Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
File:                     bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft (raw, json)
Hash identifier:          YfMHO7P2SCtRRFQZqENyWSAzQfuiDRVZMbxaUQYUopA=
Subject key identifier:   A4:D2:8B:5D:2B:88:FC:E4:B7:28:25:54:7F:98:01:1D:3C:0F:39:EC
Authority key identifier: 6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C
Certificate issuer:       /CN=6d3756d540e5c17f194c45ca4738665d51accb6c
Certificate serial:       01A102B6C94ACFA8A3DE260039940D72667C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
Manifest number:          1076
Signing time:             Sat 03 Oct 2026 17:01:35 +0000
Manifest this update:     Sat 03 Oct 2026 17:01:35 +0000
Manifest next update:     Sun 04 Oct 2026 17:01:35 +0000
Files and hashes:         1: VKWk86dF5L7_6h1qT-woRGMhtwc.roa (hash: +fc4N1e1Y8Z1Wjjzpvdgqjoul4McJvf7VQNa3PnaDmk=)
                          2: bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl (hash: WSPg2IYd+NyGM6h53+yO3UEarozUEl7Kx+0kAteB2xo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 17:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:b6:c9:4a:cf:a8:a3:de:26:00:39:94:0d:72:66:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d3756d540e5c17f194c45ca4738665d51accb6c
        Validity
            Not Before: Oct  3 17:01:35 2026 GMT
            Not After : Oct  4 17:01:35 2026 GMT
        Subject: CN=a4d28b5d2b88fce4b72825547f98011d3c0f39ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:04:f4:09:ad:67:a9:b3:0a:7d:bc:17:ba:4f:
                    ca:ac:eb:e8:17:63:15:06:72:3f:d2:ff:a7:4e:fb:
                    55:8f:d2:5e:d0:e3:4f:54:b5:41:49:8e:f1:a5:6a:
                    37:0b:01:ed:cc:20:de:34:87:9a:dd:2b:b0:96:e1:
                    2f:8c:29:a4:27:7d:16:84:87:cf:f7:35:7d:64:8b:
                    5c:38:75:c8:ca:15:52:55:83:2e:bc:58:2d:a1:ff:
                    1c:4e:3e:08:2d:81:d7:ad:44:a2:ff:25:f2:0f:ad:
                    d4:82:71:a2:05:a9:21:ad:3e:00:ea:7a:45:e2:b2:
                    e9:56:06:00:9a:c2:fb:0f:23:83:89:95:67:5c:cb:
                    b9:ee:f8:b4:22:bd:1e:ba:3d:21:81:9a:74:f3:39:
                    26:2c:38:e9:d5:0a:cc:8f:f2:0c:64:3b:c5:5e:1e:
                    8e:5b:61:ed:7d:3e:77:06:59:77:1a:86:4d:37:93:
                    b4:c7:49:02:0d:04:68:48:cf:28:60:d3:09:ee:2d:
                    32:e6:70:5a:f3:9c:ef:97:80:0d:a9:61:b0:77:1c:
                    a9:4f:48:a6:f8:67:4a:6e:cf:e3:87:bc:d0:5a:34:
                    bc:d7:e4:6b:59:cc:4a:11:08:74:26:fb:40:fc:d8:
                    a3:2e:d7:4b:67:9b:a7:bc:7b:ff:c0:30:3e:5a:85:
                    78:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D2:8B:5D:2B:88:FC:E4:B7:28:25:54:7F:98:01:1D:3C:0F:39:EC
            X509v3 Authority Key Identifier:
                keyid:6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:fd:ab:8f:15:fb:cd:ff:89:b4:d6:8e:ce:ce:7b:82:c1:9b:
         cc:e8:44:f9:d5:4d:76:32:db:e3:0b:21:6c:8a:1c:4c:04:ab:
         4b:63:4a:bc:61:38:b0:1d:85:9b:59:f1:f2:c5:de:3b:74:dd:
         58:ad:67:83:a4:20:52:0f:17:af:36:29:29:20:4d:75:1b:71:
         c0:f7:bf:37:12:d1:99:de:a8:e0:49:7e:97:a1:bf:1e:29:40:
         00:ba:47:da:16:a5:52:03:13:3e:d6:24:3e:34:23:b0:0e:65:
         6d:05:fe:cc:fc:6d:af:48:ae:a0:43:78:63:f6:be:c4:2a:01:
         32:98:51:17:1c:cc:cd:12:8b:72:6d:57:12:d7:0a:1f:38:db:
         46:0a:2a:6f:16:84:aa:58:b3:a2:49:78:ea:4c:94:ed:b0:f1:
         dc:70:ae:ae:2a:43:8b:f1:bf:d9:f5:60:27:49:9e:04:34:34:
         93:e0:a8:1a:4d:e0:08:f1:bd:c5:75:49:9e:24:d2:e1:24:06:
         2a:90:9e:ee:77:26:eb:08:1d:af:08:bc:c0:22:f4:e7:27:d2:
         86:36:1f:04:03:1f:76:96:f7:b6:b0:c9:a0:2f:00:24:ef:b3:
         b8:c2:29:c0:96:8c:48:d2:22:23:9d:9d:5e:ee:0a:7c:be:fe:
         05:47:e4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:47:36 2026 by rpki-client