Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File:                     1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier:          zvM7IjQak/ljlc/2KceuUhTU+2LBLILosAyOJrij4r4=
Subject key identifier:   55:E6:C9:21:0D:3C:35:0E:35:59:4B:33:0E:A7:6B:E7:7B:3B:3B:32
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer:       /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial:       01A1675970CF52A3DC1FFABF935AFAC4B203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number:          15AE
Signing time:             Fri 23 Oct 2026 06:01:17 +0000
Manifest this update:     Fri 23 Oct 2026 06:01:17 +0000
Manifest next update:     Sat 24 Oct 2026 06:01:17 +0000
Files and hashes:         1: 1j1sIxN7dokPMeqtWpa2O79IJ2E.roa (hash: curzmuQMCpShAx5Xjvb+jxSDTma4OGIGe6t1amKgW4Y=)
                          2: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: ro2GUA81JzOhpxoF3B94Kx3neDVtyqclaxWimZgqD98=)
                          3: H41pXcA8VjDWzAOdUw8kJkHTePo.roa (hash: vd9X0KNO4KjRnGRSxo8WoFeqcJXdexnSKn3TUknAjFQ=)
                          4: og4k5qVFbhVmLtxHVp2XKWNx-Vw.roa (hash: t6ZkyRFXAOHZOC93uE5FiUdcUyb51CT48WJCdjiZU/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:67:59:70:cf:52:a3:dc:1f:fa:bf:93:5a:fa:c4:b2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
        Validity
            Not Before: Oct 23 06:01:17 2026 GMT
            Not After : Oct 24 06:01:17 2026 GMT
        Subject: CN=55e6c9210d3c350e35594b330ea76be77b3b3b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8b:c0:73:86:e4:84:3b:ea:1d:06:ac:ce:ce:
                    66:1e:17:f4:a0:2e:c1:01:7b:7c:67:d4:76:0b:78:
                    1f:db:8f:47:bd:36:a9:ae:79:44:00:e8:4a:b9:e1:
                    68:1b:a4:ac:1c:35:ae:02:b6:9f:95:5d:71:e4:03:
                    fa:43:50:57:00:1a:03:cc:cc:2e:74:ce:57:4f:a6:
                    7e:25:9f:30:6d:e9:2a:ac:ad:14:ff:be:74:d1:48:
                    0b:b7:f7:0b:2f:61:d6:a7:23:ec:2f:49:a5:f9:1f:
                    65:c6:15:0d:9d:d2:14:5f:fd:95:db:0d:15:f2:36:
                    bf:22:c1:b3:b7:8f:d9:e7:83:55:5d:6c:c5:01:da:
                    d5:e4:eb:29:6e:24:75:22:4e:f3:41:68:3f:78:32:
                    ab:82:e2:0e:93:77:81:7b:a4:87:6d:30:19:1d:be:
                    17:9a:84:de:f8:3a:07:a5:4a:6f:84:20:ec:b6:79:
                    00:5e:63:3c:f9:49:5b:fc:78:c2:d0:ae:a1:4c:4a:
                    37:ec:c1:c8:49:aa:69:12:14:ef:95:06:f6:5b:0a:
                    59:67:82:b3:ca:73:58:a5:17:d2:2f:43:8a:12:cd:
                    3f:00:6c:94:2a:12:0f:81:4f:9b:87:f6:bf:42:0d:
                    95:d8:5e:01:32:ab:d6:b2:50:3f:02:8d:40:31:7b:
                    f7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E6:C9:21:0D:3C:35:0E:35:59:4B:33:0E:A7:6B:E7:7B:3B:3B:32
            X509v3 Authority Key Identifier:
                keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0a:32:b5:e0:91:03:6e:ce:cd:25:8c:0f:6e:5f:da:dc:20:
         93:77:ca:e8:1a:53:b2:d8:71:4a:f0:2c:8c:aa:af:3d:8e:1a:
         69:0c:59:78:f6:d5:74:bb:25:18:ab:93:89:a2:3c:11:24:ad:
         88:f1:52:26:ac:d3:9c:35:68:ff:19:ec:de:0d:0f:a5:00:65:
         91:4d:20:eb:d7:e1:a9:1f:7a:1f:b8:8f:24:49:9b:98:63:ac:
         01:1d:93:f0:db:c7:5b:b8:e2:90:57:51:dc:a6:62:39:f5:2e:
         ef:ae:18:3e:36:bc:27:da:0c:d9:fa:ac:1d:70:f7:07:7d:dc:
         6d:e0:e8:a3:6e:1b:78:38:8c:fa:d4:60:2d:d4:8b:a3:42:ba:
         6f:13:56:1b:bf:b7:6c:5a:97:5a:4a:cf:35:fb:57:fc:6e:58:
         48:4c:94:6b:7b:cf:e1:b8:6c:a6:75:59:96:95:10:0a:cd:f4:
         71:32:a8:7b:16:dc:83:4b:d4:5e:82:97:6a:91:53:18:8e:4b:
         e6:89:5a:62:79:5b:6c:30:96:11:11:7c:40:eb:90:14:53:b1:
         69:c4:d9:9d:a9:5e:48:07:e8:19:b4:60:ea:2e:eb:78:37:09:
         af:bb:0f:c8:5e:e4:e3:49:3a:c2:33:d8:82:f6:bd:a7:2b:9e:
         e6:b8:b6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 13:16:11 2026 by rpki-client