Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
File:                     S1KaTSL67yMTXW7_iRImZiPEklU.mft (raw, json)
Hash identifier:          br64pay8eYhTrc1zxQkvg4JiF6Pb7hCMJn79Ebqm1CM=
Subject key identifier:   2D:06:F9:60:81:4B:91:07:2C:F1:61:7B:FC:99:07:39:B6:93:2A:D7
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Certificate issuer:       /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial:       01A11A193B30349F8311A02AEE7603AF3949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
Manifest number:          1AB0
Signing time:             Thu 08 Oct 2026 06:00:23 +0000
Manifest this update:     Thu 08 Oct 2026 06:00:23 +0000
Manifest next update:     Fri 09 Oct 2026 06:00:23 +0000
Files and hashes:         1: 8JTBQJyqUxIFa2P7t0W6NdfJ7CI.roa (hash: bvR7uwT6CerdByDmx1xzty2bHjJMPuqJsJHdeopKM9Y=)
                          2: IAcgHGi2lFpmozwldAdI6otCCf8.roa (hash: BMvZpTPd4wPptVWAuFWagP2MsiisY343W0Dlxwe5jk8=)
                          3: PGdzQPbVNWOAAR-X1BVXtgxofwg.roa (hash: dnLVHCkUAzZBzW5KJgWgdjrJ3f9Bmjq6lfV0HEQ9YaI=)
                          4: S1KaTSL67yMTXW7_iRImZiPEklU.crl (hash: jHr8uXmPezKBNuJROti/NZECjPbah/MoZQwm4409LC8=)
                          5: UeKejWBuRMBTzBVkphHiwU6F1G4.roa (hash: 4Va/WDHUaUbqMZBtGC/uemvvWN5D2KRgvotniu/r8z8=)
                          6: bspFglFUNNfB3BfctmrtidkBJJ0.roa (hash: b4qzed65X33LBM+fRSUuJ6eNd3msfTHJCKt5GOuVSMY=)
                          7: yf5DE453VSZNaMBDFecfcs8_ti8.roa (hash: /6VfJrCwSdAcWd7VeCBpZye97Dzq0Ew18Tz6xEOZHdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 06:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:19:3b:30:34:9f:83:11:a0:2a:ee:76:03:af:39:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
        Validity
            Not Before: Oct  8 06:00:23 2026 GMT
            Not After : Oct  9 06:00:23 2026 GMT
        Subject: CN=2d06f960814b91072cf1617bfc990739b6932ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ad:50:b3:fc:bb:1f:77:d1:a3:33:72:ff:74:
                    33:f3:e1:a9:c9:0c:d8:a9:85:d6:7c:89:9d:26:3e:
                    fb:ab:fd:f8:f5:28:15:b8:26:3a:4d:92:7b:69:ac:
                    93:7c:b7:c3:3a:93:8c:2d:be:c8:64:4f:b8:29:88:
                    06:16:7e:4b:0b:f2:3f:27:aa:d5:06:2d:67:55:90:
                    67:20:23:c7:14:19:3e:08:26:b5:b3:77:d0:25:d7:
                    3b:56:b6:a3:22:5e:4a:e1:aa:55:42:b4:73:7e:dd:
                    29:46:b2:8f:63:2c:3a:85:7c:86:c0:3f:e8:8f:9b:
                    5a:78:0c:43:05:25:5e:fb:4a:2d:8e:b5:d5:63:d0:
                    73:b1:8c:1d:8b:e4:fd:0c:af:d6:e9:1d:5f:58:82:
                    8e:63:5b:c4:bb:e7:6a:6b:d6:69:78:db:af:ea:03:
                    b4:ed:0a:2a:81:e6:2d:ca:63:8c:5b:70:1f:26:99:
                    e0:74:33:59:76:f1:83:06:77:f3:43:93:de:a7:2f:
                    49:f9:ba:24:c8:c1:53:bd:10:ec:be:27:4b:0f:65:
                    68:3b:a6:49:1a:0f:27:72:4e:45:b9:53:85:18:0f:
                    65:35:9d:69:dd:72:fd:4b:1a:25:d2:6b:24:44:3a:
                    60:34:55:78:d4:35:ab:47:a9:91:88:1a:6a:2a:c1:
                    e9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:06:F9:60:81:4B:91:07:2C:F1:61:7B:FC:99:07:39:B6:93:2A:D7
            X509v3 Authority Key Identifier:
                keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:07:51:17:59:61:93:1c:d4:ba:b0:16:1d:c0:06:3f:2a:17:
         d1:1c:1b:5a:38:29:1b:ac:30:b1:98:67:f9:9a:4d:ef:48:e7:
         fd:75:d5:16:35:1c:38:cd:60:76:72:a2:b4:46:6c:c7:6f:f8:
         b1:03:14:b7:7f:81:b4:58:b6:9b:bf:f9:84:c1:98:71:e5:74:
         a8:0a:3f:ed:b7:1a:51:7c:c7:30:88:09:df:b4:26:ef:0a:8c:
         11:c2:47:6b:18:93:53:1f:12:7f:d7:22:89:83:14:94:d1:29:
         69:1a:81:09:bd:2f:54:6a:7b:66:ab:9d:ba:c7:7c:f1:ee:fd:
         7b:8a:86:2d:e1:ea:04:41:27:63:51:24:cd:07:8b:d0:b7:8a:
         14:bc:ed:1d:15:8b:9f:4e:2e:27:9c:5a:69:3d:68:bf:54:80:
         56:75:47:3d:8e:5a:e6:3d:32:bf:bc:4f:3b:40:84:43:b7:05:
         fc:26:e9:d4:9c:1e:9f:9a:1c:8a:1a:75:e7:23:1e:e7:c3:68:
         52:aa:02:92:49:c6:cd:bc:40:74:67:dc:ac:80:92:d4:1e:47:
         c2:09:e6:a8:a7:df:db:22:00:95:ab:c6:39:6b:bb:ef:be:70:
         a3:4b:a9:8f:76:3c:cc:70:04:91:25:a1:01:90:35:b4:aa:ae:
         b4:8e:65:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:38:29 2026 by rpki-client