Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
File:                     dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json)
Hash identifier:          s68Nyq7wFyaWh9BqWKN3tvcpJrZXL8eLivDcLpvr7UA=
Subject key identifier:   F8:3A:A1:D9:19:29:88:8A:F5:F1:FC:32:8D:C0:DF:8A:B0:B4:ED:DF
Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Certificate issuer:       /CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Certificate serial:       01A132C7458F876B692BAC0E2CD85828B80E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
Manifest number:          0783
Signing time:             Tue 13 Oct 2026 01:01:22 +0000
Manifest this update:     Tue 13 Oct 2026 01:01:22 +0000
Manifest next update:     Wed 14 Oct 2026 01:01:22 +0000
Files and hashes:         1: 3lauIf0YpbUjYSTnhhTVxklgLKk.roa (hash: yggx4J03w1luy3uhGhFmtwjE58TFme6YVBEKV6qwxTo=)
                          2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: K+rRZ+ytDK5HGEp+jaGW2nOW7RrW1bUBqceKif3Wvrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:c7:45:8f:87:6b:69:2b:ac:0e:2c:d8:58:28:b8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
        Validity
            Not Before: Oct 13 01:01:22 2026 GMT
            Not After : Oct 14 01:01:22 2026 GMT
        Subject: CN=f83aa1d91929888af5f1fc328dc0df8ab0b4eddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9e:2f:09:ac:56:f9:88:2a:d7:4a:7e:f1:79:
                    98:f4:03:e6:95:03:ba:9d:6e:58:c8:12:28:3b:58:
                    fd:06:14:95:48:d5:52:97:66:b2:1e:2a:ec:e1:ed:
                    ef:33:69:54:bc:c9:d9:f3:56:64:72:59:51:97:a0:
                    9c:4c:02:2b:0f:47:81:48:07:a0:81:09:40:ab:16:
                    61:ca:6e:25:7e:fb:e2:48:c8:97:81:1a:24:da:1c:
                    6d:75:90:f7:91:3c:1e:ad:22:10:ba:ec:60:a0:b8:
                    f8:bb:df:83:54:b9:15:0c:25:fb:a9:02:11:45:2e:
                    47:ff:9f:6b:1a:0b:d0:8a:88:cb:56:3e:dc:f4:7d:
                    c4:b8:f0:ae:dd:01:62:13:c6:3e:2a:05:40:20:d8:
                    88:be:bd:a5:c5:cc:24:b6:62:ef:00:2b:b9:38:1d:
                    4f:1c:ac:c7:9e:93:bc:e9:9c:8e:33:2f:f1:1d:70:
                    c0:c3:d8:14:81:e5:fe:84:fd:e9:b2:06:b1:b5:b2:
                    2e:0d:9e:b8:a8:e3:ce:65:d4:b6:1a:c9:f5:7b:a7:
                    f2:88:97:b9:f4:b0:6f:59:ef:fe:3d:ea:59:b5:32:
                    96:c8:9d:84:04:ab:23:2f:83:e8:f7:da:06:7d:30:
                    52:79:32:e1:ef:ec:d8:c8:de:cb:3a:08:8d:80:e4:
                    57:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3A:A1:D9:19:29:88:8A:F5:F1:FC:32:8D:C0:DF:8A:B0:B4:ED:DF
            X509v3 Authority Key Identifier:
                keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d0:7e:52:9c:57:dd:94:b7:f8:7a:d8:4b:bd:62:11:75:1f:
         90:15:97:fb:a3:9a:dd:8c:f3:c6:6b:e9:8b:93:e6:ed:a0:90:
         92:72:70:c8:56:fa:e1:b5:7c:dd:19:d8:2a:eb:e7:5a:fc:49:
         d2:e0:43:e3:72:31:ba:d5:13:ae:4e:e4:2e:6a:23:5b:43:35:
         7b:63:e8:f3:5a:fb:b7:cf:44:c5:8a:ec:05:e8:23:ac:d4:5f:
         4a:7e:51:68:a4:cd:fc:44:e0:a5:e0:0c:72:5b:8a:ae:a3:26:
         88:87:cf:f7:22:63:1c:74:81:96:d2:b5:6b:00:4d:ae:83:71:
         33:99:1c:ea:f3:7d:ad:41:9e:dc:48:c5:d1:79:96:4b:ed:1b:
         43:f8:de:0e:ac:79:52:68:29:b5:df:c8:89:ec:67:5b:db:e8:
         cc:80:50:29:69:14:4c:b0:20:a2:98:17:f7:d7:33:22:c1:70:
         18:23:ce:91:1d:a5:87:5a:50:83:d6:66:5b:f6:05:97:f7:66:
         3a:66:1c:c5:fc:39:fe:c7:2e:8d:5e:bd:4a:56:9d:d1:96:40:
         0f:a3:51:9d:ac:dd:1b:21:52:86:8d:98:d1:ea:f7:07:d3:1b:
         07:37:54:83:b8:17:64:39:50:9f:14:98:53:db:c3:cd:da:ad:
         f1:e0:00:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:33:39 2026 by rpki-client