Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
File:                     ATTJf7sEhrXGbRPKsaiymEYFIds.mft (raw, json)
Hash identifier:          P7H76xaZI0KkPJVTakRHRGHcyHVEsw/hnQ/KKQhZTmY=
Subject key identifier:   FA:3B:11:23:F0:75:0A:51:22:53:97:3B:62:40:7D:B0:74:4D:1B:EF
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Certificate issuer:       /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial:       01A13F02532E1685A8918AB6205310AE8F07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
Manifest number:          0BD9
Signing time:             Thu 15 Oct 2026 10:01:19 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:19 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:19 +0000
Files and hashes:         1: 3De_e63suCP9ycJDJ_Ka1whD8Jw.roa (hash: ZUi0zvIhEAW3gS3GnJUwYhmDjTJ4T7kn28VhumIi1RA=)
                          2: ATTJf7sEhrXGbRPKsaiymEYFIds.crl (hash: m5405tMblRfpx3ZPrEBJny67HQk+zmwQ/z7rUkpfrgw=)
                          3: sdvnk99Tq3EIIIB_nAVJu6v2-eg.roa (hash: rrdg+q8HbhUAgKysFVF0heLuEhPWLu99pYl5fvdmoyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:53:2e:16:85:a8:91:8a:b6:20:53:10:ae:8f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
        Validity
            Not Before: Oct 15 10:01:19 2026 GMT
            Not After : Oct 16 10:01:19 2026 GMT
        Subject: CN=fa3b1123f0750a512253973b62407db0744d1bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:35:ef:38:06:3d:ec:2e:33:5f:c4:c4:b0:79:
                    50:02:17:bc:9f:56:a6:77:1f:23:44:d4:23:61:10:
                    e7:8c:09:8d:e6:fc:20:9a:66:9f:8b:c4:ba:fd:54:
                    de:1e:0f:06:eb:13:e7:d0:29:6d:4e:ac:9d:ab:49:
                    21:ef:3b:cd:6d:44:d6:d1:d5:6b:9f:0a:7f:d0:38:
                    47:c3:00:b8:6e:e8:89:1e:88:dd:2a:87:af:0d:6c:
                    87:d4:ce:69:5e:0e:c3:33:70:74:0c:b5:96:4a:a7:
                    e3:63:f2:f1:e7:06:40:3c:99:07:6a:d5:62:3a:2e:
                    13:9a:85:3d:8c:fc:25:bb:e4:24:59:7f:5e:2a:1f:
                    d8:19:1c:e3:ca:a6:8c:3f:da:c1:6a:c6:e4:92:58:
                    65:bc:f9:63:1f:dd:b8:70:ad:3d:52:a5:10:c1:52:
                    99:26:b2:c2:30:69:e5:f6:4a:16:4c:24:4a:81:68:
                    1a:13:27:4a:6a:0f:da:b3:b7:82:e1:f3:86:b5:5a:
                    24:1a:cd:80:a9:22:1f:97:62:db:27:51:be:bc:6e:
                    aa:55:9c:0b:43:0d:67:79:82:db:b7:61:42:da:b8:
                    78:b7:00:3e:60:5c:46:9c:3a:c9:ec:08:40:b0:2d:
                    16:7f:fd:65:d1:0d:9f:4f:24:7d:7d:aa:68:df:fa:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3B:11:23:F0:75:0A:51:22:53:97:3B:62:40:7D:B0:74:4D:1B:EF
            X509v3 Authority Key Identifier:
                keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:7c:c3:75:fc:8d:cd:1c:0f:5f:cb:45:31:e0:94:99:4b:ad:
         b0:41:68:b7:3f:15:5e:91:89:ba:e7:d9:63:48:82:82:ab:22:
         49:48:2e:a2:c6:89:bd:ed:57:af:bb:b8:0f:f4:b5:55:e6:8a:
         8e:d6:f5:d4:a3:c4:06:e6:7f:a4:5e:9f:1b:78:f6:02:33:75:
         d0:1a:54:c3:3b:ad:e6:d7:96:d6:86:0f:50:fb:56:47:c4:79:
         74:0c:97:f0:6a:e8:cf:7d:12:5c:b8:f4:08:51:95:e0:f7:4e:
         52:6f:4c:67:98:16:a1:1f:d3:e0:03:33:64:f5:5d:72:54:aa:
         d8:37:b8:4a:9b:61:43:01:64:f0:3c:84:b8:88:ca:fc:9f:90:
         25:a7:0d:a4:08:ef:70:ba:10:6b:4b:b9:68:a6:5a:88:f1:c9:
         8d:68:4a:2a:7d:bf:a9:5a:af:b6:3b:9d:6d:22:0e:19:25:02:
         fb:9d:84:15:e8:72:9b:56:42:ef:4a:7f:e7:f7:d0:fd:70:05:
         fd:4d:8e:5c:db:00:aa:52:83:0d:0a:d8:86:51:f1:50:34:83:
         e6:35:53:ff:e2:20:de:6c:84:69:9e:75:e4:fb:34:49:ed:4c:
         8c:52:72:4f:26:e8:61:e1:9c:dc:23:d0:3e:6c:b5:56:8c:08:
         28:cb:27:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:23:30 2026 by rpki-client