Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File:                     1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier:          XUxj5IqMvdXqTXUIU4En/GsX1yICD3m2T4lwo36NzK0=
Subject key identifier:   8E:D8:9E:7F:5A:15:98:4C:0E:76:E4:12:1F:41:C4:FC:15:CF:F2:F0
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer:       /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial:       01A1250B28C7FADC50AE1D8237464A0529CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number:          1AA7
Signing time:             Sat 10 Oct 2026 09:00:50 +0000
Manifest this update:     Sat 10 Oct 2026 09:00:50 +0000
Manifest next update:     Sun 11 Oct 2026 09:00:50 +0000
Files and hashes:         1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: TkxRpNG37ncxH63ccPP81kygFNgeC5t6qwn5L1edBGU=)
                          2: 5a4DGw-2-kfHgsxaKehjNXnuCqE.roa (hash: sUZyzh0MHY05jTMpuhKk6CIitn9nHfz+b8Hqjb1Mmtw=)
                          3: KINZYIE6_XaYNki6NUivcoprCUw.roa (hash: qhCfbFIbX14JzdD9PrKyC8S6QJj73yUa2umRc8K8fPw=)
                          4: OVwVV0u6mJBhfYtSaY2l0o5kYw0.roa (hash: tx3hkLfc3TC5UcoBMbPeFsEp4hR2aCEn9vjo3l+XOeY=)
                          5: SWXQ_yriq_Z6hdo9s_S-su9IOcY.roa (hash: npoD/pw5DyWoHlNaWh25GF0UUSoDz0q9Mp04Q5//gew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 09:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:0b:28:c7:fa:dc:50:ae:1d:82:37:46:4a:05:29:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
        Validity
            Not Before: Oct 10 09:00:50 2026 GMT
            Not After : Oct 11 09:00:50 2026 GMT
        Subject: CN=8ed89e7f5a15984c0e76e4121f41c4fc15cff2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:42:0c:04:24:14:1b:9f:1e:91:87:9c:36:
                    2c:a0:40:20:1d:ef:ca:6a:d0:66:16:91:31:b0:4e:
                    c7:17:85:0f:28:fd:13:d2:d2:b6:78:45:42:4e:ee:
                    6f:30:84:db:5b:62:92:b5:30:b8:73:fb:2b:66:a4:
                    8c:4e:d3:15:d1:d2:b2:df:4b:70:41:ae:b7:11:ab:
                    b6:f4:b7:9b:75:99:ac:f5:ab:5b:52:19:89:81:01:
                    81:4e:3e:cd:c3:47:23:bb:d3:80:ee:e5:fa:96:f9:
                    9d:77:13:5c:69:5a:b9:96:2d:e7:33:56:ff:8c:23:
                    f5:af:ac:47:62:b8:9e:92:9b:2e:86:b3:e5:49:b3:
                    8c:1e:d6:cc:80:5b:3b:0e:fa:04:41:29:bd:f0:ab:
                    2d:4a:2a:56:43:04:dc:b8:64:d8:6a:6b:e5:06:1c:
                    65:58:b8:e2:bd:4a:68:de:18:b1:03:b6:75:04:6d:
                    04:56:f7:3b:c6:41:de:f0:24:d9:b8:be:8b:83:75:
                    ed:e7:c6:cb:6c:41:c8:be:4e:a8:f7:b1:10:a6:4e:
                    08:11:15:cb:c6:40:b6:6a:e3:ea:04:a9:ad:d0:3d:
                    08:34:c2:64:fb:ca:ed:1b:8f:31:17:47:74:e6:d7:
                    83:15:72:c6:16:06:7b:51:f4:fe:83:e1:84:6a:7b:
                    3d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D8:9E:7F:5A:15:98:4C:0E:76:E4:12:1F:41:C4:FC:15:CF:F2:F0
            X509v3 Authority Key Identifier:
                keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:67:e2:da:65:71:06:18:ae:24:66:1d:08:79:dd:9d:27:20:
         64:32:d7:db:62:07:19:ae:7d:8e:e7:3b:be:34:93:31:e7:cd:
         0b:7b:3e:d8:85:7a:29:22:1c:b0:1f:82:8e:9d:ca:8f:49:ec:
         09:ab:04:8e:e9:a7:23:14:e5:ad:c9:01:04:bb:51:d6:d3:6c:
         1a:d1:38:41:6b:a9:be:c6:08:76:a5:d2:2b:87:fa:83:2b:a3:
         00:84:2e:8e:56:2d:59:b0:74:c0:d8:10:95:e6:49:9b:d2:95:
         ab:0d:88:e7:ba:50:8d:d9:d0:25:d0:c3:8f:ae:91:d7:c4:e2:
         52:2e:bb:d7:f9:05:49:af:dc:f3:1a:92:7a:4f:7f:f3:ea:26:
         80:e2:3b:5e:b8:1a:cd:76:71:21:2e:f9:67:9c:dd:7b:51:09:
         97:15:32:7d:d0:49:24:01:ae:f4:6e:01:f3:83:6f:bf:34:b3:
         27:e6:20:ac:e0:01:8e:51:ff:3f:2b:7c:16:2d:30:a5:ed:a2:
         c3:09:98:e0:6b:8e:73:1b:6b:5e:a7:f3:3c:83:de:53:3c:63:
         3d:39:93:88:60:ba:59:cf:16:b5:0e:8a:a3:e7:5f:2a:2b:ab:
         3a:bd:6c:d6:dd:f6:31:ce:24:d4:7c:28:6d:fa:f2:88:f3:7b:
         cf:ae:e1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:11:55 2026 by rpki-client