Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.mft
File:                     115dUHJXR19ygSMGVLOYcPpJadw.mft (raw, json)
Hash identifier:          +rFNUgM+1mnIIcu6FNhYNbmHtewNb1blymkT2MQYrVM=
Subject key identifier:   6D:E1:C0:01:C1:F3:CD:A2:96:7F:7A:6C:21:2C:B6:7D:25:DD:2B:96
Authority key identifier: D7:5E:5D:50:72:57:47:5F:72:81:23:06:54:B3:98:70:FA:49:69:DC
Certificate issuer:       /CN=d75e5d507257475f7281230654b39870fa4969dc
Certificate serial:       01A18D8B2BC4C31ABF5D47DD2326039E1AC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.mft
Manifest number:          014F
Signing time:             Fri 30 Oct 2026 16:01:10 +0000
Manifest this update:     Fri 30 Oct 2026 16:01:10 +0000
Manifest next update:     Sat 31 Oct 2026 16:01:10 +0000
Files and hashes:         1: 115dUHJXR19ygSMGVLOYcPpJadw.crl (hash: l9qJLCNK3A3q4UD/XrEHfiBoNXm99Dvrxzn5cpLNS6E=)
                          2: 3jS-EW0KPdzgH2HV0Ma2F117kHY.roa (hash: ApZl3uc7qsItjXP5BdMYJrDr1Og4ZRx6coctMdY4uyE=)
                          3: 7boJT0nuElkdZvUtVY1uM9FDXLw.roa (hash: +v4R3QQYqLg7mY1n3ak0UrRVoJyVuf0Wn/D/5q5sqHY=)
                          4: E4yvvt196vs7XeMpUaVXZZj5Ybg.roa (hash: F7abYGHqDbBPf8CEJ84pVjgWKS2FXteqb7lV8H9GG8s=)
                          5: Fo3oH4yMTBjax7NmGSl9FHa5zR0.roa (hash: EUFOlZwRDK4AGrtsC+MjaZiSHnDerpsetOIC5PhcqdY=)
                          6: Zfa44Qs3hvp-Y7JcSOeHInnUwXA.roa (hash: 9NnTUP9qERCEhdunBQ4Z7a7xU0ytQQDj/R2htCHGsSc=)
                          7: eBweehnas2GuYAkSvkjux9Urb4c.roa (hash: IsQNoxMmS7cT90e/s39/DMNKBqXUlPxHH++DtrM+I00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8d:8b:2b:c4:c3:1a:bf:5d:47:dd:23:26:03:9e:1a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75e5d507257475f7281230654b39870fa4969dc
        Validity
            Not Before: Oct 30 16:01:10 2026 GMT
            Not After : Oct 31 16:01:10 2026 GMT
        Subject: CN=6de1c001c1f3cda2967f7a6c212cb67d25dd2b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:10:89:cb:41:23:78:8e:43:63:29:4d:1c:2e:
                    9d:5d:96:76:bc:09:af:83:2e:8c:90:45:0a:78:04:
                    1e:0f:ee:7c:7c:b0:b5:b9:5d:16:99:85:e6:99:7c:
                    8b:2e:b2:dd:92:a2:2c:d6:36:3c:98:77:28:64:39:
                    bf:5d:de:a7:5e:75:7f:ef:f8:ca:75:c6:fb:77:c5:
                    8d:41:0f:42:fc:bd:56:71:95:0f:77:14:b1:84:4c:
                    67:50:bc:c7:f7:4f:19:47:4e:c0:44:b3:74:04:a7:
                    74:89:61:ed:68:fa:d7:a9:10:25:3c:1b:e9:36:63:
                    f0:48:de:08:82:83:eb:1b:77:ed:7e:d7:04:ce:a5:
                    d1:dd:23:42:86:b7:01:2a:f6:11:53:04:96:69:cc:
                    ce:eb:f3:ca:35:2b:11:ce:8a:9d:a4:43:e7:61:5a:
                    ba:70:3c:5c:0e:36:8b:e2:ac:e5:45:28:b0:6c:cc:
                    bc:7b:33:94:78:29:88:6d:90:37:b1:02:8a:8c:8b:
                    67:bf:25:23:82:6f:17:6b:80:9a:24:58:de:18:5e:
                    8b:a2:0c:1b:c2:8f:3b:02:37:ce:c9:60:37:c2:f9:
                    f5:28:63:62:c0:69:15:a1:12:5b:94:a9:9e:a4:75:
                    97:d1:e2:37:7d:52:84:b4:0d:8e:35:66:c9:a3:1e:
                    bb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E1:C0:01:C1:F3:CD:A2:96:7F:7A:6C:21:2C:B6:7D:25:DD:2B:96
            X509v3 Authority Key Identifier:
                keyid:D7:5E:5D:50:72:57:47:5F:72:81:23:06:54:B3:98:70:FA:49:69:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b8:b2:a4:d8:18:e4:0f:62:bd:da:72:7c:b0:e3:2e:ff:c2:
         4a:65:2d:a0:36:8f:f4:1a:a1:08:31:a2:50:27:cf:e8:f1:85:
         d6:64:31:34:57:3b:98:e7:5a:40:12:70:b2:bb:a9:6c:81:9d:
         90:7d:56:5c:27:a3:87:41:44:bf:67:d8:7e:ac:a4:ea:2b:1f:
         57:bc:ac:65:83:76:ca:d3:9e:e6:29:2c:44:d9:f4:3a:c8:3f:
         94:da:f6:81:33:7e:a4:11:80:12:a3:14:1a:a1:8f:59:cb:da:
         25:03:87:01:54:2e:b8:56:8c:72:68:9e:bf:4d:40:5b:0f:a6:
         03:c9:76:d7:ac:e4:3d:76:e8:3e:2b:95:e9:84:41:f6:ac:6a:
         75:10:4e:a0:a8:bf:78:3d:12:29:71:58:9b:9e:d7:dd:35:45:
         10:93:90:26:96:bb:9e:f8:d4:23:a8:2b:e5:8d:c9:aa:34:9d:
         72:4d:4c:2f:54:af:34:68:4f:29:d7:59:a7:12:f8:e0:10:da:
         33:cc:43:68:01:76:fa:15:30:1d:14:c6:b6:02:14:8e:47:88:
         3c:c5:e9:24:2d:9c:b3:99:22:94:8b:a0:03:62:3f:3a:80:78:
         86:1c:dc:0a:f3:c7:fe:c9:05:05:38:4b:47:cf:38:58:ee:f4:
         ab:17:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:07:52 2026 by rpki-client