Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File:                     ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier:          b9DfrFMTmbxO8YDYc/uICvUGbzLP/jjElMPJN2jT5Yg=
Subject key identifier:   81:4E:1A:28:98:B9:56:79:37:2D:67:7C:7B:84:6F:31:25:30:B4:A3
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer:       /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial:       01A114F3D9CBD6EC43411FA044C7F666892C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number:          1AAF
Signing time:             Wed 07 Oct 2026 06:01:27 +0000
Manifest this update:     Wed 07 Oct 2026 06:01:27 +0000
Manifest next update:     Thu 08 Oct 2026 06:01:27 +0000
Files and hashes:         1: 3DDg52P7n4FePE0i47AwGrPv6dM.roa (hash: JN+ncwPe3d1IMDKJefRKQ8fkZSEiIBJWK5qU4JCw5jI=)
                          2: AQBZKKUw0CfqLnDcy9hcMLkcBVQ.roa (hash: e8Nsfm4NARCM4kcuUWqaXIOJHBmE9O9GAIR9R4lcjmA=)
                          3: Us-vXa-60ckWPiugXWQ_x4JuseE.roa (hash: enmgWwaQKeKIKYlxJaQsj5pZN2wULNXLovWU/A2zDQ4=)
                          4: VuSedNq080u42oe8PtK90QTYvdk.roa (hash: ZZTjW9ToPnYbK8YX5tY0XOAbcYCc6gHAC9O1wsgeddc=)
                          5: XiqMdLxfKoUjx95VMJtJvMxAZvY.roa (hash: SXoL5HuxIAiQquuEruAdXQNKyAHRVH7HOzbYGfTqh5A=)
                          6: Z9B94VUuwMzLp1J1_UmV3P3-Bog.roa (hash: b0gWVuQa3wcBnwLUc4jIKMufXEjkfGFHau8pBV9DYlo=)
                          7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: aiAFT8Ho7Pugxwq2z9WgXXRhcCKCW6PUDbw1cXaZgLk=)
                          8: mYgjhTH0BS3qrs0ZjiO_8_EBYtI.roa (hash: CgpuCBWQUKpo80yS5uyAF0yCv9LrXxgg9n9BYvmd7yM=)
                          9: nQU1rY2ErLKpGm3xNOk2Vd6maac.roa (hash: I6X6MYBEOfSMB0M7TNs7z1Yj80MN+WqIyp43IIumKAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:14:f3:d9:cb:d6:ec:43:41:1f:a0:44:c7:f6:66:89:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
        Validity
            Not Before: Oct  7 06:01:27 2026 GMT
            Not After : Oct  8 06:01:27 2026 GMT
        Subject: CN=814e1a2898b95679372d677c7b846f312530b4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:45:dc:e7:f8:f0:f0:b8:40:6b:e2:e0:c2:08:
                    78:d7:5e:aa:76:b1:5d:37:b8:83:46:cb:f3:10:82:
                    91:29:ae:ad:4a:0c:3b:e3:2a:7d:e7:a7:4d:bd:d9:
                    3e:ab:4b:36:c4:6c:ef:4a:5a:ca:a4:e0:f7:01:d4:
                    6d:7e:7e:07:ec:90:63:7d:7d:2d:2a:da:56:50:08:
                    c4:0e:5a:b1:49:8b:a4:69:38:65:d2:30:1e:49:9c:
                    9e:32:46:c8:28:02:be:82:10:43:19:2f:f7:c8:d7:
                    b9:f8:8c:95:fe:07:f1:c7:92:12:6e:5c:b1:5e:b3:
                    26:e3:67:6f:6a:e5:fc:ea:e9:97:ce:13:01:aa:19:
                    11:f5:a7:16:64:a4:21:a1:27:63:ab:d8:e6:b5:0b:
                    06:f9:ea:76:63:30:1c:75:c8:43:ca:88:32:3d:1b:
                    b1:58:30:88:a6:72:c5:45:15:36:9b:5f:7b:89:cd:
                    95:ea:2c:65:b5:82:87:00:b0:48:20:8a:16:99:63:
                    6d:5b:4a:b0:49:31:f9:3b:3c:b4:75:7e:57:90:9f:
                    13:1d:92:9d:8a:06:ea:97:5f:36:1c:b9:bb:ec:ab:
                    85:26:ef:f4:3e:82:43:19:cc:c9:25:40:97:0b:91:
                    cd:6e:9f:6a:bd:0a:3d:d4:1c:4c:ce:3a:5b:50:3c:
                    cb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4E:1A:28:98:B9:56:79:37:2D:67:7C:7B:84:6F:31:25:30:B4:A3
            X509v3 Authority Key Identifier:
                keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a0:de:6d:d0:e2:6b:06:88:a3:0d:ce:63:a7:ab:00:6a:e7:
         04:21:51:78:a5:91:22:1d:58:9c:49:b7:92:d7:b5:ea:e3:f7:
         5b:6b:09:c3:4a:bf:f8:d2:f8:13:7d:0d:a4:33:cb:3f:9c:60:
         d4:f3:8c:56:40:4e:08:dd:fa:10:3e:c5:8d:83:5b:37:40:77:
         43:15:e1:01:e3:53:34:d6:52:f6:9c:04:49:a3:3a:9f:31:c9:
         06:71:e5:84:d7:5f:dd:40:df:bd:d1:80:4c:ea:46:e7:bb:0b:
         75:d9:69:7f:3a:15:32:c0:4a:89:29:f6:9a:81:5b:ed:79:8c:
         53:7a:5f:d3:33:2f:35:9c:03:93:da:f6:83:be:8d:f6:af:1f:
         64:6d:a0:a2:d6:07:61:fe:29:46:2d:16:ba:cc:15:0f:59:72:
         4a:4d:ff:89:2d:ef:e5:fc:03:a2:e2:1e:ef:3e:2b:77:a6:c2:
         c7:94:6b:4f:83:89:49:d3:0d:f1:7e:3e:71:2c:71:44:82:c6:
         b3:f7:a0:a4:e0:f6:00:06:cb:35:c0:d0:ce:64:8d:86:5a:19:
         e5:52:a8:58:c5:f6:8f:0f:9b:be:f8:2f:fc:28:42:13:9e:fa:
         92:2d:e9:12:ae:39:e8:63:b3:7e:c4:7c:cf:5e:c2:9c:00:9c:
         a4:1c:ab:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 12:01:39 2026 by rpki-client