Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
File:                     d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft (raw, json)
Hash identifier:          McmPh3Omza6P7ttFwQBa2UCCiozNNQRWpWDwwVcSryw=
Subject key identifier:   73:3D:D6:CE:CB:7B:FE:35:75:B0:86:FB:A1:81:81:78:72:03:83:F1
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Certificate issuer:       /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial:       01A14082B68AB1397628F48AD5EBFF95BCDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
Manifest number:          15D4
Signing time:             Thu 15 Oct 2026 17:01:10 +0000
Manifest this update:     Thu 15 Oct 2026 17:01:10 +0000
Manifest next update:     Fri 16 Oct 2026 17:01:10 +0000
Files and hashes:         1: 4tLtZV00F7203d-0-VBLm-eP82U.roa (hash: lay1wdctHfM+5cGbvUeC7dYoLI/g4f9AW/OZJtKzUcM=)
                          2: d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl (hash: Q+9TCpgrsZrPHC0NorLOckAl2mtj1c1stb2q43oFIsI=)
                          3: jknUDg7dwoXIKf-FEYWIUojpUtc.roa (hash: 2W3qLOECU7Uc4cSeqqL3ulz5L4R4vc28jKIJo8yhIIg=)
                          4: yeFo64foK3kpAhiGs_pqxDBcJmw.roa (hash: 4dFVu3RpkjabUXVyt139HwNFtfV67WkuH9beOvHuc1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:82:b6:8a:b1:39:76:28:f4:8a:d5:eb:ff:95:bc:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
        Validity
            Not Before: Oct 15 17:01:10 2026 GMT
            Not After : Oct 16 17:01:10 2026 GMT
        Subject: CN=733dd6cecb7bfe3575b086fba1818178720383f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:6e:15:18:a1:54:66:68:62:1d:9f:eb:15:
                    ee:ea:c4:18:a0:34:1e:b3:61:d5:18:a2:6d:22:e7:
                    3d:0f:df:97:11:f1:d2:61:27:fb:f2:59:12:b2:1d:
                    5e:c9:8f:b9:2b:26:33:7d:4c:7a:4e:ac:44:61:04:
                    ad:28:51:85:7b:bc:9f:30:09:a1:b0:ef:5f:49:da:
                    aa:1f:e3:aa:b8:57:cc:3d:cb:33:fb:69:41:0c:a4:
                    75:e1:2e:e5:bd:79:1a:59:ee:12:02:e7:4a:a9:d9:
                    45:34:86:b4:40:db:71:b4:d8:cc:3a:bc:2c:1b:4e:
                    cb:02:26:fe:0d:52:1d:08:c5:bd:f6:9d:91:e7:d4:
                    44:30:92:70:f2:55:d1:71:90:bc:c3:68:a7:75:ce:
                    26:62:ce:83:27:c0:83:ca:b1:61:a6:93:ed:47:7b:
                    cf:42:8d:3c:6e:4b:c7:a0:66:84:0d:54:54:44:a5:
                    b3:f0:6a:de:31:12:dd:74:d6:c3:18:16:ef:f5:72:
                    78:e2:02:2d:33:19:b8:1f:42:f1:db:49:2b:2b:76:
                    13:fd:ac:7e:90:91:ff:d6:f1:d6:8a:65:87:fc:53:
                    0e:d3:fc:35:16:a3:30:0b:ea:6c:49:7f:1e:c0:2b:
                    65:0c:5f:84:dc:28:06:49:d3:8c:91:20:2d:9a:31:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3D:D6:CE:CB:7B:FE:35:75:B0:86:FB:A1:81:81:78:72:03:83:F1
            X509v3 Authority Key Identifier:
                keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d4:4a:6a:7f:01:db:d3:07:60:a6:11:2c:bd:43:83:8f:34:
         af:c6:0f:fa:7d:84:45:95:26:70:63:e3:f9:16:d1:63:2e:a6:
         5e:1e:a1:9f:9f:92:e8:df:68:95:5b:7c:28:2a:9c:dd:42:49:
         6c:a4:f6:bc:51:ce:c6:19:35:ea:59:20:ea:31:86:b9:80:9b:
         5d:00:23:21:44:43:86:88:cc:f4:69:07:ef:fb:8d:01:6c:05:
         11:19:3e:37:b2:6d:f7:73:ba:33:d0:17:10:b6:6e:46:5b:64:
         b6:98:1f:83:37:2c:0d:b9:c4:1d:85:5c:76:77:df:64:83:8e:
         d5:81:fd:35:5c:75:6c:1f:ef:1f:d2:c3:55:af:04:77:a3:97:
         17:3f:b4:a3:4f:45:cc:e7:3b:b5:3e:e6:11:f6:bc:4f:9e:1e:
         2c:15:af:a4:6e:9b:b0:51:55:b1:cb:86:a0:4f:bd:66:e4:49:
         78:5d:36:1e:16:dc:8f:9d:44:53:d9:7b:ca:e2:73:dd:2f:b4:
         10:31:80:c8:47:29:0c:57:4c:a3:f6:de:d1:eb:d0:73:ce:59:
         da:03:bd:50:b3:e5:9b:0c:cf:2f:d2:81:4f:e9:b2:0e:02:3e:
         3d:99:eb:05:a9:00:19:6e:e6:16:3c:c5:20:d1:e8:b5:47:41:
         3d:49:ae:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:08:59 2026 by rpki-client