Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File:                     rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier:          75Q0ZL3RWfZ1N+BFTK9xpZdbSQgTjPYj2w5U5fU36Eg=
Subject key identifier:   58:95:FE:B9:F2:A0:F9:70:DC:79:2F:8B:8F:12:44:08:0A:7E:2D:D9
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       01A14DD09390199ECA99B75F7CB8EFAE355A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number:          1785
Signing time:             Sun 18 Oct 2026 07:01:17 +0000
Manifest this update:     Sun 18 Oct 2026 07:01:17 +0000
Manifest next update:     Mon 19 Oct 2026 07:01:17 +0000
Files and hashes:         1: KSdM6O1FKkRc_JqGqlUg5PGDzE4.roa (hash: l71hLYxyaBfjnzVG3OAC3KkLtPDUSTDHWl+YWeICYgs=)
                          2: RD3FrdJDiaSgh4hhQogjAnXqmq8.roa (hash: y0vVTwPbcsqwxMSYm4yZYZVCYuFlngknWzg7Heg5wGA=)
                          3: Zrny0yg3TVa-9PfRlD4jNDdwvaQ.roa (hash: KV55zi4mSfveBw4rPTBhd4Q9yfOZ75ZlhzyzEJkhajg=)
                          4: rW9d2jm-ltnfYKSiPsE7HRB1hZo.roa (hash: 5EPYMX4bCFhTuhRxbCYeuyqQ6i8l79Kij3J+8QpNg1Q=)
                          5: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: G1qPw/OL3QyUrT28oC/OREN+QTVhtNEeZcthEmpuQ4E=)
                          6: tbYt_1HgZu11ZUlS_9RFIWiny-Q.roa (hash: 0H367OeDFx32BeCSB2rFjNElX2FtZo0+OiydPHLocnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 05:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:d0:93:90:19:9e:ca:99:b7:5f:7c:b8:ef:ae:35:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Oct 18 07:01:17 2026 GMT
            Not After : Oct 19 07:01:17 2026 GMT
        Subject: CN=5895feb9f2a0f970dc792f8b8f1244080a7e2dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7a:8d:95:e2:23:07:fa:c4:72:9f:97:9a:e4:
                    dd:6c:1d:30:33:b3:04:3e:28:20:22:9e:9a:61:f2:
                    85:d6:0d:60:3b:d3:bf:dd:ec:17:a8:a4:8f:ee:a5:
                    77:7d:ec:d8:71:2b:95:af:be:30:a1:ea:a3:ee:c5:
                    55:3e:3a:6f:a0:20:3c:ac:8f:11:f6:a0:33:fd:e9:
                    2e:2a:4b:a7:bd:ac:8f:7e:88:4a:6f:7d:ce:69:81:
                    f6:fa:a4:71:ca:43:d0:60:84:15:91:fc:f9:33:8b:
                    dd:59:2c:d7:23:e1:70:7d:fd:aa:07:a4:c1:50:f5:
                    5a:49:4e:0c:58:6f:02:59:ea:73:66:6e:b2:13:1b:
                    e0:66:20:92:51:ee:3f:a8:b4:58:0c:03:14:dd:ff:
                    db:14:39:0b:96:ff:9e:4c:a4:0f:9a:f1:92:d8:43:
                    c1:bb:ac:a8:6f:54:cc:ce:74:a1:d6:fd:4f:ff:72:
                    e8:c7:3c:33:d1:02:ff:e5:93:70:89:01:fa:ff:bd:
                    67:ec:f0:9d:70:8d:a8:59:1f:61:59:ed:9c:63:55:
                    45:e0:fd:1d:63:07:38:40:b6:24:0c:d0:ff:07:d0:
                    79:74:87:e1:51:c0:8c:04:2e:b5:c0:49:2b:5b:58:
                    6f:f7:ec:95:81:2c:71:4b:f3:07:21:79:5d:8f:ca:
                    31:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:95:FE:B9:F2:A0:F9:70:DC:79:2F:8B:8F:12:44:08:0A:7E:2D:D9
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b2:52:3a:e9:9d:32:cf:08:9e:79:42:b2:b4:e1:4d:c8:ce:
         79:51:6c:d7:da:27:d3:24:58:2f:da:40:9c:9c:2f:9d:fd:24:
         8e:b6:a5:65:df:83:b5:ad:fc:06:66:f8:e9:e6:bd:ce:fa:5e:
         7e:8e:94:44:ef:b4:fe:4d:7d:c2:1f:44:52:ba:12:43:19:2e:
         2b:55:3e:c3:07:57:ca:7d:26:2d:3f:39:91:28:c2:f1:c9:92:
         a0:91:80:42:43:ff:c7:25:76:e8:0e:68:d9:76:9e:ff:89:a5:
         ad:a8:62:71:92:5f:ef:02:bb:1c:6c:c9:51:94:74:2a:4b:24:
         02:66:c9:51:d3:a7:14:75:57:d1:86:88:8a:26:d7:42:27:74:
         66:29:d1:8e:fd:67:a1:81:2f:b3:79:9d:52:26:18:89:d1:ef:
         e3:ff:90:0e:2a:1a:ac:32:83:4c:a7:88:45:b1:51:1e:e1:49:
         cb:96:42:cc:3b:7c:20:55:14:e5:d5:7f:3e:ac:d2:44:27:4b:
         e7:dd:f8:e2:19:60:0c:0e:fd:bd:ca:ab:d8:0d:8d:93:b3:ee:
         19:c0:dc:26:f6:de:63:8d:84:1e:d2:0b:bb:9a:b4:8e:fd:19:
         6e:ca:08:44:91:f3:65:0f:29:52:95:cc:13:f0:2b:b1:ed:99:
         43:1d:2d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:50:19 2026 by rpki-client