Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File:                     AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier:          NEvJ+/EXNicUxapZkP0ROrLl5sbCmWlH7FwbQCwW5lI=
Subject key identifier:   23:EF:CC:9C:6A:3B:2F:2B:AC:67:9F:E2:AD:92:BE:EC:72:98:C6:20
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer:       /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial:       01A13D812192130492328A213F44B69DCE95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number:          17A1
Signing time:             Thu 15 Oct 2026 03:00:35 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:35 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:35 +0000
Files and hashes:         1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: bXxaSLoFk3vfp8rQfxBcNK61akJjBuhakK3cZ364IYU=)
                          2: fuzFacJNaiVRrJ_GlGY2C6GBS6M.roa (hash: C5oZSE4o23c6OxxwxdkDVpPrg7ORDnBnQBKmM1UexSA=)
                          3: w-2M5_JOL4GzA4Ev0I2EWaVkWZo.roa (hash: pBaSGdEGyqlnbAKaIgPv0sjHgyvY6jyifJForUGJVaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 03:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:21:92:13:04:92:32:8a:21:3f:44:b6:9d:ce:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
        Validity
            Not Before: Oct 15 03:00:35 2026 GMT
            Not After : Oct 16 03:00:35 2026 GMT
        Subject: CN=23efcc9c6a3b2f2bac679fe2ad92beec7298c620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4c:f8:ab:0d:32:f1:7b:fb:16:3c:b7:77:e4:
                    a5:4b:d4:28:c0:cc:8c:a4:c4:10:3e:95:1f:36:63:
                    c2:2d:5e:42:f7:78:d7:85:7a:87:f1:33:42:7b:b5:
                    3b:33:0e:cd:c8:53:71:2c:86:d6:1c:41:1c:0c:33:
                    51:12:93:dc:5f:5b:94:78:73:1e:f7:2e:db:a5:f2:
                    ac:5d:02:9f:3d:ab:40:e2:6f:66:e5:6c:59:3b:87:
                    68:e5:35:a2:89:a3:7c:c4:58:f8:b4:61:b2:3e:fb:
                    98:bb:bf:c8:ba:bb:ac:85:1e:b4:bc:26:77:00:57:
                    12:f2:83:cf:de:4e:8e:8b:43:a3:a7:a4:48:ff:6e:
                    9d:27:c0:d7:49:bc:d9:06:6c:4f:c7:12:1e:d8:d3:
                    3e:ac:e0:f6:7a:84:00:13:1f:65:f5:8a:5e:9f:c5:
                    32:b2:e0:fe:fd:2b:ea:50:b2:01:f8:f6:a3:7a:84:
                    23:ee:0f:b1:05:f7:60:31:49:ac:d9:2c:3a:a1:3d:
                    6e:c7:a9:90:5a:60:c3:e9:d3:9d:03:f5:14:6b:8f:
                    e6:b3:84:25:31:52:81:3d:17:ca:54:1b:48:99:bb:
                    be:35:9e:34:c3:0d:5e:c3:79:44:6e:58:c3:e8:e2:
                    21:ad:b6:52:32:a8:3b:93:7a:2a:ba:38:1b:e0:68:
                    2d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EF:CC:9C:6A:3B:2F:2B:AC:67:9F:E2:AD:92:BE:EC:72:98:C6:20
            X509v3 Authority Key Identifier:
                keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:52:60:b0:01:5a:0f:89:82:01:ad:e4:d5:d3:88:8d:5f:c2:
         2b:36:be:6f:c1:57:29:3e:3b:e9:1c:63:84:41:ce:3a:ee:59:
         ca:ab:31:af:d4:7b:eb:5f:c5:d6:da:ee:2a:87:f7:65:a2:e0:
         9e:f6:4d:2f:d9:13:28:34:8e:d0:a8:7f:bb:46:f0:e0:ef:01:
         87:87:d4:80:8b:03:1d:67:5f:19:ca:9a:a8:2a:61:cf:e7:d9:
         8f:af:67:0e:05:7b:92:1b:f2:81:60:30:0e:9f:56:e9:41:1d:
         ec:ee:9d:ed:8b:c4:df:12:4d:9e:3b:d0:30:85:71:f4:27:f1:
         fb:90:d7:70:c9:b7:2a:38:f4:58:43:47:7b:f3:6d:a7:de:73:
         1f:12:0e:91:a5:fa:c5:d5:1d:25:a9:ed:01:ac:37:47:02:0a:
         71:e3:f4:94:e9:6a:24:3a:8e:1c:79:2f:97:5e:f7:c4:8e:74:
         43:91:ed:cb:9b:76:83:97:5b:b4:37:8c:6f:8b:53:54:a5:e3:
         18:71:74:56:f5:ff:fd:12:66:7c:0e:c0:68:1a:a5:a4:ef:88:
         d2:5a:ac:ce:17:86:ee:fb:74:c0:33:20:87:bf:5d:22:4a:bf:
         dc:3d:14:a7:77:cc:06:b9:f3:39:af:f6:9a:39:14:30:9d:42:
         f1:27:2b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:40 2026 by rpki-client