Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
File:                     jo6Xer76Kh-ZXonJR_79Rja3lhw.mft (raw, json)
Hash identifier:          Yj8v55ecZyJq9XZrBSNPnHsvJfZqztcArtOwqQRRcrA=
Subject key identifier:   1E:9C:33:EE:22:7A:82:57:2B:24:4D:93:C6:3B:FD:1B:14:FA:9E:95
Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
Certificate issuer:       /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Certificate serial:       01A17DE172B63F7BCB16E555A8807482F09B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
Manifest number:          03EE
Signing time:             Tue 27 Oct 2026 15:01:29 +0000
Manifest this update:     Tue 27 Oct 2026 15:01:29 +0000
Manifest next update:     Wed 28 Oct 2026 15:01:29 +0000
Files and hashes:         1: 85WCcONItIMRuSMaOxRM44ohzIg.roa (hash: /TIQDAXeA50QelIx61Q5b/Z25D6OyfrLynQ4VaudkRU=)
                          2: GguuW88MnDxZQtxHShToCWmzycw.roa (hash: 9LiCFQ3pp2hU10ub1i0PEMHsFPnBj2LSUbi4TOl8/q4=)
                          3: eJxTub2nURvlz2j40yWd1xTSiqE.roa (hash: QGoAgA9UwHv2M3PrJjmaC35k17I6lqvqOagw7/jlHdU=)
                          4: jo6Xer76Kh-ZXonJR_79Rja3lhw.crl (hash: oeHzQMaJdhjc7lKYmX3MKgiXUt8LXcFFgQprjmHJzvA=)
                          5: yAZ2o4hGGbiVKtksvyeCYsCtR_M.roa (hash: uOD1sfAE/4XRCqkt1R1YaZ63d+KOVm97JX7M+mojjCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:e1:72:b6:3f:7b:cb:16:e5:55:a8:80:74:82:f0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
        Validity
            Not Before: Oct 27 15:01:29 2026 GMT
            Not After : Oct 28 15:01:29 2026 GMT
        Subject: CN=1e9c33ee227a82572b244d93c63bfd1b14fa9e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1e:c0:98:62:d9:22:1f:14:36:f0:86:e0:a4:
                    05:ea:88:54:83:b2:e7:6f:eb:9c:ab:df:cd:72:03:
                    02:bd:66:c4:48:98:9f:6e:9d:27:30:a5:5c:1b:a4:
                    28:c8:65:c4:b1:36:93:36:29:08:58:cd:6e:dc:ef:
                    6c:37:0d:0b:4d:8e:40:00:87:e3:6b:48:55:9b:00:
                    4b:78:0f:4f:04:8f:41:8c:92:43:b3:37:62:86:00:
                    90:45:23:35:ec:11:8a:2d:27:6d:59:22:de:42:fa:
                    7b:6a:1e:d8:13:10:f2:37:14:af:ed:93:ef:69:a1:
                    db:fd:e2:89:f1:1a:1a:f7:44:76:2f:80:d7:da:3b:
                    d3:c3:45:fa:78:9b:3a:24:13:6c:38:f9:cd:40:f1:
                    9d:c1:81:48:2a:55:f9:60:89:27:31:72:27:1e:69:
                    12:49:3e:ea:b3:74:8d:98:d3:63:97:eb:d7:6f:b6:
                    a8:a0:6b:f5:a2:52:90:ab:17:78:6a:39:57:b5:0d:
                    cc:90:d4:2d:2e:2e:4b:15:ec:74:38:50:fc:51:61:
                    1e:1f:cc:14:57:a1:2f:4e:08:a4:d6:d6:37:c5:48:
                    40:be:ca:35:40:ed:78:75:a6:4e:5b:40:f7:be:84:
                    1e:93:39:18:da:87:43:d8:86:60:9d:10:af:e3:b4:
                    d9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9C:33:EE:22:7A:82:57:2B:24:4D:93:C6:3B:FD:1B:14:FA:9E:95
            X509v3 Authority Key Identifier:
                keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:cd:f5:ae:38:08:50:ef:74:1f:93:aa:9f:77:11:5a:61:d7:
         a6:fa:9e:00:1e:50:27:af:61:93:c3:8f:97:1e:3a:f2:6f:f5:
         3e:6b:a4:68:a9:62:79:f5:2e:ef:b4:0b:8a:f6:90:71:97:df:
         ae:84:60:83:e3:c7:cb:f2:e7:90:d6:3e:8b:d4:16:3c:9c:65:
         20:28:5f:8b:6c:59:f9:51:7f:c1:0b:22:e7:85:60:43:af:29:
         cf:9a:0f:b5:b8:22:83:f4:06:28:a5:6e:bb:bb:36:b6:b6:99:
         20:01:a6:44:67:b2:d5:0f:16:d5:98:0e:2d:9d:22:5f:d1:4e:
         03:e5:10:d8:9e:86:77:01:38:de:4c:21:e5:6f:c3:47:bc:9e:
         41:f0:c6:ad:6a:1b:57:c8:70:2d:5a:5e:ef:b0:d1:eb:0a:66:
         d5:94:ae:fb:af:c0:9b:31:f8:2c:65:3b:a4:df:c2:5a:d0:7c:
         c6:d0:63:a0:ef:45:7d:8f:a5:88:cf:b0:16:33:0e:b2:4d:12:
         cb:03:f2:6f:55:2e:56:73:2d:72:c7:e8:d6:27:ff:fc:9a:ae:
         d5:2e:50:79:3a:37:fc:6e:1a:f9:aa:f8:b9:59:18:cd:97:ec:
         b1:90:a4:43:2f:e5:66:71:0d:cb:60:9f:1b:53:f6:6c:d7:a8:
         81:05:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:43:48 2026 by rpki-client