Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File:                     sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier:          8FycuZ9gBHD3VRH8HX3Krc/GZ8MpVGaN6cj1X/Kn9uk=
Subject key identifier:   17:15:27:38:3A:E0:D2:60:75:25:1E:FE:ED:79:5F:C5:F4:C0:37:63
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer:       /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial:       01A13447A202C2121B934A260CF9272675FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number:          1AA0
Signing time:             Tue 13 Oct 2026 08:01:12 +0000
Manifest this update:     Tue 13 Oct 2026 08:01:12 +0000
Manifest next update:     Wed 14 Oct 2026 08:01:12 +0000
Files and hashes:         1: 60O0SRzjGsORJ1LBFnHv2U1PHTk.roa (hash: 3tf/Ui4ibWz+Ljka1guaW3+IweRIpdh9pYNIaOP6ChU=)
                          2: R4SqufV61FjY_qt6XBJL1xKD3Yk.roa (hash: oxpnmOAxuGivN4BOARVKb2erg4+PNj4PUrM7BceH1yo=)
                          3: i8jFdg5Mow9Dh-pthFrBPnRY_7E.roa (hash: cPsXapsQYVV5sthITpOROGImuL+pHXuvlOflhuTnK7c=)
                          4: jJ8Ja4wQj77UXskU4dYzizx-fO8.roa (hash: D/f3chU7o9XZeTFLsqkW7hmyKTnJCw4DJq8f3FXAw8c=)
                          5: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: x5GDkBnwG4FuwIaU2oB2XPvlZmf48bA1clTlEQClboM=)
                          6: umCBjEn3NnVHg79eLHC3xk9rgS0.roa (hash: /fSksQdekqYTESP/mXyQvaIFQ1BWx6zsTRDj8qcB0V4=)
                          7: y1bR5jl013Y3lzMs7c_lC8K_wF4.roa (hash: ZOf1GD5+F7Ix58HDKPiEjn4TBv+b/5vVBq1mleIzuFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 07:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:47:a2:02:c2:12:1b:93:4a:26:0c:f9:27:26:75:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
        Validity
            Not Before: Oct 13 08:01:12 2026 GMT
            Not After : Oct 14 08:01:12 2026 GMT
        Subject: CN=171527383ae0d26075251efeed795fc5f4c03763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:04:56:e5:ef:56:6b:c5:2c:58:db:37:25:ad:
                    cb:01:48:7a:07:d6:51:7c:d5:de:ab:ef:9f:e5:cc:
                    24:ac:2d:52:f3:bf:a7:16:32:ae:5d:7f:2b:c7:1d:
                    9a:5c:ce:45:d7:c1:5c:66:c5:22:45:45:a8:12:b0:
                    41:c1:dd:84:9e:8e:3e:ce:14:b4:1f:2c:d9:b0:17:
                    da:61:90:c7:7c:3f:30:c1:d3:86:f3:67:08:87:83:
                    a0:06:71:0a:85:75:27:04:4c:94:c4:bf:fd:96:c4:
                    6d:78:b3:08:81:6f:4a:05:f3:ef:7d:c1:3d:25:fc:
                    bc:0e:5d:9c:14:b2:8a:18:62:84:2d:df:1a:15:84:
                    06:ec:e6:8c:fe:44:d5:cc:b1:ea:bd:f7:b3:61:28:
                    6f:fa:07:d2:bd:46:22:bd:26:2e:67:5d:4f:b2:f2:
                    01:ca:7b:70:a6:1d:9d:da:e2:a1:09:bc:7d:46:2b:
                    e8:fc:08:35:ee:10:fb:0b:f3:ac:c0:a2:0d:79:02:
                    56:a9:e8:9c:a9:39:0c:00:42:5f:1b:c4:d4:b0:a5:
                    28:4a:56:38:be:bf:ad:91:46:fc:de:b0:98:bc:8f:
                    c3:3f:1c:db:57:15:fe:2d:fc:ba:12:d5:a3:82:68:
                    6c:ef:ad:1a:87:b5:ce:74:20:4d:37:92:10:2c:fb:
                    74:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:15:27:38:3A:E0:D2:60:75:25:1E:FE:ED:79:5F:C5:F4:C0:37:63
            X509v3 Authority Key Identifier:
                keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:3a:fe:c5:86:46:52:d1:12:9b:7a:50:02:21:45:4f:f9:f8:
         d3:2b:f8:10:6e:92:cd:fd:ec:61:9f:20:f1:ce:5a:d4:61:17:
         d5:7d:cf:94:9f:82:c6:c0:66:d1:cb:02:77:90:4a:c6:d1:eb:
         dd:43:65:cc:94:3d:6e:86:a2:8c:20:7f:ad:08:cc:88:83:75:
         7d:3e:9e:26:c7:0e:2c:7f:c0:76:17:41:3b:55:bd:e7:45:6a:
         2c:05:0a:7b:b4:25:3e:6b:c4:a0:6d:31:be:66:c3:3e:67:dc:
         75:53:5d:fb:e0:ca:50:5c:5d:fd:ea:bf:f5:69:5d:e7:58:98:
         57:e4:32:e8:f8:b8:73:64:da:11:18:fa:3c:41:ac:9e:98:67:
         fd:69:d9:5b:f6:c9:1f:11:32:22:33:5a:ff:64:09:04:cf:86:
         e5:23:11:fb:cd:a4:8f:32:33:2d:7a:45:1c:5b:fd:a1:6f:81:
         19:a8:72:f2:f1:b3:58:a4:57:10:61:00:74:b3:a2:81:a5:9c:
         7e:c1:47:39:1d:78:17:4b:51:c2:09:62:c9:d7:0e:5d:af:2a:
         6c:a1:49:9b:b7:cd:fb:44:0b:b9:1f:95:a5:79:b7:09:ec:ee:
         97:b4:78:22:1b:7c:04:11:f9:7a:8b:26:4e:6c:65:7a:f8:d5:
         b0:cd:a6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:37:00 2026 by rpki-client