Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
File:                     1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft (raw, json)
Hash identifier:          LcSQhibcVmMnSP0n36Or+fEcZUTVzm4YkXc+YPXRhyU=
Subject key identifier:   BA:60:37:36:D4:D7:85:19:53:A3:09:3F:E8:76:E9:5C:64:9B:4C:8B
Authority key identifier: F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58
Certificate issuer:       /CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158
Certificate serial:       01A17DAA93AA28FC004B2462104F04D0A9E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
Manifest number:          02DD
Signing time:             Tue 27 Oct 2026 14:01:33 +0000
Manifest this update:     Tue 27 Oct 2026 14:01:33 +0000
Manifest next update:     Wed 28 Oct 2026 14:01:33 +0000
Files and hashes:         1: 1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl (hash: cd8X3FA1sfm/2WjqK4O8pLrj5SP/TBx3yb9nyh2kkyU=)
                          2: Wlc1mb_xj0DVaYUUDsBCwlVjTTI.roa (hash: OHp7KIYzafsL5kJAIldfo0uoA+OMQo8MF+eM1s5TkVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:aa:93:aa:28:fc:00:4b:24:62:10:4f:04:d0:a9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158
        Validity
            Not Before: Oct 27 14:01:33 2026 GMT
            Not After : Oct 28 14:01:33 2026 GMT
        Subject: CN=ba603736d4d7851953a3093fe876e95c649b4c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:89:95:32:5e:8b:c1:ca:dd:ac:92:5f:46:44:
                    3f:1a:19:50:52:61:39:ad:2b:d5:d9:75:40:8d:53:
                    a4:6d:ad:af:8d:33:5f:3e:18:1d:12:2e:55:ea:d4:
                    33:c7:fd:9b:38:f9:8a:c2:c7:da:6f:d5:81:a4:fd:
                    e4:56:53:cb:0b:a2:06:93:5f:43:35:80:5e:82:22:
                    07:ea:fb:12:94:e8:c9:d0:02:50:ca:ad:96:56:a1:
                    a1:ac:8f:e9:09:34:7c:62:8e:1a:7a:12:8a:16:b4:
                    92:81:23:aa:67:27:a0:3c:9a:f6:94:cb:8a:e7:49:
                    81:4c:33:b7:fb:68:14:b2:fb:09:3b:2f:44:c1:d0:
                    2e:5f:f8:55:4d:9d:a0:4b:65:0a:d1:27:1e:48:5b:
                    49:e1:3b:06:df:ed:71:9c:b1:02:bc:14:96:42:5f:
                    b3:60:3c:89:d9:20:6b:be:f8:22:c8:2f:78:74:f2:
                    31:db:e6:32:70:54:43:24:8c:ce:66:2d:61:ce:13:
                    35:b0:ad:f8:2e:75:ca:59:2b:99:ec:12:72:eb:33:
                    75:ff:27:ae:46:67:00:23:2e:9e:65:31:86:a1:d6:
                    7a:7c:a1:b8:49:94:7d:16:1d:2f:d8:6c:ba:b4:03:
                    2b:5e:a1:fa:cf:ca:68:29:6a:d5:e9:a8:6b:3a:bc:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:60:37:36:D4:D7:85:19:53:A3:09:3F:E8:76:E9:5C:64:9B:4C:8B
            X509v3 Authority Key Identifier:
                keyid:F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1d:dc:42:93:61:0e:16:84:51:1d:34:c3:8f:25:9e:d8:f5:
         f2:74:7e:75:4e:18:e4:1f:cb:96:f7:42:c3:d2:5e:b5:3c:33:
         93:3f:75:a7:36:97:ee:25:e6:b6:a3:29:4d:89:5e:64:50:d6:
         11:e3:7a:82:fa:59:ef:61:84:c7:97:ac:c0:f0:99:db:2b:83:
         bc:02:80:06:a2:99:30:2e:3c:b9:17:c1:6d:f5:13:dc:86:c8:
         b7:c9:1c:76:6a:b6:b2:9d:c2:27:f9:1d:1a:c5:a9:ac:57:1d:
         72:7f:88:85:ea:e1:ef:30:68:8d:11:e5:e9:2b:27:b6:bb:28:
         5c:db:1e:1a:ff:df:c5:53:f5:d7:3a:c6:15:df:20:2d:86:7a:
         47:1d:df:6c:39:11:82:6b:27:61:ed:65:ef:ef:be:71:65:85:
         25:8a:86:34:ab:13:91:ff:c6:45:07:3d:bd:dd:b3:d6:24:e4:
         b1:b6:46:82:6e:99:b6:58:40:2e:79:a9:6e:fe:6b:c2:e8:5d:
         51:bf:ce:07:93:f8:94:0f:a2:e6:d3:6a:18:ac:8a:97:54:0f:
         00:2c:96:c5:18:a0:b0:4e:e7:ca:5d:44:c4:22:67:78:03:67:
         82:95:c7:ed:55:c4:8e:d1:af:24:f3:d4:1c:eb:5f:45:9b:f1:
         63:7e:62:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:35:22 2026 by rpki-client