Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
File:                     AsNyEO2KVs4O3UV0v3NrYyReWCM.mft (raw, json)
Hash identifier:          X/C63yG0/Ci261vRvQxj+DCxoZoeZG5FjobovGqAOgQ=
Subject key identifier:   86:17:A7:E8:7B:FD:FE:AF:05:8E:48:DC:87:CD:AE:4B:E9:E5:25:CE
Authority key identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
Certificate issuer:       /CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Certificate serial:       01A13D4A46C98C708894A9D72F0E307E6441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
Manifest number:          1A33
Signing time:             Thu 15 Oct 2026 02:00:40 +0000
Manifest this update:     Thu 15 Oct 2026 02:00:40 +0000
Manifest next update:     Fri 16 Oct 2026 02:00:40 +0000
Files and hashes:         1: AsNyEO2KVs4O3UV0v3NrYyReWCM.crl (hash: 61v2CiYDuHZFsMGmugbkjVR4jENWr99/2XlpatgSJHM=)
                          2: dVy69fLGMOo8FwSSN3UwAlS882A.roa (hash: NDJLf7dSrw0PZVg4660IJDVpEuw7OX76mS1bdnbf9Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 02:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:4a:46:c9:8c:70:88:94:a9:d7:2f:0e:30:7e:64:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c37210ed8a56ce0edd4574bf736b63245e5823
        Validity
            Not Before: Oct 15 02:00:40 2026 GMT
            Not After : Oct 16 02:00:40 2026 GMT
        Subject: CN=8617a7e87bfdfeaf058e48dc87cdae4be9e525ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:28:30:2d:49:b0:8c:33:86:50:23:c0:97:3d:
                    ce:60:b2:7e:80:66:01:f3:d1:c9:63:6a:14:72:a1:
                    12:8d:f0:08:21:8d:64:5e:65:94:e9:f8:d8:23:56:
                    59:e6:48:0a:c9:97:4a:7b:23:6a:97:09:b9:12:31:
                    38:89:35:02:e1:37:e0:a1:7e:0a:e8:e8:7b:96:20:
                    ae:95:47:03:e8:03:0d:8e:dd:f7:7e:a7:01:7f:c4:
                    33:d5:5c:e2:91:b1:dd:4b:dd:8e:ce:e1:89:a6:dd:
                    c9:25:52:69:18:d2:40:42:37:b6:8a:fa:87:2b:cb:
                    3e:ba:7a:fc:2c:b2:22:70:6a:3a:5c:00:bc:33:8d:
                    23:85:68:75:8a:f8:a1:c1:2b:6a:23:ae:c9:91:c1:
                    47:8a:ae:ce:84:14:b0:34:f4:6f:a8:25:ae:4f:82:
                    f0:33:4c:b9:e3:c2:08:38:9c:7e:5a:d9:a6:9e:ef:
                    83:75:60:86:4f:59:22:af:f8:f7:93:6d:69:e3:41:
                    7c:53:d8:f3:23:7a:78:39:ab:44:ad:88:d7:70:bd:
                    48:15:9c:e4:94:50:11:d5:f6:24:8f:47:58:07:01:
                    67:7a:66:f3:aa:6e:25:77:76:2b:3e:10:aa:fd:6b:
                    1e:6f:44:e9:8f:4b:38:f0:ef:1b:1b:6d:b9:9c:d7:
                    1c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:17:A7:E8:7B:FD:FE:AF:05:8E:48:DC:87:CD:AE:4B:E9:E5:25:CE
            X509v3 Authority Key Identifier:
                keyid:02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:86:2d:fd:e1:a5:9a:0b:44:0b:bd:84:21:6c:ff:bb:8b:9a:
         a3:7d:43:d5:3d:f6:6a:93:32:a2:4d:65:e7:21:8f:cf:12:4b:
         0a:f2:02:73:a3:84:33:fa:8f:68:ab:3a:ef:91:6f:0c:88:bc:
         4f:3f:16:64:e2:d5:8d:f9:97:c1:37:bb:97:07:df:49:5c:36:
         c7:e5:61:59:2f:9a:03:8a:93:17:50:f5:6a:7c:e3:b2:b6:fd:
         3f:28:a2:a4:37:56:ea:64:5b:30:08:5c:11:7c:cf:82:95:5e:
         6d:22:cd:ff:d5:b7:20:9f:96:aa:22:85:21:db:ac:fd:0a:b3:
         b4:7b:d8:d8:ba:9e:9c:c4:cd:c6:9b:92:bb:df:55:66:14:2b:
         e7:50:f4:fe:dc:aa:5d:92:a7:70:d1:63:f0:b8:ab:1b:ee:d9:
         ab:94:21:8d:f5:d5:82:c1:a2:d3:ac:16:79:96:75:da:27:78:
         8e:3a:f2:d0:c9:5a:39:81:8c:78:61:a5:a7:c2:97:03:6f:c0:
         66:b4:f8:35:f2:be:21:9d:8b:e7:09:0f:bc:fe:89:32:fd:40:
         2a:80:da:84:67:f3:b7:9f:ef:87:0c:45:2d:a3:e0:85:4d:5f:
         c4:f2:f1:6c:f2:3c:5a:19:12:2f:84:b7:78:21:e6:5d:b2:d6:
         98:d0:d8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:36 2026 by rpki-client