Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
File:                     uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft (raw, json)
Hash identifier:          wNfAGQ+pvmriu+igIRjuGsJe8T+3ShAQtwQWDlH0GoI=
Subject key identifier:   E4:32:59:11:45:D8:C0:D2:57:B6:B1:BB:C4:EB:A5:F8:50:7A:01:C8
Authority key identifier: B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
Certificate issuer:       /CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Certificate serial:       01A175F058CCC3515480485758323EAF27DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
Manifest number:          1AC2
Signing time:             Mon 26 Oct 2026 02:00:47 +0000
Manifest this update:     Mon 26 Oct 2026 02:00:47 +0000
Manifest next update:     Tue 27 Oct 2026 02:00:47 +0000
Files and hashes:         1: PCvW1ckpHe2_MAKD0cVtAdNspsk.roa (hash: rrfhDBw/DD8F8L7MgUiMSbLyWY2JkGV4u6Ic+Ucoask=)
                          2: uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl (hash: jsy5H1Ipprowx3WBwLzXRm7t9g0P+mT9yU8mQLkNthE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:f0:58:cc:c3:51:54:80:48:57:58:32:3e:af:27:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
        Validity
            Not Before: Oct 26 02:00:47 2026 GMT
            Not After : Oct 27 02:00:47 2026 GMT
        Subject: CN=e432591145d8c0d257b6b1bbc4eba5f8507a01c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:71:8d:c2:4b:2b:73:cb:af:50:42:a3:4e:ed:
                    d1:29:87:08:60:23:f9:e2:fd:58:f1:e1:95:e6:96:
                    cf:52:e8:14:2f:dd:95:69:3b:07:21:59:f9:33:d0:
                    16:10:af:d2:08:b5:4b:a4:48:df:f1:af:d5:02:80:
                    2c:35:0d:b4:01:cb:c2:74:5d:81:04:44:5d:94:d2:
                    1d:fb:1c:84:1f:ee:38:4a:00:5b:fa:7c:83:4e:2d:
                    32:eb:47:2f:8a:20:55:d2:5c:a8:5d:c4:8e:50:f3:
                    b8:89:4f:d1:ae:a2:6f:db:c9:fd:80:bf:b3:b0:bc:
                    5a:3d:72:43:8d:25:94:5b:01:bd:22:5f:31:56:d5:
                    47:f1:8b:aa:d1:83:21:2a:0b:8d:c8:14:71:f0:d5:
                    ee:33:62:88:b6:df:89:f0:e0:56:a0:f2:2d:68:1a:
                    0e:67:8c:c0:13:9b:22:9f:aa:d4:75:64:39:3b:06:
                    36:08:86:ef:4e:59:0a:60:ed:9a:10:25:2b:39:76:
                    11:b9:f3:ee:dd:d7:2d:ca:3f:00:7b:f1:57:4e:e9:
                    07:df:b6:e7:1e:f2:0e:b6:ba:cf:14:6b:c3:e2:f9:
                    c2:d2:8b:e0:57:43:04:26:d9:d9:db:18:f8:98:cf:
                    8f:04:1b:60:f5:c8:cb:b9:eb:c2:28:ff:09:8c:fc:
                    c9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:32:59:11:45:D8:C0:D2:57:B6:B1:BB:C4:EB:A5:F8:50:7A:01:C8
            X509v3 Authority Key Identifier:
                keyid:B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:16:1e:09:98:1a:c7:f6:4d:15:96:bc:e6:7d:ec:f0:8b:2a:
         59:a3:9c:0b:7a:53:f3:66:98:d0:37:09:ea:31:a9:3a:ce:52:
         a7:3e:47:f7:74:3b:b3:b3:0c:90:51:30:67:e8:c0:1f:8f:bc:
         92:30:ff:86:e5:9d:c7:db:1b:b4:52:ce:61:a5:bf:95:a5:ef:
         96:70:a3:64:67:5d:60:f2:d2:b5:62:74:25:c0:b7:7e:0e:11:
         96:44:2c:47:21:d7:2c:07:ab:c9:0e:09:72:0c:1a:55:04:ce:
         2e:11:f8:43:c2:6b:68:12:d9:01:4e:ee:ff:92:52:aa:df:82:
         b2:95:b0:63:79:eb:f0:86:8f:ff:e4:0f:5c:2b:9f:ec:ff:6d:
         68:e4:26:7a:7d:96:22:2c:07:5f:a9:be:7a:d4:37:16:b4:59:
         17:b2:35:fb:d6:26:fc:0d:83:f8:2d:8d:a7:db:f0:9f:75:74:
         39:c7:7b:f1:9a:53:41:cf:2b:f2:dd:db:9d:4d:1a:95:4a:2e:
         58:47:94:78:46:ed:ff:c7:9e:26:f6:8a:db:68:88:f2:31:ab:
         bb:02:cd:d5:70:79:ed:27:7f:66:8b:64:0c:aa:ee:9b:7a:a4:
         47:67:f2:07:1f:3e:11:a2:a7:2a:62:53:c4:b2:d8:21:f6:50:
         da:cf:e3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:34:58 2026 by rpki-client