Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
File:                     loH8jHM3xqHSC4SADfhion5f29c.mft (raw, json)
Hash identifier:          VDxMRwHFeHwrRdId4DuWhOMsmifShMZxkOIo5H/Bv78=
Subject key identifier:   84:0F:0F:54:8F:C2:C5:C8:C6:AD:7A:FB:54:EC:4C:67:1F:52:81:B1
Authority key identifier: 96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7
Certificate issuer:       /CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7
Certificate serial:       01A181F47FF77D0A1ED10F646E2F7AA43640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
Manifest number:          0569
Signing time:             Wed 28 Oct 2026 10:00:46 +0000
Manifest this update:     Wed 28 Oct 2026 10:00:46 +0000
Manifest next update:     Thu 29 Oct 2026 10:00:46 +0000
Files and hashes:         1: 62xv2lQHxNM_l_YrJtcwOfnMuYw.roa (hash: gV7lklXQn/5hqUDHVsvJYf+Kfk/HDRP/U+DCEe4jlA0=)
                          2: PFGIVa0BOcrYn7LDn1lpTGcFlyg.roa (hash: KajiJYew3aM31pMlayFlO34jp69DaxrhYFWYOe/gl/8=)
                          3: i9dvXXtl86NkntskYAQaMtaTQus.roa (hash: jn3xesrUXS6xuu+2iCltP+AJecvksZHI4qYuAZ+46Rw=)
                          4: kH2vVEZ7NeBnNJ25Bfzxs-l-m2Y.roa (hash: lUmva7T7suBnjlbuPKGwGSN8q5aV/viwDRe/Z9TY9sA=)
                          5: loH8jHM3xqHSC4SADfhion5f29c.crl (hash: /W+AIGFUROlqksr2ID0O8lM0U7dP2A7dKtwWE8yBTWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:f4:7f:f7:7d:0a:1e:d1:0f:64:6e:2f:7a:a4:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7
        Validity
            Not Before: Oct 28 10:00:46 2026 GMT
            Not After : Oct 29 10:00:46 2026 GMT
        Subject: CN=840f0f548fc2c5c8c6ad7afb54ec4c671f5281b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:99:45:d8:b0:d0:74:56:44:60:d5:c7:c6:
                    be:a6:91:e0:01:53:e2:c7:99:8a:9b:82:4b:6d:34:
                    88:15:1a:bf:86:d8:1a:8c:f6:5d:35:8c:c2:1f:ab:
                    c3:ea:1f:ce:cd:a6:cb:58:bd:78:e2:93:6b:3d:25:
                    f0:cb:65:1e:ab:b3:7a:b4:3b:38:32:80:5c:ce:7b:
                    7c:54:b8:c4:fb:eb:52:ed:f9:cb:a6:3b:b0:68:d3:
                    09:1f:65:47:e2:62:92:35:32:3b:da:84:02:fe:d5:
                    8f:fe:24:c4:01:f0:92:21:44:4b:f9:59:c5:be:b9:
                    27:e1:68:4d:9a:f4:19:5b:42:0b:06:39:ca:cf:4e:
                    6d:b7:8d:41:b0:6a:e8:76:78:a5:cb:11:68:2f:92:
                    f2:ed:12:90:e1:32:d5:e6:98:25:77:09:4d:81:b7:
                    88:e9:3e:6f:6b:5f:33:f1:09:8c:ff:09:57:6b:6d:
                    90:a6:f9:0f:e1:5d:d3:32:26:58:ab:4f:ce:61:39:
                    a2:8c:0b:24:4f:52:ee:93:58:f1:ef:b0:95:df:06:
                    d7:a2:a6:3f:59:71:f2:6c:26:ec:7e:1f:81:87:ae:
                    8b:64:0a:3a:da:0c:a0:cd:63:a1:cd:f8:0a:5f:c5:
                    9a:87:84:88:4a:c5:03:ad:34:76:31:56:3c:01:f2:
                    4f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0F:0F:54:8F:C2:C5:C8:C6:AD:7A:FB:54:EC:4C:67:1F:52:81:B1
            X509v3 Authority Key Identifier:
                keyid:96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:11:46:8f:1c:f5:76:3d:ba:0d:98:87:98:20:4e:67:55:67:
         46:53:4e:60:f5:2d:f5:e6:71:77:75:49:82:cc:4d:ca:ff:f0:
         0d:31:49:5f:cc:4c:72:25:ac:97:f1:27:61:3e:9f:71:fe:30:
         f5:94:36:e0:5e:03:54:38:ac:3c:a3:f7:9d:5d:63:36:fa:e0:
         2a:70:b1:ae:a5:4f:aa:06:f1:d4:03:c7:fc:ef:a7:8a:31:7c:
         89:2f:f2:3d:3a:81:08:53:8f:8a:f7:56:4b:c0:ad:e0:27:ac:
         cd:4b:54:7d:14:c8:26:ac:92:c5:3d:f7:23:54:00:88:40:5e:
         6f:9d:2e:9a:6b:49:1f:18:c0:16:fd:66:52:cb:39:58:96:0f:
         80:5b:70:88:0c:9f:2e:f0:bd:94:e9:2e:ab:06:b9:14:6b:36:
         9f:5f:11:ad:14:63:b7:67:b6:bf:58:8a:e2:c0:33:e0:19:6e:
         28:da:c9:af:94:f8:60:a3:77:ba:66:d3:8d:75:a6:be:31:40:
         e6:36:0f:b6:23:bd:f4:1f:ff:18:0d:22:d0:6a:a9:a7:d7:8b:
         2b:da:93:fb:64:10:22:1b:6a:27:a4:e4:b0:f0:db:c8:c2:26:
         2c:b3:1c:16:01:82:3b:68:6d:1d:c5:ea:b8:dd:bb:7d:ab:91:
         50:0e:0d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:27:23 2026 by rpki-client