Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
File:                     96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json)
Hash identifier:          f7VpwpJZidBQygoPAkNJKAMAVcUJwYf1MwX2yAjY9II=
Subject key identifier:   A8:44:69:0C:DB:82:C4:4D:74:24:C3:C3:84:FE:6B:07:75:C1:DA:6D
Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
Certificate issuer:       /CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Certificate serial:       01A13FDE603416665B409831338471C8D629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
Manifest number:          1AA6
Signing time:             Thu 15 Oct 2026 14:01:40 +0000
Manifest this update:     Thu 15 Oct 2026 14:01:40 +0000
Manifest next update:     Fri 16 Oct 2026 14:01:40 +0000
Files and hashes:         1: 1-Yjv_9mU_kRWoY6V1JwyH5eDzqM.roa (hash: 82tasXTqmj9u9YWsMF9gFr7ezWFi2yhFOj1F8O/axqQ=)
                          2: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: vLTa/z35aRy8S/r9zvHouyIqNfmLJzN6ROODTVZbh4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:de:60:34:16:66:5b:40:98:31:33:84:71:c8:d6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def
        Validity
            Not Before: Oct 15 14:01:40 2026 GMT
            Not After : Oct 16 14:01:40 2026 GMT
        Subject: CN=a844690cdb82c44d7424c3c384fe6b0775c1da6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3e:fa:ec:a7:67:61:29:5b:e7:6f:7d:89:08:
                    99:36:ae:9e:30:6f:7f:dc:3c:a6:7e:17:1e:91:fe:
                    47:5a:09:0f:78:f2:97:55:bb:82:e5:a9:d2:41:44:
                    f9:4f:4a:e7:5e:29:26:9a:97:9a:56:a0:51:35:aa:
                    95:cc:1c:3c:a1:82:73:a0:eb:b4:57:d2:98:04:0e:
                    35:b1:6d:1b:51:70:d0:fe:53:02:ca:1b:c3:27:bb:
                    aa:10:ab:e9:5f:1e:0b:13:d8:00:ef:3f:42:de:4e:
                    8b:e9:9d:15:92:19:b6:42:0f:ad:5a:6f:2d:21:47:
                    6f:bb:7a:73:30:12:ca:4a:3a:cd:f7:22:68:67:30:
                    7d:9b:7b:28:10:13:d3:57:f9:25:da:eb:54:41:e5:
                    6a:ac:d8:59:10:1c:ef:14:98:4a:25:41:8f:b9:0f:
                    e9:f1:64:62:db:d9:0b:c3:23:02:0f:c9:62:a3:79:
                    22:c4:1e:df:93:15:30:5c:fc:1c:fe:c2:62:c2:dd:
                    17:3b:93:83:2e:2f:df:ff:5c:2c:f2:c6:82:b8:96:
                    e3:d6:a5:a7:41:c0:6e:37:b0:56:4b:af:d4:a9:4e:
                    6d:74:f0:26:99:c8:ba:b6:4f:14:28:6d:2b:b4:e1:
                    0b:8e:fc:1b:fb:f0:b4:26:fc:4b:e9:45:49:49:24:
                    d2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:44:69:0C:DB:82:C4:4D:74:24:C3:C3:84:FE:6B:07:75:C1:DA:6D
            X509v3 Authority Key Identifier:
                keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9d:b7:14:4c:9b:96:24:80:fe:63:04:7b:bf:69:74:7d:38:
         d2:c5:28:4d:d1:a9:83:15:f1:72:00:d5:7c:2e:16:b9:bb:24:
         43:3c:50:5f:1d:2a:69:45:09:12:8a:34:a3:98:9a:62:77:80:
         49:c9:41:a8:56:63:62:66:a4:3d:6e:53:9e:a6:cc:b2:e5:54:
         85:9c:55:0e:ab:bc:41:97:30:57:95:a6:94:be:92:57:7e:95:
         67:2d:fb:ee:90:f9:1a:6f:03:58:8e:24:2e:8f:e0:93:23:d0:
         4f:67:a5:af:0c:25:42:ee:13:ab:f5:77:74:67:bd:7f:b4:78:
         15:68:f7:71:1e:60:fa:67:f2:c4:26:c9:ca:7c:97:ff:3e:62:
         b7:ea:c0:61:d1:12:10:ec:22:3f:cb:19:a3:36:9f:b4:e8:27:
         81:fc:f0:ff:ea:b1:d9:e7:b9:2c:c1:1e:06:60:d6:cf:dd:ab:
         17:9a:a9:42:23:3c:5f:69:ce:f4:a6:b7:03:fe:e1:d6:c8:72:
         1d:fa:e1:88:03:61:de:f1:72:64:4c:41:8e:11:4d:ee:f9:46:
         86:47:24:17:ef:ed:6e:de:d5:be:92:39:65:69:fa:12:80:17:
         90:fe:e2:98:aa:e4:02:32:78:f9:9d:52:f2:37:67:35:20:48:
         51:ce:a1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:23:31 2026 by rpki-client