Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
File:                     cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json)
Hash identifier:          RJ3MpXmFOsJaiUxDj19vAEJ5sA6tdDst/QblFMGbBuY=
Subject key identifier:   E6:D0:F8:E0:39:96:EA:9F:1B:DA:C0:51:F8:0D:C4:9A:CD:48:76:52
Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
Certificate issuer:       /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Certificate serial:       01A170256F71D09C83B5C25D20E385B6C1E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
Manifest number:          0514
Signing time:             Sat 24 Oct 2026 23:01:03 +0000
Manifest this update:     Sat 24 Oct 2026 23:01:03 +0000
Manifest next update:     Sun 25 Oct 2026 23:01:03 +0000
Files and hashes:         1: DAwWe5rLh-aQBzylMgXPEafT094.roa (hash: ddaH0Ll0Vx1InrKWW5z1h6HGqMMp7orTZW95H1Bjof4=)
                          2: DtrKUjuwAR9N9lv5bAs2nJDm_vk.roa (hash: IKTadbiUFg9tzOWRHQMu+tnQ83zzuuvO8UT29QQwFPo=)
                          3: FaeUz3uKy-mLZtaPCWtQSmRkAfs.roa (hash: GGkJmAABe4TcLrNWBtfMtwloTnLFtsdf5JSihhg5Xfs=)
                          4: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: 1lVujcMEEaCUtWMMsjxGbJa0AYc4oo+in2PXzBtKJ6g=)
                          5: wjzuvsYsPDDKpMgBwHTQ9poihCY.roa (hash: l4MikOI2hGh4JANCfkUoAdXltlywTvqDvN7gXfHekr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 23:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:70:25:6f:71:d0:9c:83:b5:c2:5d:20:e3:85:b6:c1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
        Validity
            Not Before: Oct 24 23:01:03 2026 GMT
            Not After : Oct 25 23:01:03 2026 GMT
        Subject: CN=e6d0f8e03996ea9f1bdac051f80dc49acd487652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4b:c5:d7:62:98:93:c9:b5:0f:46:a3:34:57:
                    33:1f:73:ee:0f:f0:0b:55:89:81:b0:ea:2f:2b:62:
                    92:fd:ef:e0:c0:93:c6:ea:9b:ae:b1:40:dd:ba:b6:
                    2c:bb:13:35:8f:b0:6d:b0:73:84:0b:ef:b9:c0:3d:
                    86:b3:50:55:03:27:ba:1f:08:be:6d:8c:d6:24:81:
                    94:6f:10:36:4a:e4:c6:12:f4:21:af:c2:5c:2e:2a:
                    05:d5:1d:f6:e0:4a:aa:6a:02:f3:4d:6e:bd:f4:21:
                    1b:fb:78:bf:72:bb:66:08:61:f5:ee:43:f0:4d:a2:
                    99:e6:af:ee:7b:59:14:ba:d5:2a:e4:8a:69:03:4e:
                    35:5c:f8:a8:f6:a2:e6:cd:49:6c:0e:cd:1d:0c:9e:
                    d9:ef:39:a5:8e:6f:4a:84:7a:6a:00:81:8c:6f:d9:
                    60:f4:95:e8:66:7d:6a:d2:c5:af:20:e1:eb:de:51:
                    77:73:df:a0:19:6d:11:a5:21:8c:f7:00:59:52:38:
                    19:a5:6d:66:cc:ed:27:2f:1a:15:a7:f0:6f:0e:e8:
                    c2:a0:f3:29:5c:2c:f7:25:d4:44:c6:84:25:fd:38:
                    3d:d5:ee:5b:44:12:e4:e4:29:71:58:61:9a:22:55:
                    02:5f:bb:61:41:d3:f5:60:a1:ad:35:a9:66:0f:01:
                    a1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D0:F8:E0:39:96:EA:9F:1B:DA:C0:51:F8:0D:C4:9A:CD:48:76:52
            X509v3 Authority Key Identifier:
                keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:47:32:31:49:ef:f3:28:42:ff:69:a6:29:f6:13:72:3e:7c:
         df:f5:eb:51:c1:2f:0f:8a:b9:9d:2b:8f:a9:6c:55:45:f1:6d:
         a4:39:7c:1e:6e:c6:7d:c9:62:1b:01:3f:67:77:63:7e:de:33:
         41:7d:f2:3d:3a:a6:2d:58:3a:64:32:af:d8:3e:bd:f4:1e:55:
         f4:a8:48:f1:ed:c7:6d:30:00:75:8f:b5:dd:00:34:07:8b:c0:
         a6:93:c2:96:cc:5b:0e:9e:38:60:7d:78:a0:73:5c:db:b6:89:
         49:a4:f9:c8:75:81:85:eb:89:de:8b:7a:70:97:27:78:88:c5:
         21:de:f7:ce:11:ff:2e:a7:08:d5:d9:d9:85:f4:dd:ef:47:de:
         92:89:d7:5d:bd:10:d2:41:77:05:9b:13:c7:9d:59:25:56:db:
         a9:25:85:3e:5f:fb:0e:51:48:b0:b6:d0:95:77:34:e5:f0:58:
         77:24:7c:2e:80:d6:f7:6b:61:86:ae:19:b9:3c:a1:2d:91:d9:
         3e:44:8d:9e:df:e2:2f:95:d0:11:51:3d:96:ad:79:cf:90:bc:
         c3:7a:c4:8e:49:42:f2:8b:37:cd:af:33:c8:7a:2d:67:8d:90:
         19:34:e3:5d:33:b1:12:44:c6:ae:f9:fb:57:1e:79:e1:ef:ec:
         2f:f2:62:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:02:43 2026 by rpki-client