Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
File:                     PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft (raw, json)
Hash identifier:          TH59xVF2z8BIePJBweFyBf9/YjYmQlkFRGFPd9YCrhA=
Subject key identifier:   91:A3:15:A4:C3:91:C0:CE:2F:44:21:6A:08:5F:B7:19:E8:B7:AC:74
Authority key identifier: 3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
Certificate issuer:       /CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Certificate serial:       01A15BFA15AC97D8E9D7C6EF8844CB903BF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
Manifest number:          0FB9
Signing time:             Wed 21 Oct 2026 01:01:18 +0000
Manifest this update:     Wed 21 Oct 2026 01:01:18 +0000
Manifest next update:     Thu 22 Oct 2026 01:01:18 +0000
Files and hashes:         1: 49PmNqo2ozi6foyeWngY9-dP7_8.roa (hash: FTUCcOfecgfUHEaYOHAMv32E85Y9HshWNlhJWT3H1nQ=)
                          2: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl (hash: XETFHcEZAcn7RyWOKddzT2Pb/moGlRf/GXbvpD5S2F0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5b:fa:15:ac:97:d8:e9:d7:c6:ef:88:44:cb:90:3b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ed23945ff7561ee99d2e278e7388d045fadd314
        Validity
            Not Before: Oct 21 01:01:18 2026 GMT
            Not After : Oct 22 01:01:18 2026 GMT
        Subject: CN=91a315a4c391c0ce2f44216a085fb719e8b7ac74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:10:79:4d:60:8c:6b:91:f1:2a:ad:3b:ba:e7:
                    d7:26:e8:ac:f5:4c:be:64:bd:0b:db:53:13:9d:e9:
                    ed:e7:bc:39:01:2b:0f:ea:ff:e4:73:11:93:0e:9e:
                    ab:65:6e:81:01:73:80:a2:8c:83:1b:12:89:90:15:
                    7a:3e:93:0e:0c:32:e6:cb:e5:8a:a0:c1:36:6c:6f:
                    82:25:91:f7:3a:85:79:0a:5b:4b:1a:19:57:99:24:
                    de:18:3b:40:2b:d9:39:bb:cc:6f:49:61:23:c9:59:
                    86:2c:39:49:56:a3:9f:f1:b6:c4:24:33:75:5f:f0:
                    b0:33:5b:c3:63:8c:98:eb:51:25:ac:81:a8:c3:b8:
                    06:c8:b8:bd:d6:6a:ed:8b:b6:cc:de:d9:51:6b:e6:
                    9d:23:e3:fa:96:5a:bd:bc:79:db:1b:72:0c:42:a7:
                    31:72:0a:53:58:ec:38:e2:bb:34:35:f4:42:c1:d5:
                    d5:17:b5:6b:1c:2c:b9:dc:d8:d7:14:9c:43:94:79:
                    c7:09:55:cd:96:25:26:60:f1:e7:ae:87:1a:75:c2:
                    f3:ba:fc:81:aa:01:ff:5a:75:f3:76:58:55:4f:f8:
                    e3:f8:2b:d3:f3:d5:ac:b2:38:85:8c:a3:5f:72:33:
                    90:e8:f2:9a:95:5f:52:dc:19:e5:12:bd:b0:0b:2c:
                    d5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A3:15:A4:C3:91:C0:CE:2F:44:21:6A:08:5F:B7:19:E8:B7:AC:74
            X509v3 Authority Key Identifier:
                keyid:3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:12:39:47:60:05:34:51:97:8b:29:89:65:3c:c1:19:a6:fc:
         bd:1d:20:bf:59:b2:48:9b:54:59:cc:37:08:23:9c:cd:9c:ba:
         aa:ac:ed:b7:de:b8:62:84:99:8b:d3:7a:7e:4c:e6:96:8e:00:
         bb:88:55:25:1c:04:fd:fc:45:ef:3d:84:32:e9:54:6a:0c:21:
         f2:97:ac:8a:98:e7:56:e0:44:2d:75:9a:f2:5d:f4:4c:3b:8b:
         68:e6:31:80:39:b7:17:90:9d:37:fa:75:bf:32:d0:47:06:0e:
         8e:c2:94:bc:69:8b:e6:84:e5:52:23:bb:9f:11:29:cb:30:ac:
         7b:d6:64:14:fa:55:c0:f1:24:ce:e5:d2:8b:bc:53:c0:a8:2f:
         0c:00:9c:dc:91:50:6e:f7:2d:38:15:3c:b1:0b:fc:c1:26:fd:
         22:a9:41:63:79:e8:d4:ff:33:5e:da:22:04:f7:c1:11:e5:63:
         64:7d:ac:0b:3a:be:72:d0:f9:90:18:d9:3a:8a:78:12:6e:12:
         4d:c3:4f:f8:c6:5d:88:a3:1c:0c:a1:68:0c:9a:ed:08:d7:23:
         6e:7c:28:7e:6e:ec:16:43:e1:21:5c:3f:c9:a5:bb:fa:a4:9c:
         39:c6:bf:1a:d6:ae:ac:59:25:ed:d3:0c:81:d9:94:89:06:5e:
         3e:d0:e7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:39:57 2026 by rpki-client