Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/819ae9-a3fc-41a3-8b01-597e3cba150f/1/V2is7v0e6ahf2pTII-EeSkJrkek.mft
File:                     V2is7v0e6ahf2pTII-EeSkJrkek.mft (raw, json)
Hash identifier:          szBSXIE+0d20FjUstmJDoA/JFDzwBH5md4Ka1GIe184=
Subject key identifier:   6B:86:81:18:1F:26:D7:7F:B6:F3:30:C6:F4:58:6F:30:5D:51:06:81
Authority key identifier: 57:68:AC:EE:FD:1E:E9:A8:5F:DA:94:C8:23:E1:1E:4A:42:6B:91:E9
Certificate issuer:       /CN=5768aceefd1ee9a85fda94c823e11e4a426b91e9
Certificate serial:       01A181874992683B7D82D3EC7355484AE1B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2is7v0e6ahf2pTII-EeSkJrkek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/819ae9-a3fc-41a3-8b01-597e3cba150f/1/V2is7v0e6ahf2pTII-EeSkJrkek.mft
Manifest number:          81
Signing time:             Wed 28 Oct 2026 08:01:29 +0000
Manifest this update:     Wed 28 Oct 2026 08:01:29 +0000
Manifest next update:     Thu 29 Oct 2026 08:01:29 +0000
Files and hashes:         1: V2is7v0e6ahf2pTII-EeSkJrkek.crl (hash: DpiOLibl/ixuHEpX/QFpB7xVOUzmTvv3/11weZPD4YI=)
                          2: qrs3hwC2Q7uHHoUzKY4rWu-vIaU.roa (hash: iH7T/YIsEwIaJiWs2/7+zTlR0iTvTxwCtITlGEfKyi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/819ae9-a3fc-41a3-8b01-597e3cba150f/1/V2is7v0e6ahf2pTII-EeSkJrkek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/819ae9-a3fc-41a3-8b01-597e3cba150f/1/V2is7v0e6ahf2pTII-EeSkJrkek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V2is7v0e6ahf2pTII-EeSkJrkek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:87:49:92:68:3b:7d:82:d3:ec:73:55:48:4a:e1:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5768aceefd1ee9a85fda94c823e11e4a426b91e9
        Validity
            Not Before: Oct 28 08:01:29 2026 GMT
            Not After : Oct 29 08:01:29 2026 GMT
        Subject: CN=6b8681181f26d77fb6f330c6f4586f305d510681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f6:67:1e:6d:ce:68:b1:aa:cd:72:ac:8b:0e:
                    e3:46:7c:9c:7c:5d:a2:c1:7e:40:69:b8:30:b8:36:
                    1f:72:72:5f:ae:98:f8:f7:bd:74:cc:1e:dd:2b:9a:
                    c1:50:67:51:46:9c:60:cd:86:b6:49:94:17:e9:82:
                    14:39:ef:a4:d7:22:93:2a:f1:08:ac:99:38:a5:c9:
                    58:0d:af:f5:18:ee:cd:8d:fc:3a:08:98:d9:e6:cc:
                    f1:6b:d9:11:41:39:bd:dc:10:0f:50:88:36:69:56:
                    08:b9:d0:18:a4:be:dd:a9:51:ca:f3:be:21:34:d9:
                    3e:b3:1d:3b:3d:5b:94:68:e1:b0:61:92:d8:39:5a:
                    5b:bf:15:a6:76:89:6a:d9:58:ef:74:ad:ce:df:04:
                    6d:a5:66:0c:5b:87:54:cf:ea:20:75:18:52:25:21:
                    da:96:0f:53:8c:e8:ea:00:94:94:f3:0b:cb:52:10:
                    72:f1:99:9e:5f:ad:db:14:a6:42:36:e8:30:31:36:
                    08:db:d4:39:f1:4d:f3:23:2f:d3:d7:39:88:02:92:
                    26:52:db:bd:db:b2:05:1c:c5:c0:fe:c6:d1:3e:e4:
                    b3:7a:56:70:cc:0a:b9:17:52:94:43:14:4d:e1:4a:
                    85:63:4c:1d:a3:3f:81:93:17:99:1b:17:d7:fb:34:
                    76:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:86:81:18:1F:26:D7:7F:B6:F3:30:C6:F4:58:6F:30:5D:51:06:81
            X509v3 Authority Key Identifier:
                keyid:57:68:AC:EE:FD:1E:E9:A8:5F:DA:94:C8:23:E1:1E:4A:42:6B:91:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2is7v0e6ahf2pTII-EeSkJrkek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/819ae9-a3fc-41a3-8b01-597e3cba150f/1/V2is7v0e6ahf2pTII-EeSkJrkek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/819ae9-a3fc-41a3-8b01-597e3cba150f/1/V2is7v0e6ahf2pTII-EeSkJrkek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b1:07:55:4a:95:04:c5:75:e0:eb:3d:d1:39:ad:ba:0e:39:
         3c:49:a9:5f:ac:79:79:2e:48:87:0f:91:e2:25:da:c5:d9:99:
         c7:92:3f:99:f9:c8:11:08:11:c0:59:08:b0:48:57:94:ac:8c:
         4d:87:e1:2d:2b:5a:38:30:f8:99:2e:99:08:fb:67:dd:f8:71:
         dc:cd:8b:2f:7b:d6:29:89:ee:2e:25:0d:d0:df:ca:0b:f9:a0:
         50:ca:e0:9b:76:aa:5e:f4:29:a3:99:44:73:41:e1:45:ee:0f:
         a2:26:aa:d4:45:1d:b6:44:08:23:20:c2:56:c2:95:23:2d:98:
         17:21:43:36:3e:14:51:ca:26:c4:66:23:1c:f7:d3:2e:4d:6b:
         f0:c6:5a:b0:a3:4e:38:b1:ce:4b:3b:e3:17:33:83:5b:68:78:
         fe:6d:4f:37:a0:f4:64:10:53:1a:ec:2a:6d:7a:10:e5:51:8c:
         dd:1f:ee:89:b3:6a:f4:a9:5f:0b:c2:9d:55:0f:43:12:99:34:
         f1:d1:e5:4c:db:33:d9:c0:29:21:1e:37:cc:66:8b:9f:33:dd:
         75:64:c9:0f:b2:77:58:29:c2:40:20:92:e2:c5:29:4d:6d:88:
         48:51:e3:fa:89:06:ad:ca:45:09:44:42:bb:1c:3d:28:32:21:
         f8:66:ee:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:02:48 2026 by rpki-client