Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
File:                     snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json)
Hash identifier:          Md6aW8uBcJGaY/ziQCoDJ/X0/CMpcngNF4cru1cgG5o=
Subject key identifier:   B0:96:E6:96:74:22:09:85:1D:08:D8:4B:BA:78:19:2C:39:C1:72:A3
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Certificate issuer:       /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial:       01A17EF42F374CC1B8FEFDCB41585145A720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
Manifest number:          15F6
Signing time:             Tue 27 Oct 2026 20:01:34 +0000
Manifest this update:     Tue 27 Oct 2026 20:01:34 +0000
Manifest next update:     Wed 28 Oct 2026 20:01:34 +0000
Files and hashes:         1: 604DVjW89FcTF-J3OlDY0xygtP0.roa (hash: DEfDKsdOogNIkUL8SOV8s+auFLI8n9dOB4Wep4bTTqg=)
                          2: 8Lu4DZzB_vxfnH6NwGiNXO689Ug.roa (hash: rEMwOO6lSnO1YlEyeJow58wL/2TfCKPn4IBjRuIkc0Y=)
                          3: 8lPmNR8kC5qE5Lxt_zKmkqCnA_M.roa (hash: Ik4QED5F6sI3OJklEdpUYZ0TKdybSr6g6ZurSavfP2U=)
                          4: EIJhIjJtEMnHVUQ212bTckjgB0I.roa (hash: EybXD780CwAqGIpHjiQwUZRlhbfLzk1+eybY/uGp/io=)
                          5: G25W8rWynHVqOw08BsNDQCX7r4k.roa (hash: lP+BuX9RXuXg15DfmgethXUeCq5zgrMORumyH2g7dwI=)
                          6: JFd9BHy0Nxa89upjrAgFVTR3EO4.roa (hash: Jkab6LW8tUPmu7eFr3Cbffo3EOm9TOdlDCvxF4uia6E=)
                          7: LDiAx4mH-l2McqHvkuEwEg3VQmo.roa (hash: hHjSOBQ7GK7UhrCnhltMggAjTsVyGTTWQh8ZK+1z/d8=)
                          8: RZ7OjE_uz9kQm_N05glcQaVKBCI.roa (hash: FZSwjKnEe/WNTvIFtlBH2t2jJQlqscx5RYqxrilnkJM=)
                          9: b1C5tQPSDgyOYMEa2vtiHCVTu3w.roa (hash: m+CwEMaGPey4t5aVnMPNBJGIOj9PYMcxJas6I4mb38c=)
                          10: ci2RBJP7wBZT9607Ek93x3v-DJg.roa (hash: rQsPZOnMLyTQdUIKObokqHCmODTdjtz2irzXClA4KLY=)
                          11: dS0fvHXBhFw8I4isU2XioLXpRxM.roa (hash: 5TqIfIhP/SO9ksAoUP3Ktq7aWt1McVI3y+SBhdLlUlQ=)
                          12: ezjdknW8yKvW_oPzf0czr_SHPos.roa (hash: Ke5tCHtNlbJY4VFVoI0K+8QDexK6VL6V1j/4AYy554g=)
                          13: fJS637JzUY9ugv22p8_OUjWaiaw.roa (hash: 0k+9V5c/ReVam6mmzzfcrumGw60s8Iaw9s34MK/6hIU=)
                          14: jU4Lr0RWqeKwbtj_mpkI_cSuuKQ.roa (hash: yPSwJ7BnVd6OtmjXkcMdWkJgliiWudINiSFU9FCJQiQ=)
                          15: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: mkkSyrNqsQWLEit+JLONHTnyBmRA6Ps2Yli+L0tKLIo=)
                          16: xeKu-YZxEc8ydQI0uzpgttKRF9s.roa (hash: OIvXQcQeayjejLI4847MVkofRUX3vV1PuAUvz7Z84Jc=)
