Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
File:                     m4Nem003buarbK0nXiQ89ATBKvQ.mft (raw, json)
Hash identifier:          z33MfzQYiHcBctWtmg7pAON5tSOcCPiTR6KcbqaQ2TE=
Subject key identifier:   65:68:02:C1:91:5B:12:32:FB:96:FD:3A:56:DE:51:35:C6:97:BA:D5
Authority key identifier: 9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
Certificate issuer:       /CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Certificate serial:       01A1035B1A91F256A85BC0E8A40A17C606F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
Manifest number:          1A85
Signing time:             Sat 03 Oct 2026 20:01:04 +0000
Manifest this update:     Sat 03 Oct 2026 20:01:04 +0000
Manifest next update:     Sun 04 Oct 2026 20:01:04 +0000
Files and hashes:         1: m4Nem003buarbK0nXiQ89ATBKvQ.crl (hash: U1fZJSG1B6gu5gWS6wif33JR1gJUR7ZqwIRRy02dA5w=)
                          2: wY32X17vqmE6TNpSn-iDhOxjobk.roa (hash: vfOtRMFNB5neX98f6+6QdNtzcKjmVk0nCI3PhC1o6Kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:5b:1a:91:f2:56:a8:5b:c0:e8:a4:0a:17:c6:06:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
        Validity
            Not Before: Oct  3 20:01:04 2026 GMT
            Not After : Oct  4 20:01:04 2026 GMT
        Subject: CN=656802c1915b1232fb96fd3a56de5135c697bad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2b:a9:95:2c:ec:15:88:6e:95:06:80:96:c4:
                    45:43:66:cc:83:e6:c6:6f:ee:98:2b:50:8a:dc:1d:
                    2b:b7:52:1c:8f:2c:fd:4e:0c:3b:e6:53:e4:b8:ea:
                    7e:a8:bf:3d:48:fb:0f:47:be:97:2e:c2:04:3d:7f:
                    45:8b:74:a5:5a:5d:0c:50:d9:e9:77:05:4e:33:57:
                    54:37:70:1e:e2:09:f1:2b:48:10:22:4f:28:c7:4f:
                    20:56:44:ca:77:21:24:9a:67:fd:b6:cc:17:ce:46:
                    d1:a8:ce:8c:db:69:f4:35:8b:5f:4a:69:08:63:5f:
                    4f:94:b7:a2:36:aa:45:14:42:0b:21:c6:12:e0:2f:
                    3c:ec:fa:66:68:c2:65:2a:ef:6b:79:51:90:1a:7c:
                    38:d2:e6:8b:47:43:03:80:4b:04:1e:a6:ed:1a:45:
                    58:15:f3:16:2d:79:0a:12:2f:8f:af:9e:1e:52:15:
                    2f:34:53:70:7d:60:b5:45:2c:ce:be:ac:e7:25:9a:
                    a8:af:e8:11:24:0d:3e:54:66:94:22:5e:74:3f:7a:
                    11:f1:04:c9:83:aa:7f:e4:da:af:80:42:ab:83:5d:
                    4e:21:b6:d2:33:ce:3c:5a:13:4c:b5:c1:a3:60:f0:
                    64:c0:bc:ae:fc:59:0a:f3:74:17:ec:dc:79:e1:3b:
                    c9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:68:02:C1:91:5B:12:32:FB:96:FD:3A:56:DE:51:35:C6:97:BA:D5
            X509v3 Authority Key Identifier:
                keyid:9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:96:d0:f2:c0:59:77:87:d5:4d:13:74:ce:09:e4:bc:31:4a:
         15:b7:85:c5:55:87:b8:9b:2a:b0:8c:2f:9b:7c:1d:88:7f:ff:
         03:ee:85:25:3f:f8:70:66:97:ab:cc:28:20:3a:14:37:1c:bf:
         2a:b9:81:52:0d:a2:b7:5a:5c:27:92:df:29:10:a9:d4:4c:37:
         31:bf:51:6d:29:a3:61:1d:1c:78:02:46:6d:12:8b:ee:25:fc:
         be:9d:45:70:59:ba:49:b8:3e:41:12:46:a9:0a:dd:8e:8c:77:
         fb:03:a8:28:5f:02:3f:dc:63:5a:90:9b:ae:b8:58:5c:92:7d:
         16:ca:3e:57:87:32:a9:fe:de:1c:6e:4b:96:c1:85:78:c3:55:
         37:48:06:e7:6c:50:4d:16:ce:48:a8:e9:b5:79:b6:95:88:a1:
         18:b4:88:19:69:cd:0e:6e:ae:89:ed:99:e2:21:81:fb:59:1a:
         81:e6:da:47:56:27:0c:cb:e8:d6:1f:6d:f5:1d:f5:ce:3e:8a:
         17:37:49:f3:06:c5:cf:e3:12:e0:ee:76:2e:93:87:84:b6:9e:
         60:d9:1b:e9:cb:c0:1a:0b:6b:9b:ef:05:87:58:98:d5:f7:6c:
         6a:fa:86:67:a4:bd:50:f0:99:04:22:ae:a0:47:c3:e9:af:14:
         4f:d6:8d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:04:35 2026 by rpki-client