Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
File:                     V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft (raw, json)
Hash identifier:          FA2+H61aEyG3U9EzsJ79PT50DYsKZFrMwIA+iMMKeKc=
Subject key identifier:   13:95:C7:84:9F:66:3B:82:1B:DB:E5:8D:E4:24:45:4E:DD:74:36:4A
Authority key identifier: 57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
Certificate issuer:       /CN=57db143c17fb051944426a79f24334c25cdbc234
Certificate serial:       01A18419FC0C194AF2C3CB81870FF94D5B2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
Manifest number:          059E
Signing time:             Wed 28 Oct 2026 20:00:57 +0000
Manifest this update:     Wed 28 Oct 2026 20:00:57 +0000
Manifest next update:     Thu 29 Oct 2026 20:00:57 +0000
Files and hashes:         1: T5e0TgseHoV5T0D1V0ELGlI9FBc.roa (hash: Q9H/hI7Y9VsQ4ugMF8ryTSl2yPuCfHdqE0UId9QIWbI=)
                          2: V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl (hash: BCbuV4bo6SCjZWj5NfzSuypjI77eOOUbMgI7ovVqIsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 20:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:84:19:fc:0c:19:4a:f2:c3:cb:81:87:0f:f9:4d:5b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57db143c17fb051944426a79f24334c25cdbc234
        Validity
            Not Before: Oct 28 20:00:57 2026 GMT
            Not After : Oct 29 20:00:57 2026 GMT
        Subject: CN=1395c7849f663b821bdbe58de424454edd74364a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:74:88:6d:63:0e:77:34:ad:97:b8:17:9e:09:
                    43:4f:95:35:b7:e6:3b:b7:c8:0b:26:04:cf:12:d5:
                    9c:25:99:40:f0:a2:b6:03:15:a4:fb:49:dc:75:7c:
                    a6:d9:f3:f2:50:8a:0e:cf:f2:8f:10:68:ed:3b:5e:
                    63:d6:e9:95:b6:f6:3f:89:b3:9f:ad:69:18:6c:c8:
                    ac:a8:62:37:20:f3:1d:50:4e:e5:00:2b:13:a7:df:
                    47:96:62:27:fa:a0:b6:d5:98:c4:bc:b8:81:09:2a:
                    d7:57:13:e1:f6:b7:c0:17:7f:12:37:f2:40:18:13:
                    ba:67:c4:57:68:34:d5:bf:60:6e:a6:d1:e1:0b:a2:
                    7d:93:1d:29:cc:5c:37:ab:a8:72:3c:da:14:2d:14:
                    d8:57:7d:b7:15:d9:51:b1:ba:9e:a1:c5:fe:44:2b:
                    32:94:67:e1:04:67:33:84:2a:b8:18:85:87:19:f2:
                    1d:b5:a4:93:01:3c:93:16:0d:27:2b:bb:ea:43:50:
                    cd:19:a5:79:04:9f:4b:30:6d:c1:67:e3:bf:2a:63:
                    c5:2d:e5:1e:a4:d7:23:b0:c8:16:19:50:79:d3:64:
                    a8:e0:85:bc:73:06:b3:ec:8f:14:3d:b1:97:2e:12:
                    b4:6a:4a:09:55:d9:d6:be:40:ea:3d:93:ab:be:78:
                    2e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:95:C7:84:9F:66:3B:82:1B:DB:E5:8D:E4:24:45:4E:DD:74:36:4A
            X509v3 Authority Key Identifier:
                keyid:57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d6:12:3e:87:75:b5:a0:53:00:39:71:99:92:05:89:10:da:
         30:3a:0f:e6:0a:ae:50:0b:06:9a:05:32:13:fb:1f:47:58:78:
         4e:40:25:41:cb:1c:72:db:6b:b0:5c:ba:cb:6f:ef:0d:fc:0d:
         61:3f:31:28:02:04:79:0c:5b:44:74:62:9b:18:b9:48:bf:c4:
         af:c2:58:74:d3:0f:62:1c:0e:45:6f:c6:e4:a9:8f:a3:fb:ae:
         a8:76:a0:0f:a0:95:2c:ad:82:43:7f:3a:25:f3:14:08:ad:58:
         4e:eb:28:05:ef:aa:91:05:c7:5a:8a:1d:3b:c2:ee:af:39:03:
         76:32:44:4e:a2:52:b6:27:5c:43:42:3d:ea:c7:5f:8b:63:ef:
         59:23:6d:c9:ce:5c:6a:7c:bc:73:48:a2:2e:11:8c:8d:01:34:
         39:1d:cc:2a:4d:3b:ce:1e:18:f8:40:9c:fa:6d:30:d7:84:fe:
         fc:13:09:db:ef:d5:65:5c:2b:4e:09:ad:b9:9c:95:31:d6:9e:
         83:82:02:eb:0e:de:6c:10:46:fd:8f:b4:df:a9:fc:dd:58:8b:
         35:af:f6:e6:39:79:19:b8:47:5c:1c:7d:c0:5e:80:1d:b8:31:
         77:95:cd:ce:25:7e:50:6a:ce:91:e1:c9:3f:47:6f:82:8f:d3:
         a0:67:be:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:55:11 2026 by rpki-client