de:d6:01:31:f2:8b:0d:d7:
         45:d9:1e:09:98:d3:da:82:3b:fe:ef:a7:38:bb:61:58:20:25:
         bc:65:bf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:22:47 2026 by rpki-client