Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
File:                     aspx8tn-K0nGdi89mg6L8zLf3tE.mft (raw, json)
Hash identifier:          eHz+1mtrNkmscPdALm897YnHIBMJyOrBMIYrEXnDDVE=
Subject key identifier:   A3:61:90:A7:8A:14:FE:16:6D:C5:C2:30:AC:2E:42:44:0D:F2:B3:2E
Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
Certificate issuer:       /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Certificate serial:       01A14A618325417730B0579DDBD1CA1B86D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
Manifest number:          149C
Signing time:             Sat 17 Oct 2026 15:01:06 +0000
Manifest this update:     Sat 17 Oct 2026 15:01:06 +0000
Manifest next update:     Sun 18 Oct 2026 15:01:06 +0000
Files and hashes:         1: EgV1knG2q0851YdjwI9ZnxFusW8.roa (hash: TpL3ZZSNUe8HCulV7DZciQFP376Z50w7pD7Ztv0vOQ0=)
                          2: aspx8tn-K0nGdi89mg6L8zLf3tE.crl (hash: or0+z9Vtrggq3AgOQG3oacTMM/AyQ0GUkr9tbCArFhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4a:61:83:25:41:77:30:b0:57:9d:db:d1:ca:1b:86:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
        Validity
            Not Before: Oct 17 15:01:06 2026 GMT
            Not After : Oct 18 15:01:06 2026 GMT
        Subject: CN=a36190a78a14fe166dc5c230ac2e42440df2b32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:3b:cb:fa:79:c6:ee:48:2b:b2:cb:7d:a2:
                    46:79:91:d2:0e:4c:35:f3:ed:7a:8e:71:cd:15:2b:
                    9c:dd:55:5c:21:e3:6b:5a:bc:e8:26:3c:75:6b:eb:
                    d7:12:20:ea:ee:f7:f8:4c:0e:97:67:b6:10:f8:ba:
                    bc:2a:a6:38:dc:5b:b2:db:d7:07:f1:43:d7:77:88:
                    4b:3e:7a:42:1d:a8:99:09:e0:2b:e6:9c:aa:ce:e8:
                    ec:27:b4:32:db:45:50:e2:7e:54:f9:ca:60:98:08:
                    a3:74:81:20:ec:18:91:bf:e3:40:51:b7:13:cd:35:
                    d9:0f:e5:65:a6:8f:60:df:6b:ed:21:dc:f9:90:e7:
                    40:20:9d:ba:e9:1f:4c:0c:41:d2:23:89:23:95:ac:
                    f4:33:b8:8c:b5:ac:0d:25:2b:43:4e:28:4e:c3:49:
                    12:94:29:4d:50:96:c3:ca:3a:38:88:2e:53:75:00:
                    bd:82:84:8d:3d:f6:ce:1b:b0:77:68:ba:c3:6e:ec:
                    29:ad:2f:e9:da:5b:fc:eb:a0:96:84:d8:2c:21:2f:
                    a7:3b:6e:0c:8c:bb:2d:f8:95:45:02:cc:cb:7e:34:
                    f6:90:cf:d9:c0:26:bb:52:64:28:76:aa:d1:7d:8d:
                    74:fa:ef:00:f8:46:64:4e:58:0d:19:29:2b:14:dc:
                    7f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:61:90:A7:8A:14:FE:16:6D:C5:C2:30:AC:2E:42:44:0D:F2:B3:2E
            X509v3 Authority Key Identifier:
                keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:9a:5e:04:57:99:61:90:5f:74:a8:9c:e9:be:f0:f1:96:f6:
         23:44:60:7e:11:54:e7:5d:97:ac:63:17:0b:f2:aa:b1:8c:7f:
         2b:99:52:47:57:17:2a:e3:3d:33:02:b1:c5:a4:db:c1:73:ee:
         0e:9b:e6:39:57:44:43:6d:72:d6:7f:57:e4:79:8e:f9:8f:a0:
         5a:62:33:d0:06:32:07:1b:7b:29:8a:bc:93:24:3c:c9:dc:af:
         b6:89:3b:b7:7b:33:c5:1e:7e:1a:6b:31:2b:f5:8b:d6:c1:60:
         af:cb:d2:57:c6:7f:74:71:4b:17:bf:29:79:3f:d3:0d:28:88:
         79:70:41:f7:87:57:5c:de:0b:9c:d3:09:e8:27:a4:f5:0b:43:
         37:8c:41:3d:0d:60:d2:e3:f7:8c:92:0e:5a:79:c8:16:03:61:
         21:b7:ec:95:cd:d9:d0:44:90:f7:97:a2:fc:04:71:fb:51:d4:
         02:61:17:6a:f2:e5:85:fe:35:38:f2:98:b5:0d:3f:fc:8b:b6:
         35:35:67:c9:ac:ab:3a:3b:02:5e:40:4a:48:7d:56:25:85:36:
         7d:12:a1:73:bc:15:40:0f:47:05:ec:f3:ed:9e:90:ff:71:3b:
         4f:6c:6b:22:b8:ac:05:4a:40:a8:cb:4c:18:e5:a2:51:50:b2:
         06:31:78:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:50:43 2026 by rpki-client