Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
File:                     9VW6bis9tVIdvHBipYwW3aG58i0.mft (raw, json)
Hash identifier:          JQ/IsNPZcoew1PgGKUFVbVD0fgiD07JRPcCDDGtZhJU=
Subject key identifier:   E9:7D:14:51:B0:5D:AB:1C:48:23:6A:EC:8D:D3:27:F6:5F:88:A2:DD
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Certificate issuer:       /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial:       01A13DB80A2E7E2F805C567BCB19A6CBAAD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
Manifest number:          0866
Signing time:             Thu 15 Oct 2026 04:00:33 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:33 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:33 +0000
Files and hashes:         1: 9VW6bis9tVIdvHBipYwW3aG58i0.crl (hash: j9D031rZuH8I1wCekkuXPlYDPTu5rquCH6mhfc+4KoI=)
                          2: _tQfUv-ZF8l6ECirIU08-QDKATk.roa (hash: jyN189Yy9sENguau2gQDFaDGR/1qRo4t+nodcN1wD68=)
                          3: cyWhzyh3zLHJFuzJ5qvmESBkuxg.roa (hash: nSoHpM2xTBolqQJtZsO8W8SsMxuMlo/mxOm1BoRL8ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:0a:2e:7e:2f:80:5c:56:7b:cb:19:a6:cb:aa:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
        Validity
            Not Before: Oct 15 04:00:33 2026 GMT
            Not After : Oct 16 04:00:33 2026 GMT
        Subject: CN=e97d1451b05dab1c48236aec8dd327f65f88a2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ec:c3:32:a8:e1:a6:cf:26:f0:da:c5:62:75:
                    6f:80:3b:b7:31:d5:11:8f:e0:37:16:20:c4:6e:fa:
                    ba:66:d6:ff:21:cb:10:30:f6:a8:56:4d:c1:7a:12:
                    82:2c:fd:b9:7c:13:7d:ad:86:cd:50:7e:41:d0:74:
                    b4:e4:58:f4:b5:37:61:14:3d:97:66:21:9c:c1:c5:
                    92:fe:49:5b:17:b2:0f:cc:b0:f5:1b:19:0a:63:55:
                    93:bd:be:19:dc:c9:10:70:c3:18:6f:26:46:76:f0:
                    68:94:29:b0:33:3b:d0:ea:c9:c8:19:06:05:00:b4:
                    62:d2:be:c7:b8:ef:c5:b0:a7:8b:d6:2c:a8:43:66:
                    c5:71:71:90:fd:55:58:b8:a8:eb:27:81:43:fe:44:
                    6d:5a:6b:b9:8d:e2:8c:38:5c:81:c2:cb:c7:4e:88:
                    cd:bc:82:f6:2e:ea:82:e0:8b:63:99:6b:a8:0d:11:
                    73:19:40:5c:27:1a:41:a3:c6:68:9c:a2:d2:7b:45:
                    56:33:84:09:63:ed:c6:ef:51:96:8e:08:68:6a:fa:
                    ea:9c:75:e8:29:6e:8a:ba:b2:6c:66:0b:f3:38:7d:
                    4f:dc:e7:e6:16:97:ba:4c:37:87:0e:f7:6e:16:1c:
                    89:ea:41:28:55:e6:1c:a1:63:b3:11:5a:8c:e2:c3:
                    82:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7D:14:51:B0:5D:AB:1C:48:23:6A:EC:8D:D3:27:F6:5F:88:A2:DD
            X509v3 Authority Key Identifier:
                keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e8:a0:25:f2:e0:8b:19:53:04:4d:0a:74:8e:59:63:49:51:
         28:d3:ea:f3:e7:19:46:92:39:a0:48:c3:8f:6f:92:9c:06:5f:
         c2:d5:3a:da:ec:31:83:aa:f2:0f:f0:ea:88:10:fc:57:bb:37:
         c4:b2:29:59:23:4d:11:f7:0e:d5:97:13:78:b3:34:11:81:10:
         64:e8:9e:46:ac:b6:59:3a:47:f3:54:4f:8f:eb:82:a7:ba:af:
         fa:69:e1:8c:05:b4:36:4c:72:69:a3:8d:dd:e1:1d:fe:a4:97:
         df:be:45:9f:be:17:13:14:65:df:f2:f8:3a:6b:6a:45:47:95:
         fb:f8:ca:23:05:bc:dd:e2:55:b9:82:53:3d:4e:82:9b:d6:b6:
         98:c0:9c:40:ce:c2:be:0d:b9:45:2d:22:5b:49:29:17:a5:94:
         a2:e9:7f:4d:0d:a9:f8:64:31:7a:7d:18:77:cb:37:8a:4f:9e:
         98:54:55:52:27:d8:74:82:29:1e:35:d2:e9:f3:36:94:7b:ef:
         f8:4c:54:e2:90:cc:71:4c:e8:ac:7d:01:b5:9f:d8:b5:6f:df:
         e2:c5:5a:d1:37:6a:6c:42:b8:b5:4b:fe:f5:16:c6:a3:cd:98:
         a9:e3:2f:ea:ab:1d:ce:4a:03:bb:43:c9:c5:bc:dd:9c:4b:8d:
         12:e2:c1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:39 2026 by rpki-client