Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
File:                     rev8Tln35kZGDZAxFWbfH0ftqRc.mft (raw, json)
Hash identifier:          GwTC2WvRIipAujUTm2f2VgQdytDfIzujQPdRz12nJXs=
Subject key identifier:   DE:C1:F3:E4:87:80:26:38:80:B6:60:AD:C5:5F:BE:69:91:BF:26:88
Authority key identifier: AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
Certificate issuer:       /CN=adebfc4e59f7e646460d90311566df1f47eda917
Certificate serial:       01A170C9E51356E0D30327610CC4694C9705
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
Manifest number:          15FC
Signing time:             Sun 25 Oct 2026 02:00:41 +0000
Manifest this update:     Sun 25 Oct 2026 02:00:41 +0000
Manifest next update:     Mon 26 Oct 2026 02:00:41 +0000
Files and hashes:         1: 9RnRKei6gl9oZHVCyn4kDQqzyTg.roa (hash: R/Nz+fq8qLQCR73Ef868dsOsi+wbzZuFNF938QY3new=)
                          2: IgdPfhPl1P3iT1FWrsiJPEWiUf0.roa (hash: qJpCjPIGc1MaV9L1dwnXjXWQ+qoYXiY/1KG2OSBZzVg=)
                          3: rev8Tln35kZGDZAxFWbfH0ftqRc.crl (hash: xMFJd2sfxJx3u+J6OmpXYg6UFoPIm+TsuHaYScf3nGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 23:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:70:c9:e5:13:56:e0:d3:03:27:61:0c:c4:69:4c:97:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adebfc4e59f7e646460d90311566df1f47eda917
        Validity
            Not Before: Oct 25 02:00:41 2026 GMT
            Not After : Oct 26 02:00:41 2026 GMT
        Subject: CN=dec1f3e48780263880b660adc55fbe6991bf2688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:fb:fc:47:57:41:6b:9c:08:8b:b5:18:00:
                    c5:e6:26:9c:d9:49:86:72:73:93:79:2a:92:0d:95:
                    33:50:10:4b:c1:fc:d0:dd:66:24:2e:4a:d5:3d:57:
                    5d:74:05:82:02:36:1b:cc:1e:36:af:85:30:4f:47:
                    52:4f:b5:c5:f6:1e:87:5a:bd:44:43:ab:3d:3c:a4:
                    9b:12:2e:6c:11:57:41:6e:96:c8:e6:77:1c:e9:78:
                    2e:bc:fa:fa:39:b3:7b:53:99:92:e9:7f:75:31:0a:
                    3d:de:eb:53:af:c3:dc:7a:4f:3b:b4:43:8d:4b:30:
                    2d:b2:fd:0d:d8:0f:20:19:49:87:b1:bf:3e:f1:8a:
                    c8:95:3e:09:03:f8:ab:aa:69:a6:92:e2:ef:d5:84:
                    27:34:28:7b:0d:fa:ae:b5:a7:c7:b1:35:dc:df:73:
                    e2:17:da:67:79:c3:b8:68:9a:0e:28:a5:4d:b5:d6:
                    f7:d1:70:48:44:1f:b3:5b:e6:52:33:af:e9:b1:9c:
                    9b:73:bd:b6:aa:5a:b0:92:d0:a4:b5:d8:1c:69:93:
                    d9:01:ba:db:fb:91:8a:aa:30:03:bd:b4:89:53:fb:
                    9f:e2:b0:1c:e6:38:0c:58:04:e8:1c:16:e9:c6:3f:
                    7b:ba:36:46:f7:6b:dd:3d:ed:02:4b:e5:fa:7a:0b:
                    bc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C1:F3:E4:87:80:26:38:80:B6:60:AD:C5:5F:BE:69:91:BF:26:88
            X509v3 Authority Key Identifier:
                keyid:AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2d:06:8e:ff:da:fe:04:b8:29:58:11:8b:f2:97:87:21:3e:
         0f:c8:a6:64:02:d8:a8:70:38:0a:32:1c:f8:5f:40:52:62:28:
         a2:51:05:b2:98:3f:3c:68:7b:78:89:62:18:1b:d6:3e:5e:34:
         a4:da:27:6a:2b:26:97:8d:b8:f8:23:b4:d7:10:ef:f5:c5:69:
         28:cc:ca:6a:59:18:dc:a5:b9:42:bd:a6:ae:84:48:0d:ea:25:
         5f:e3:96:15:f2:97:d6:1e:9a:18:4e:e1:9a:0c:ea:a5:09:b8:
         a5:f3:fb:37:ce:a5:27:b2:ba:1e:2c:70:62:e6:2b:01:19:84:
         39:9e:9e:d7:83:11:f4:4b:2d:d7:e2:06:1f:37:80:4f:92:e5:
         3c:a4:ea:57:33:8f:c2:c5:f1:91:96:23:40:19:73:86:b5:66:
         03:e5:85:a1:6a:c8:18:10:2a:79:20:a6:2f:7e:48:54:db:f9:
         ae:e2:03:a1:6a:f0:c8:0f:48:6e:68:07:26:2d:ad:1f:13:15:
         2a:31:8c:66:4b:01:29:ac:24:82:1b:df:52:63:7f:ff:97:f6:
         f1:71:b8:66:e6:4c:76:a0:32:27:0c:22:f2:d3:62:1d:dd:59:
         10:ee:8b:f5:cc:fe:e7:a8:b9:6d:fb:5c:0f:e1:55:30:3e:3f:
         e1:f4:d0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:53:08 2026 by rpki-client