Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
File:                     m1bbbkurl01Zvy7tECKgLu49N64.mft (raw, json)
Hash identifier:          KVbOX3vrPUdW/DU9z6odHEjXR/+GrDo23uTl3Cdnm4Q=
Subject key identifier:   EE:42:20:52:E1:AD:FC:33:D0:14:1A:64:C8:5F:70:83:C0:08:1D:17
Authority key identifier: 9B:56:DB:6E:4B:AB:97:4D:59:BF:2E:ED:10:22:A0:2E:EE:3D:37:AE
Certificate issuer:       /CN=9b56db6e4bab974d59bf2eed1022a02eee3d37ae
Certificate serial:       01A17BF1E9CBC4FDD3C1F682B6A018571B17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
Manifest number:          013E
Signing time:             Tue 27 Oct 2026 06:00:13 +0000
Manifest this update:     Tue 27 Oct 2026 06:00:13 +0000
Manifest next update:     Wed 28 Oct 2026 06:00:13 +0000
Files and hashes:         1: MhgYeI3nHsQ7EnEqBs3ix3URXK4.asa (hash: OMQ4Jfqr1uKSBnWc8VFQoJ2KmKvXwz+ZT7n6PnlnJ/k=)
                          2: m1bbbkurl01Zvy7tECKgLu49N64.crl (hash: mbQlj05Re/Vj3ofutL7jLlfx7uTAvZX6oUJy5BseF3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:f1:e9:cb:c4:fd:d3:c1:f6:82:b6:a0:18:57:1b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b56db6e4bab974d59bf2eed1022a02eee3d37ae
        Validity
            Not Before: Oct 27 06:00:13 2026 GMT
            Not After : Oct 28 06:00:13 2026 GMT
        Subject: CN=ee422052e1adfc33d0141a64c85f7083c0081d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f4:19:93:e9:aa:44:07:5d:b7:53:01:40:98:
                    fb:91:b3:dc:a3:7c:ab:d1:44:ca:da:b6:d1:0e:85:
                    e6:1a:74:ec:a3:56:4e:4a:8c:ca:89:03:3e:27:59:
                    24:ae:92:84:de:00:70:13:24:e1:dd:ad:04:17:55:
                    86:2c:69:40:dc:fa:22:4f:25:96:6d:63:74:47:a4:
                    85:0e:cd:91:c5:99:0f:5b:f5:17:26:fc:b7:c0:5c:
                    23:1e:16:c4:80:99:9c:be:2b:76:7f:81:2a:0a:24:
                    9e:51:a9:41:d6:99:b3:ee:59:e5:8f:eb:cf:14:df:
                    ad:15:4b:c5:48:9a:63:86:8a:4a:ea:de:bb:c0:e8:
                    60:e0:0b:99:62:ff:a7:68:6d:fb:dc:b7:9c:2a:6d:
                    ca:21:71:65:ce:2f:fa:de:dd:43:cf:14:eb:7e:4f:
                    e4:2d:07:a9:8b:c8:76:e9:3b:18:b4:e4:d9:2c:fd:
                    9f:26:fd:dd:78:39:2e:59:bf:e1:51:8c:5e:82:a3:
                    36:7d:4f:e9:00:2a:1b:96:83:97:8c:63:cf:b3:6b:
                    99:46:50:6c:0e:01:8a:87:24:7c:f4:16:77:98:b0:
                    fe:d6:69:86:30:ee:e6:7a:8f:85:c7:a8:99:c0:e1:
                    b4:1b:5c:62:ef:5d:1b:63:7c:39:10:24:b3:d3:b5:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:42:20:52:E1:AD:FC:33:D0:14:1A:64:C8:5F:70:83:C0:08:1D:17
            X509v3 Authority Key Identifier:
                keyid:9B:56:DB:6E:4B:AB:97:4D:59:BF:2E:ED:10:22:A0:2E:EE:3D:37:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:32:23:5c:f9:a4:9e:f5:aa:71:84:53:34:50:f9:f6:4b:37:
         b1:37:f7:3d:af:1f:78:ad:52:2e:d6:5b:7a:cc:82:59:81:67:
         af:0e:fd:0a:0c:8a:50:25:c2:b7:66:c8:e2:12:90:6d:76:c7:
         99:77:67:c9:ad:fd:a3:ae:e1:2d:94:fa:fd:45:a6:35:d7:96:
         f3:1f:95:a3:a8:e4:f5:45:e7:eb:d3:bf:f5:09:32:3b:5b:de:
         91:94:8b:cb:b9:92:6e:c0:54:f9:9f:b5:45:fb:7e:c7:66:01:
         5b:d8:81:5a:e4:6e:a7:8d:1f:2a:5e:19:9c:58:d3:08:35:31:
         f7:18:da:2a:d3:76:ad:04:71:c7:5e:58:87:53:26:89:e8:ca:
         ed:09:bc:c3:c4:5d:17:d9:a9:87:3d:ce:56:1e:96:43:b9:e0:
         90:61:df:67:7f:2e:0d:07:9e:06:c9:a3:ef:5f:f0:3e:b0:ca:
         d9:53:05:39:23:67:45:04:1c:85:1f:5e:d5:04:76:39:d5:03:
         2a:02:f8:0c:40:4b:e2:cc:a1:94:6d:e2:d6:b2:2c:d8:94:c9:
         53:b7:5b:a9:0d:15:89:da:d2:c1:bc:af:9c:ff:9c:54:32:4c:
         1b:75:8f:60:f2:90:24:e0:38:c3:ee:18:93:78:af:db:a2:95:
         68:29:dd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:39:27 2026 by rpki-client