Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File:                     AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier:          1T3unq+7K9meQ0LKjHVcdme4u5wPV+RcwsTW3ZNLtIw=
Subject key identifier:   D4:0F:A7:47:A4:7E:A3:63:B6:99:82:DF:EB:EE:1B:1A:DA:84:79:B6
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer:       /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial:       01A13DB87779B14F3B8ABF5B59CCE6B36859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number:          1AA4
Signing time:             Thu 15 Oct 2026 04:01:01 +0000
Manifest this update:     Thu 15 Oct 2026 04:01:01 +0000
Manifest next update:     Fri 16 Oct 2026 04:01:01 +0000
Files and hashes:         1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: in8OaNjbQjk5WCZXdYUOW/G4VS8P+8nbLPgXbsEXDig=)
                          2: ScJK2ivQIxsBlhkpxe_Fy41_8xc.roa (hash: TSQwrA/vSc9MyjbkX9qzVifKTyWOKyvXJf3qefMx3B4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:77:79:b1:4f:3b:8a:bf:5b:59:cc:e6:b3:68:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
        Validity
            Not Before: Oct 15 04:01:01 2026 GMT
            Not After : Oct 16 04:01:01 2026 GMT
        Subject: CN=d40fa747a47ea363b69982dfebee1b1ada8479b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a4:2c:da:4d:1a:c9:7f:2d:e8:73:ef:83:fa:
                    c4:9e:e2:b5:3f:51:36:ac:2f:ac:21:c1:d6:f9:d7:
                    c1:f6:51:42:4f:0f:23:68:44:23:62:3a:ea:e8:73:
                    71:40:1c:94:65:10:44:8b:33:08:5b:4c:14:8b:6d:
                    d6:5e:17:7e:32:85:78:92:65:d9:b6:2e:a1:0b:b1:
                    be:53:44:76:93:2e:3c:09:df:f8:03:a9:e1:98:a1:
                    a7:a3:aa:d2:72:6e:db:c6:92:e4:02:48:01:da:bd:
                    95:c9:4a:97:79:58:88:84:c5:4b:7b:92:86:cb:89:
                    cf:19:c9:c3:ab:96:10:c3:0a:a2:29:94:90:d8:51:
                    e7:f2:4c:69:84:ee:ce:30:8d:8b:21:46:ee:19:3f:
                    4b:d9:e8:18:44:5f:9c:a5:56:fd:4d:00:5f:56:65:
                    f4:12:bc:28:72:94:6c:15:81:7c:e4:4a:b2:0c:66:
                    15:cc:7f:0c:60:1e:ce:e6:a9:05:56:39:5c:2a:a4:
                    69:91:59:ca:73:24:3f:7b:e1:4a:e7:ea:3c:d0:27:
                    5e:54:1b:03:07:2b:67:ad:46:39:a6:40:ff:64:fb:
                    d2:4a:58:0a:0f:2d:80:7f:97:8a:92:e4:d9:3f:a8:
                    91:b7:28:f0:76:81:fc:ad:d1:6c:8f:5a:17:d3:53:
                    5d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0F:A7:47:A4:7E:A3:63:B6:99:82:DF:EB:EE:1B:1A:DA:84:79:B6
            X509v3 Authority Key Identifier:
                keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ce:30:79:36:d8:81:b3:2b:79:fe:5c:0d:20:99:77:eb:ce:
         40:51:63:69:9d:17:b1:18:40:0e:fa:1a:24:8e:df:d5:f9:ca:
         20:0b:d9:75:b5:83:28:fb:ef:50:0d:90:43:e9:2c:4e:d6:cc:
         79:4e:cd:27:5f:bf:b3:d0:6a:67:7b:f8:db:5c:08:82:b0:2c:
         97:8e:ea:f4:6a:2d:53:1d:4e:15:2b:24:a6:fd:98:a7:db:ad:
         ef:4e:da:76:eb:c4:d5:c3:76:47:86:91:e0:26:54:b2:78:8e:
         9c:2e:61:8c:f0:85:ff:31:22:9b:15:47:fe:83:ac:1c:da:2f:
         69:84:b5:ab:49:53:e5:84:bc:78:45:7b:59:1d:60:27:7a:16:
         f7:06:73:8b:fd:47:02:b1:33:ef:60:db:3b:46:26:0d:be:13:
         33:34:9e:87:dd:e9:ec:5c:32:07:d3:0f:f6:8d:09:e3:0a:52:
         19:18:83:cc:87:c9:fc:03:09:f0:d7:7c:59:5e:89:61:c0:ee:
         a5:11:aa:6e:65:ad:4c:66:03:29:75:a2:af:46:fe:29:06:2d:
         43:ee:6e:f7:69:fb:86:75:57:7b:77:6b:af:c8:bc:33:4f:0e:
         0d:be:15:73:21:52:56:c0:fa:7c:92:87:5c:7d:75:c5:2f:4e:
         02:26:4c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:51 2026 by rpki-client