Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
File:                     cneEWZV3bPbyoIN_etTBqRvJfYI.mft (raw, json)
Hash identifier:          5x86QOBER1thrszOmPRUgU2yqxVpN+GzMOS1UePVnEg=
Subject key identifier:   24:86:C6:27:BF:4B:73:48:DB:8F:9B:61:ED:98:11:1F:95:90:4A:1D
Authority key identifier: 72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
Certificate issuer:       /CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Certificate serial:       01A180E2026669F472FDFCCB3F352D73BDB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
Manifest number:          1A37
Signing time:             Wed 28 Oct 2026 05:00:57 +0000
Manifest this update:     Wed 28 Oct 2026 05:00:57 +0000
Manifest next update:     Thu 29 Oct 2026 05:00:57 +0000
Files and hashes:         1: Uvjl_e-fGHqxg-WZscin2AO7GsM.roa (hash: fWbVIXU+/s+B7hBrHIOQSlS6p7bvD78hGqL26k6k6h4=)
                          2: cneEWZV3bPbyoIN_etTBqRvJfYI.crl (hash: 9kYOTKztVxOBGIe8wqvnwnQ21o9pD03nkXakc8BnU38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 05:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:e2:02:66:69:f4:72:fd:fc:cb:3f:35:2d:73:bd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
        Validity
            Not Before: Oct 28 05:00:57 2026 GMT
            Not After : Oct 29 05:00:57 2026 GMT
        Subject: CN=2486c627bf4b7348db8f9b61ed98111f95904a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:12:1b:89:03:52:08:51:52:a6:d4:14:70:02:
                    8d:ff:c0:48:dd:b7:b4:db:b1:2b:aa:fe:73:28:89:
                    57:a9:8a:c8:27:6c:9f:f0:2d:58:ed:aa:fc:6d:76:
                    8b:b7:01:e0:b4:e0:e5:8e:af:b1:21:53:a2:69:96:
                    1b:cc:47:52:7b:fc:7f:51:b9:20:81:3a:b9:57:c8:
                    e7:98:bd:ed:63:1b:2d:75:ae:48:ba:25:51:b4:21:
                    52:39:af:66:a8:ed:24:91:4f:08:75:0d:40:44:b2:
                    1c:04:68:0e:5e:94:7f:1c:59:f6:7f:f8:ab:3f:53:
                    6d:96:9d:4b:20:97:1a:81:88:01:55:a1:ee:a1:b1:
                    e4:bf:da:84:91:c8:9c:41:66:31:f2:b8:68:d9:7c:
                    10:91:f2:86:d7:c6:ea:34:99:35:45:78:29:de:48:
                    54:a3:4b:ce:7a:41:48:7e:e3:d1:99:b3:b7:fe:f7:
                    ed:60:e9:3d:ad:e1:8c:9f:8e:3f:bf:92:4d:f2:7e:
                    a2:18:02:2a:bc:f3:da:32:e3:4a:15:12:ee:45:65:
                    0e:e7:3b:27:c1:b8:71:4a:18:35:b0:e9:e2:d5:df:
                    5f:34:3f:41:fb:f8:13:d9:b5:ea:12:65:36:7e:67:
                    b6:b7:cc:cc:ee:a0:55:15:df:d6:0d:5f:2c:ea:71:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:86:C6:27:BF:4B:73:48:DB:8F:9B:61:ED:98:11:1F:95:90:4A:1D
            X509v3 Authority Key Identifier:
                keyid:72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:42:9b:52:0a:e8:52:a7:64:1c:dd:8a:10:15:c8:6f:d7:df:
         7c:a9:bf:bf:48:c4:c4:03:2c:fe:ba:2f:12:f7:47:14:d0:83:
         ce:8a:09:a0:0b:26:a1:d9:20:cc:14:b0:e3:dc:ea:d0:56:64:
         85:5d:f3:31:ce:98:89:84:c6:62:5a:c4:86:cd:1b:4c:9e:c9:
         74:45:b1:54:6f:80:c2:dc:61:1c:61:32:78:71:8d:52:88:7d:
         1d:5b:78:5c:09:d5:69:63:72:81:90:71:0d:d3:d1:3c:7f:83:
         bd:bb:bd:db:78:20:72:75:48:d8:7f:3d:26:10:0d:72:92:02:
         e2:f0:2a:f4:bc:fd:25:7b:0f:df:56:bd:ae:eb:0b:3d:ab:12:
         7c:c2:43:75:8e:d6:c9:7b:da:e9:7d:3b:93:1d:f8:66:56:ff:
         3d:b0:23:5a:91:88:86:3a:f0:7d:9b:26:6e:80:7a:0b:34:89:
         51:38:c8:d8:04:85:20:97:28:f6:3f:6e:4a:5b:da:a5:7f:92:
         34:9d:8c:3b:4a:58:c3:61:6e:1a:bf:2e:ea:ca:a6:b8:1e:75:
         18:d4:c7:88:3f:31:a3:9c:7e:f0:fb:8f:0e:99:0a:7b:b8:e0:
         52:b6:30:69:ff:3d:a4:35:1f:e0:2a:77:f7:6b:9d:31:d0:d4:
         bb:a1:2f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:30:15 2026 by rpki-client