Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File:                     9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier:          WWMmwj6q5oMmjcrXPClQsdWWswuFh3pF58w0dGu3ee8=
Subject key identifier:   8F:82:B0:05:45:D4:78:F5:54:8F:9A:0F:2D:9F:5A:97:2C:18:D5:99
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer:       /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial:       01A17EF3AE79471FFA98EB2C6BC9E448B3C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number:          1B6C
Signing time:             Tue 27 Oct 2026 20:01:01 +0000
Manifest this update:     Tue 27 Oct 2026 20:01:01 +0000
Manifest next update:     Wed 28 Oct 2026 20:01:01 +0000
Files and hashes:         1: 1-dWfWWM2Q4bjUSimugWWfOBMll4.roa (hash: 9k9cnyjwgTflpSvsCNop1Tp//B4oTSziXJvJrKx7enw=)
                          2: 1-vkSUj3IhBaF6QCupk9p-QFNkpg.roa (hash: NyoZpDBj6nyKZfID52EDPnf8kCWXyPjqV37Bafp3IEk=)
                          3: 1if2l0vuSUyA8aKOlZRwZBTqr58.roa (hash: MYKlinKANRkkXALYuH4dNJZg3DMiY6cZlGtlrNDBss0=)
                          4: 3OlFo1BIMO58jOKinsgaHCIGcPI.asa (hash: It3e1tK83I/+WtTNXWRr1Q1FRwlRAB4eApvNExQnd0Y=)
                          5: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (hash: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck=)
                          6: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: +hG9N4OJfq//HkBviIy25IJYQrpggGfaVi30Dzn6OWY=)
                          7: bSIf0T0EwRvYabxLmjmKKkxKJuc.roa (hash: QjhZut+rcecUKTU/gefSSs0Q8mSl4Rg0xTqiyiwiuWQ=)
                          8: k-YRkliMRVoXShQ8PbWy-9N7SjQ.roa (hash: lMxKbbsuVDDpKDp0TZpDMbjhyk3buYEiXF/UkdpZabc=)
                          9: oiD41d0i1VuwEQttPBFodXn6upI.roa (hash: uAOn8Pa9tipVHC9vk2BfHXqfrIzw8lI2qK4bQp5y4a8=)
                          10: qcBLaf6H5Hv30eXMa7IbsI7K2Eo.roa (hash: /8G6T8+RIvDyAMYfFzoKNpDCtHywa0CfF5MXcl8AVF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:f3:ae:79:47:1f:fa:98:eb:2c:6b:c9:e4:48:b3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
        Validity
            Not Before: Oct 27 20:01:01 2026 GMT
            Not After : Oct 28 20:01:01 2026 GMT
        Subject: CN=8f82b00545d478f5548f9a0f2d9f5a972c18d599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b5:c6:ce:0f:1f:09:c9:9a:0c:76:64:c2:d1:
                    e0:d2:1c:4e:f7:d9:14:55:59:1a:89:7a:e7:3b:6a:
                    fb:64:ce:6a:09:2a:d9:52:f7:47:5a:0d:73:0a:c2:
                    e4:49:64:a7:92:77:a2:1c:5a:5c:e4:c2:15:ad:e0:
                    fe:85:d6:64:aa:cb:b8:44:13:f5:06:1e:90:cb:ce:
                    63:65:56:d7:ec:e0:38:b4:da:24:90:7c:6e:9b:ad:
                    2c:bd:89:07:4d:cf:52:6a:fc:22:91:f4:e7:bd:c0:
                    e0:16:81:60:d5:71:e1:c3:b3:0b:b8:86:d2:eb:d7:
                    d6:9b:5c:ba:16:57:90:3f:2b:a9:a2:6d:d3:0b:fc:
                    c5:16:5b:31:e9:87:93:d4:3b:d9:d5:2c:fd:85:af:
                    b6:62:ea:77:31:fd:42:d3:89:bd:b2:aa:56:d8:1b:
                    5a:4c:a5:54:92:69:2d:42:ad:b9:0d:f8:17:03:47:
                    a1:f5:53:d1:13:fd:cf:46:f0:2e:ec:5c:07:86:7a:
                    f4:67:8d:0c:06:89:b1:74:d6:9a:3c:49:68:c1:af:
                    dd:89:e7:d8:75:84:5a:59:47:09:35:ba:b0:46:cc:
                    9e:6f:14:b2:62:16:75:7d:10:7f:dc:35:f3:92:1c:
                    53:7c:2f:4d:62:78:51:75:89:1a:98:c1:33:ea:0d:
                    0f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:82:B0:05:45:D4:78:F5:54:8F:9A:0F:2D:9F:5A:97:2C:18:D5:99
            X509v3 Authority Key Identifier:
                keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:72:2f:7c:06:8e:d0:bc:03:16:e1:84:96:15:c9:38:dc:49:
         de:db:db:43:c4:57:f8:81:cb:76:c6:9d:a9:d1:b1:a4:56:4a:
         d0:b0:09:61:1a:98:ea:67:0f:34:07:27:61:65:70:ba:97:a3:
         74:f6:0f:20:b0:8d:f4:74:7a:7a:74:77:e2:f0:9b:17:55:40:
         db:f3:c1:ef:1a:55:ee:7e:e8:c5:3a:5d:ed:fc:64:5b:e4:1d:
         05:0f:fd:a7:75:91:01:66:3a:18:6d:dc:90:25:93:b9:32:bf:
         6d:34:03:ac:07:c5:0e:1e:76:52:d2:83:10:65:34:c1:ab:21:
         dc:ff:e5:f1:1e:ca:82:60:03:5e:cf:a8:93:d0:5c:5e:c1:00:
         89:89:b4:d1:ea:29:df:27:c1:86:74:5a:25:b7:69:63:ed:f2:
         f7:e3:1c:f3:9b:87:1d:c2:70:14:94:bb:b9:96:3c:d2:c7:94:
         a7:f4:6a:99:77:ae:58:af:ab:8d:b5:ee:77:44:88:e0:02:bf:
         f3:2c:0a:e9:45:4a:f2:c9:12:38:3a:f6:16:46:0a:38:9c:d3:
         95:fc:8e:05:bf:6f:ea:b1:75:07:59:74:a1:79:3e:87:4f:3c:
         93:7c:f1:84:12:77:36:51:8a:d4:80:54:fa:0e:5d:da:68:00:
         5d:98:a7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:51 2026 by rpki-client