Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File:                     r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier:          Mtar1VIJjprZ8tEbYLVvzjSK2zHdL4uUiyj00hvKABg=
Subject key identifier:   78:5D:26:4F:00:CE:BC:C1:8F:12:3E:02:92:83:8A:89:61:3D:29:2B
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer:       /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial:       01A15E1ECAD10318AF7D3E05314997D8A415
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number:          1ABA
Signing time:             Wed 21 Oct 2026 11:00:38 +0000
Manifest this update:     Wed 21 Oct 2026 11:00:38 +0000
Manifest next update:     Thu 22 Oct 2026 11:00:38 +0000
Files and hashes:         1: 9_t5TVeIhW460bTs9V3TIpSlosE.asa (hash: NnKf3WDH/05W6UmMSXvkEUGlbKvRwlxrj788KWGZ/NM=)
                          2: Lh1w2stJ270Gej9xnTdwoInIgKA.roa (hash: o+GwhLAcoD1EMh7vyC4YZpvJmieyScRxzeQPPXDHKzo=)
                          3: mXT_95G0hHnwfzwy9GHCGff03us.roa (hash: MURLfvQpANHzg+d3efhUAoTh/8FNUBv5Zb/aAOYp3OU=)
                          4: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: 5OKxSF3I3DokhKQx6I7XhwklROW3pUSYEYnbprsykK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5e:1e:ca:d1:03:18:af:7d:3e:05:31:49:97:d8:a4:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
        Validity
            Not Before: Oct 21 11:00:38 2026 GMT
            Not After : Oct 22 11:00:38 2026 GMT
        Subject: CN=785d264f00cebcc18f123e0292838a89613d292b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:37:8a:30:46:5f:90:b8:93:da:ad:9a:c7:5b:
                    4f:21:aa:14:8b:26:eb:fc:3d:db:23:dd:50:48:d1:
                    b8:ce:11:f1:59:37:a5:9b:7a:a1:22:b8:32:e2:0c:
                    cb:f1:1b:d3:e6:17:29:b4:52:b6:8e:03:21:86:11:
                    de:99:e2:23:26:5e:c4:8f:4b:dc:07:f3:42:0f:de:
                    29:d9:f8:7e:3f:7a:2d:a3:f4:13:25:6a:cd:db:1e:
                    f2:16:d7:b8:47:04:35:e0:23:99:a8:22:35:45:01:
                    20:fd:be:5e:12:fd:e4:41:37:6d:23:e6:41:8b:8d:
                    90:d5:b7:b4:b9:fb:d3:f2:11:de:35:31:40:8f:1a:
                    ec:01:67:51:46:67:08:5e:1d:4c:da:e3:28:b1:18:
                    2f:75:a5:9f:a1:97:a1:df:17:ae:1f:e5:39:3a:c2:
                    97:d1:a9:16:c4:f4:19:50:41:3a:cb:63:55:f7:ff:
                    07:da:ea:e8:19:a1:47:50:89:64:f6:fc:80:32:09:
                    ef:b9:38:58:70:00:10:58:ef:86:eb:2e:f0:1f:a6:
                    13:cd:b1:bc:12:51:38:20:78:03:4e:4f:71:ee:81:
                    74:9a:c9:9c:a3:51:69:0f:7c:78:52:2a:41:82:b3:
                    94:4d:df:0a:24:26:a1:ee:1f:f7:32:c4:11:ce:99:
                    fa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5D:26:4F:00:CE:BC:C1:8F:12:3E:02:92:83:8A:89:61:3D:29:2B
            X509v3 Authority Key Identifier:
                keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:49:fb:6a:18:35:e7:57:e7:ea:84:49:2d:88:91:36:df:37:
         66:f7:92:b0:01:0c:35:94:52:c5:0d:80:bb:b4:4c:18:ab:a4:
         e5:e5:1c:2a:a3:c6:fd:80:f2:bd:1b:5e:bc:65:f1:36:8e:62:
         af:8d:28:36:6f:73:a1:78:df:a0:d7:b1:7b:e3:d5:7a:9a:38:
         51:0a:1d:fa:65:21:1c:51:bd:4b:0e:cd:dc:00:4c:9f:b1:8f:
         3f:d0:ba:10:c4:8b:40:3e:2f:ed:e8:1d:d7:a6:f6:6f:6b:4b:
         ce:a3:84:b9:75:88:e7:6d:46:fe:dd:19:15:f0:f7:77:2d:8c:
         be:33:4e:ec:c5:31:04:58:bc:bc:be:d3:ad:95:5c:c1:21:e6:
         8c:ef:18:7a:a7:ce:be:11:dc:19:43:0d:fd:8b:43:c7:bb:f8:
         53:ad:54:ad:32:90:bf:58:41:a3:b4:97:45:cd:33:a4:5b:a2:
         59:3a:72:92:16:c4:b4:74:9f:62:00:7b:eb:7e:ab:f4:ef:07:
         18:7e:a3:ea:e2:d2:b1:a2:47:8c:f7:35:12:59:ea:40:44:12:
         02:40:4c:8b:de:5e:c3:25:ee:29:8b:51:87:e6:78:46:f0:98:
         95:f2:e9:9a:52:1c:c0:21:bb:95:59:92:fb:e8:a7:d5:7b:d7:
         df:76:79:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:49:43 2026 by rpki-client