Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File:                     RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier:          6ifw6xVs+FIzHUYvuIorqJYTPWc49ICxCbcCYxuDq7Y=
Subject key identifier:   81:F5:8B:E8:BD:AA:34:BB:67:90:78:78:62:74:DC:5B:04:DC:83:12
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer:       /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial:       01A1483BCFBC79687296DD179FC43730D1B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number:          1AD8
Signing time:             Sat 17 Oct 2026 05:00:41 +0000
Manifest this update:     Sat 17 Oct 2026 05:00:41 +0000
Manifest next update:     Sun 18 Oct 2026 05:00:41 +0000
Files and hashes:         1: 7Ev4pPLmsyvYerb0on_2ycPvjhY.roa (hash: gLjOH0/LgfDmhdEX2dqo2Y4R5qiWj5EqAr1S6u4t4/o=)
                          2: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
                          3: BBqB0S2BZ1MiprBp-ZbU8XCJFuM.asa (hash: Kt6PxLaHA8KqzdMw5yzTBeC2Dt7pKSQXeeJoIQjj8h4=)
                          4: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: NbQ8xVEkjH9ITGef0QHUhyvXPyPOx6IfkS1vIo6bncA=)
                          5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
                          6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
                          7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
                          8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:3b:cf:bc:79:68:72:96:dd:17:9f:c4:37:30:d1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Validity
            Not Before: Oct 17 05:00:41 2026 GMT
            Not After : Oct 18 05:00:41 2026 GMT
        Subject: CN=81f58be8bdaa34bb679078786274dc5b04dc8312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:08:46:ed:9c:df:23:26:21:a1:5b:97:b6:
                    ab:05:ad:78:92:2b:41:f8:b4:92:73:3b:df:0e:63:
                    3a:a6:04:02:aa:77:48:8e:0b:67:cc:f5:fc:3c:c8:
                    6f:a5:27:1b:e3:cf:2c:ab:f8:26:98:da:82:29:a1:
                    e0:40:47:8f:88:7a:90:cf:c8:61:da:6b:d9:7b:8b:
                    11:07:5f:0a:36:49:4a:25:90:b5:1b:45:b4:76:7f:
                    97:2e:55:54:40:e7:2f:fe:4c:8a:8f:a6:04:2e:be:
                    a8:ea:63:3c:98:ce:e4:82:66:2c:a0:5e:9d:40:cc:
                    7c:1c:d1:8a:be:ed:1b:aa:99:d1:67:12:c4:d5:94:
                    61:60:da:8a:06:19:e6:25:d7:2c:e8:2c:24:90:11:
                    91:d2:90:5e:98:0b:70:8e:02:db:16:38:0a:3f:04:
                    84:89:e9:10:d1:68:df:e1:74:49:14:95:8c:0c:76:
                    19:33:dc:f1:22:d1:f8:9a:9f:ef:66:fe:3e:54:a4:
                    d5:b5:da:b4:67:52:9a:2a:c2:48:db:db:2a:26:91:
                    2b:97:82:a0:b1:91:e3:1b:57:61:48:a2:7b:d1:70:
                    fe:9b:5e:c6:e1:4a:e6:04:80:4c:35:86:d2:0e:ee:
                    81:a2:e1:4f:33:38:e0:11:9d:13:81:17:21:16:bf:
                    7a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F5:8B:E8:BD:AA:34:BB:67:90:78:78:62:74:DC:5B:04:DC:83:12
            X509v3 Authority Key Identifier:
                keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:04:be:da:31:cd:9a:b4:35:c8:01:39:9b:54:e1:b8:2c:46:
         ac:6c:66:3b:b2:f3:c7:65:08:f9:56:0f:14:96:5b:c5:f7:17:
         ba:e5:92:dd:e0:b5:eb:c9:4f:24:e2:1e:32:2e:f4:17:db:80:
         df:cd:4e:25:27:a7:9c:c6:c5:3e:ae:be:83:86:42:c2:97:1b:
         8f:d3:39:ad:f3:bc:70:25:dc:2c:0d:a2:33:a4:d1:a0:22:18:
         83:81:15:b9:47:f4:39:1c:1b:c0:ac:f5:60:11:a4:99:1f:ce:
         50:7f:b2:29:cf:00:cb:84:69:af:20:c0:c1:73:d2:6e:06:21:
         8d:72:e3:9e:f9:a9:05:31:8f:39:cc:80:c4:a0:58:e8:56:53:
         d5:0c:9f:37:33:9e:cb:77:1a:66:7d:bc:0b:a7:6c:6f:46:42:
         9a:3c:3a:08:e3:06:84:f7:7b:59:8d:05:14:c7:d6:87:7a:85:
         52:02:41:4d:dd:fe:78:b9:e3:10:13:5e:60:c0:68:ea:98:26:
         06:4b:d1:6b:c7:95:9c:a7:e4:61:01:26:a0:b4:06:59:68:3b:
         e7:ef:e4:ee:17:a8:5f:f3:db:a9:f8:a7:f0:ec:21:45:bc:46:
         a3:f2:e5:0f:16:8a:be:84:39:fb:5d:63:cd:8d:36:57:c1:e6:
         1a:fc:69:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:12:35 2026 by rpki-client