                          17: yYo92JwdAK0Yb36h4od0SkR-8PQ.roa (hash: UkVRpXuv1yNCqqHU2bi8PbnwrwXCTcNm+/wk+zbOQNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 20:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:f4:2f:37:4c:c1:b8:fe:fd:cb:41:58:51:45:a7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
        Validity
            Not Before: Oct 27 20:01:34 2026 GMT
            Not After : Oct 28 20:01:34 2026 GMT
        Subject: CN=b096e696742209851d08d84bba78192c39c172a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:c4:ad:33:7d:7c:7f:23:b3:51:c5:43:7c:
                    15:0d:fd:3f:20:31:ea:46:40:48:69:9f:a0:10:64:
                    db:1a:46:4b:2e:0c:c2:c3:43:5d:93:92:a3:eb:da:
                    97:4c:d8:23:d6:7f:a9:11:e5:dd:86:8d:10:a3:7b:
                    87:4e:45:46:7b:93:f0:d6:8c:29:c3:7b:3e:97:a0:
                    19:1d:f6:af:ff:a1:e2:39:9e:72:4f:6a:d2:06:d3:
                    03:c1:3a:45:07:de:85:5a:de:88:ad:bd:e6:1b:96:
                    dc:c6:26:c4:ee:f7:c7:bb:59:9b:c4:9a:a1:c7:6a:
                    4a:0e:25:e7:91:b6:a9:b4:1e:5d:6e:c9:7c:d2:ed:
                    fa:36:65:b3:99:0b:70:af:fe:ab:5b:16:a2:7c:d0:
                    09:f5:7a:12:da:cd:07:d2:94:92:ad:dd:87:1b:e8:
                    2b:9a:9c:5c:a2:37:b2:44:05:a6:97:a4:7b:3a:4d:
                    2e:09:72:75:54:cf:af:79:4d:9d:50:d5:64:e8:41:
                    a3:97:2f:c9:96:05:ea:0f:f6:70:78:58:8d:8d:59:
                    27:14:19:27:d7:b0:1f:cc:b3:49:8e:1f:71:08:b5:
                    5f:a5:49:28:ce:9c:38:10:99:e5:53:e9:78:da:c6:
                    f9:9e:47:fa:1f:ea:92:a7:62:8d:1e:c8:ec:b9:cf:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:96:E6:96:74:22:09:85:1D:08:D8:4B:BA:78:19:2C:39:C1:72:A3
            X509v3 Authority Key Identifier:
                keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:32:a1:a5:6b:d0:f8:f4:c3:a6:99:41:b6:19:e5:ea:2e:01:
         a8:6b:09:bd:3a:b5:b8:55:29:93:04:cb:38:ff:e3:f9:a3:9b:
         97:87:81:36:53:6d:c5:6c:ef:2f:27:70:82:15:ca:56:2c:77:
         cf:e6:e5:f8:87:df:08:0a:67:d2:3f:e4:a1:a8:70:4c:74:7a:
         8c:9f:02:23:f1:dc:54:8f:70:2e:19:5c:e3:1a:6a:80:cf:89:
         ed:a2:b4:9f:3e:86:d5:3e:7a:27:60:7a:77:36:01:8f:fb:b6:
         8d:33:40:ef:8f:25:d1:bd:a4:5e:5a:24:a8:06:31:60:eb:6e:
         3b:ae:0c:99:9a:73:6c:a2:a3:aa:85:03:c8:34:4e:f9:68:40:
         b0:cc:f1:48:bb:42:7a:38:5c:36:55:35:1d:1b:ce:31:5e:11:
         64:10:61:13:2c:28:2a:e1:3b:bc:c3:1f:a3:ed:4a:ba:0c:13:
         49:03:8f:9d:96:05:4e:8c:7c:39:5d:86:f5:9f:70:e0:d6:1d:
         1c:18:1f:92:a0:33:67:10:d7:d0:39:ee:b1:d2:f8:7b:76:af:
         64:1a:ac:34:f9:a4:66:e5:c0:87:3b:0d:e5:80:8f:b2:47:28:
         b1:8d:ab:cb:8d:e3:ed:fc:3a:75:34:3b:d4:2d:f2:a1:81:28:
         83:03:fc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:21:43 2026 by rpki-client