Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File:                     lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier:          8DzhnJ94rE9qM6r26eEEiyOng2egGrN0O8UXpteTXZ4=
Subject key identifier:   16:0C:47:71:7C:5B:31:7E:0D:D4:AF:02:A5:47:9E:8A:2D:E8:19:B6
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer:       /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial:       01A162A0AF75D89ADC2088688C66E97BD77F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number:          172E
Signing time:             Thu 22 Oct 2026 08:01:00 +0000
Manifest this update:     Thu 22 Oct 2026 08:01:00 +0000
Manifest next update:     Fri 23 Oct 2026 08:01:00 +0000
Files and hashes:         1: KXQ6A3de6ngkk1WG9cHu1Wh6z8U.asa (hash: 5ZyKxUcShckFXuyMs3UQFf3JSdmvQECqj6DhdV60Ytw=)
                          2: hQpPRm4erIDWbIY8XQoz9UytcaA.roa (hash: P89VvvMHkJtBVyELR1I2+jkquZR5SiLofVkP3TLWjJE=)
                          3: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: n/kzEGWpK9kF45GEEJ3iwbfTSw5kP1+O7bGh2l1j7hg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:62:a0:af:75:d8:9a:dc:20:88:68:8c:66:e9:7b:d7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
        Validity
            Not Before: Oct 22 08:01:00 2026 GMT
            Not After : Oct 23 08:01:00 2026 GMT
        Subject: CN=160c47717c5b317e0dd4af02a5479e8a2de819b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bf:15:f1:c2:09:88:74:f9:6e:6c:36:0c:b5:
                    66:91:9d:31:07:ae:9c:67:c5:ec:41:76:e2:b4:2c:
                    12:33:c8:4f:71:ff:cd:77:98:e1:89:cb:84:ad:b9:
                    cf:45:ad:27:0e:58:31:2a:aa:42:5a:b9:0c:8e:d5:
                    64:33:f6:91:09:08:14:29:53:5f:2a:d4:9c:e8:6c:
                    8e:4b:54:c4:c6:ff:91:4d:e2:cc:94:bb:0b:49:12:
                    73:9c:3b:6e:f1:33:77:8a:17:8f:35:1c:ac:41:39:
                    96:21:14:20:40:a1:fa:51:28:99:89:05:7a:b8:57:
                    1b:f2:90:92:91:18:9b:2e:db:ad:c5:a4:f8:d5:4f:
                    74:c1:62:0f:ea:12:51:9e:b0:aa:3a:ca:7a:9f:d9:
                    72:41:b8:b6:18:e7:42:61:e5:30:38:f2:07:9e:29:
                    c5:17:94:e6:7f:51:73:33:4a:8e:4e:6c:8c:de:5f:
                    82:71:12:51:45:4c:34:9f:f8:6e:21:58:3a:5f:a0:
                    74:2a:c3:4a:ca:2b:85:5b:6b:80:fe:a3:5d:76:2b:
                    11:ef:d3:32:d8:a4:73:5e:fe:a1:36:35:ca:ac:4a:
                    50:5f:d6:d7:1a:8b:86:27:40:28:45:88:82:27:4a:
                    98:3f:c4:21:2f:3c:cd:24:5e:5e:b9:7f:b3:4c:65:
                    ce:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0C:47:71:7C:5B:31:7E:0D:D4:AF:02:A5:47:9E:8A:2D:E8:19:B6
            X509v3 Authority Key Identifier:
                keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:65:9d:f6:fa:21:3b:5b:a9:82:62:fe:94:e0:c5:88:37:ce:
         53:6e:dd:ad:3f:84:cf:45:ec:f2:9f:d9:ee:dc:da:77:7d:c4:
         79:46:22:f4:8c:2e:af:26:f5:44:75:9f:a6:08:7b:99:3a:8b:
         3a:b1:16:0c:6e:c2:d1:55:bc:aa:5b:6c:89:3f:e2:bd:29:bb:
         58:4c:90:97:83:94:42:9c:83:b4:cf:70:8e:0a:f2:1f:d3:91:
         76:7b:a3:c6:fa:fb:68:99:9c:48:a8:ac:5e:8d:9f:38:ad:a6:
         da:b2:7c:05:05:53:c0:49:1d:d0:36:01:4b:44:9d:06:71:55:
         6b:25:c3:26:a3:3c:d7:3b:4b:41:c1:8e:e8:7f:99:7f:6a:68:
         e6:f8:3a:7e:f0:b1:3b:88:87:47:6f:87:97:9d:c4:d6:58:29:
         c0:12:f0:2a:8e:bf:81:9c:79:c6:63:fd:49:45:ad:75:7e:2b:
         26:e0:cd:39:72:13:90:60:96:01:fd:76:72:5e:22:96:ee:21:
         20:8d:b8:08:c3:2f:e3:e1:ff:89:c0:bc:4b:44:eb:04:bf:b3:
         4e:9e:7b:a9:8f:f8:e3:2d:92:ec:8e:fb:ec:71:02:5c:56:67:
         80:8b:f3:df:db:e6:72:1d:3a:2c:c9:db:6a:f8:54:ee:1d:16:
         c9:8c:ad:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 18:45:40 2026 by rpki-client