Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
File:                     61AMkAIyHwOWRYNxC3uqRZc0EhM.mft (raw, json)
Hash identifier:          e5sOHQbuxvZFEki2Z2cWRmffLTaDsR93srxgG3002hs=
Subject key identifier:   4B:56:D0:F9:AA:4F:D8:29:B2:AD:2D:F8:BD:13:49:2F:5E:D8:54:B5
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Certificate issuer:       /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial:       01A17D7330367764E6CF6C8E18AB5B85CACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
Manifest number:          1AD0
Signing time:             Tue 27 Oct 2026 13:01:03 +0000
Manifest this update:     Tue 27 Oct 2026 13:01:03 +0000
Manifest next update:     Wed 28 Oct 2026 13:01:03 +0000
Files and hashes:         1: 61AMkAIyHwOWRYNxC3uqRZc0EhM.crl (hash: KiKtslPyBR+uiz3jIqe2wUlSqU1HBqeRVxSCVc49YNk=)
                          2: JcOppFfKnPF-LMTMf0TyEZDWlPU.roa (hash: CBK5Ax4pVuwzug5rITTKmUjunN1YPA+gs80SlvReIxE=)
                          3: NBS3MDGzYGIADNWFbZYjYkdUa9s.roa (hash: v7XG+TXBJYETx2VmTgwzwAMvOODuFSiHzEpsJiItnm4=)
                          4: bmr462MOzzVfibPxeKpu-EewsJA.roa (hash: CnF+rGIRS/b/VIz1Q6MMhGy+46VVxN260juxQ8X0FSw=)
                          5: xG9W89NLTMo3zDEcMXWD8-7tuik.roa (hash: z2qG6bl0HluFOz/GCJOPJLYtdHcGTOZW8wletJFCQ5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:73:30:36:77:64:e6:cf:6c:8e:18:ab:5b:85:ca:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb500c9002321f03964583710b7baa4597341213
        Validity
            Not Before: Oct 27 13:01:03 2026 GMT
            Not After : Oct 28 13:01:03 2026 GMT
        Subject: CN=4b56d0f9aa4fd829b2ad2df8bd13492f5ed854b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:01:f4:aa:b5:3f:82:88:2c:f1:62:b4:7b:ea:
                    52:0e:57:79:fa:aa:b3:e1:a1:4c:2a:92:e8:8a:54:
                    1a:e4:0a:2e:92:37:bb:92:86:ec:63:69:7c:f2:7a:
                    c5:e2:81:73:8d:bb:ef:cc:82:1d:00:81:fa:c2:81:
                    3c:7d:73:af:16:a0:e2:a8:85:e1:01:47:ac:fe:46:
                    3d:58:a2:1e:6e:1e:52:73:81:f0:10:92:60:fa:1f:
                    ab:e7:eb:73:11:aa:2e:1d:27:23:1b:55:b2:ee:f7:
                    b7:8e:29:1b:91:b1:a0:8e:84:c2:ee:5a:cc:31:c1:
                    b3:63:0d:3b:90:cc:5a:ac:b1:ae:e1:4f:c9:78:5b:
                    3b:99:48:dd:3d:a0:69:14:86:15:8e:07:03:f3:57:
                    cd:d7:5e:71:1b:63:7e:2d:69:01:7d:bc:d8:88:c0:
                    a6:69:6f:55:03:df:18:99:d4:de:e8:f1:34:21:03:
                    fd:d1:83:f1:20:1d:0e:fc:00:c3:27:39:34:9d:f1:
                    3c:36:c4:76:36:fc:57:fa:d2:4a:58:9d:b6:ab:7e:
                    20:46:27:cb:7f:fc:f9:1e:e8:33:d7:68:a3:03:b7:
                    09:e5:2d:78:a5:95:90:fa:55:db:dd:04:2e:e8:dc:
                    66:ed:69:18:40:7f:a3:e0:06:c6:22:2b:aa:c9:35:
                    4d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:56:D0:F9:AA:4F:D8:29:B2:AD:2D:F8:BD:13:49:2F:5E:D8:54:B5
            X509v3 Authority Key Identifier:
                keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:33:26:5e:3d:73:87:67:bb:a5:d1:bc:02:56:7c:55:4a:4e:
         d1:15:c4:73:d6:8c:13:54:f0:51:4b:f4:c6:5a:bc:f0:7b:6f:
         98:64:d7:27:ba:6b:dc:f5:53:52:b7:01:aa:71:75:ed:68:fa:
         9e:7a:4a:7b:bb:c7:74:d8:bb:37:6f:fb:0f:25:7c:0a:06:d2:
         63:e5:1a:a5:a1:26:be:bb:2d:ef:8e:39:58:5f:23:fa:86:0f:
         cb:87:7d:5d:66:2e:1d:0d:82:46:50:62:e3:2d:70:14:b7:02:
         de:06:bc:7a:0e:ae:dd:01:7e:8a:d2:86:fe:1e:82:a0:fb:9a:
         69:b5:d3:61:20:27:d4:f1:c8:c0:54:3d:ef:eb:f8:c7:93:ee:
         51:32:af:14:d6:7e:20:59:13:a4:1e:74:f4:6e:3c:b4:2c:f6:
         7e:3f:a9:70:a5:de:4d:f2:5c:2f:db:d7:f0:aa:3a:59:5c:d6:
         e8:34:5d:9e:00:89:51:ec:0d:1c:07:fe:78:e9:5e:af:0b:1b:
         21:06:99:36:1a:81:e5:0c:8c:18:a0:ae:c3:a7:84:cb:08:ef:
         46:69:bd:88:b3:17:14:17:73:03:91:4c:40:0c:77:da:e0:c1:
         f2:06:d0:ff:a4:22:d3:fc:b7:84:e0:a4:60:48:e8:f3:88:fb:
         d7:d6:2a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:04 2026 by rpki-client