Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
File:                     RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json)
Hash identifier:          wlLGe6PMDNf3n3h+TbL7nL3PhHfGPv6FpNSQpV5/1Nc=
Subject key identifier:   55:40:03:64:68:FA:64:BD:B2:0C:EF:14:E4:A2:E2:ED:D4:6A:6F:D6
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Certificate issuer:       /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial:       01A1366C787BFD063DDE96D2CD8BC2491F4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
Manifest number:          1AA5
Signing time:             Tue 13 Oct 2026 18:00:40 +0000
Manifest this update:     Tue 13 Oct 2026 18:00:40 +0000
Manifest next update:     Wed 14 Oct 2026 18:00:40 +0000
Files and hashes:         1: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: xSrJzW7CiHYhX8HkP+g3xEVvMbl+mMG+uzhjt1Q26F8=)
                          2: unbj6R1pt1reWtClkg6u6qP97qU.roa (hash: ve6WwDA/IGFZ6obWRDfS0N46O05JHSdRDsvfP7NEV7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:36:6c:78:7b:fd:06:3d:de:96:d2:cd:8b:c2:49:1f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
        Validity
            Not Before: Oct 13 18:00:40 2026 GMT
            Not After : Oct 14 18:00:40 2026 GMT
        Subject: CN=5540036468fa64bdb20cef14e4a2e2edd46a6fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c1:2d:9e:c9:d4:51:15:45:d0:86:45:9d:a2:
                    57:31:41:32:da:70:1b:bf:41:cd:21:b9:65:0f:a2:
                    c8:e8:85:5e:53:90:93:b8:8c:45:96:9f:9e:f4:83:
                    0b:f8:59:ac:20:1d:6a:d4:f2:70:3c:35:31:69:e5:
                    2e:6d:3b:36:e2:17:c7:24:1d:1b:eb:60:b6:e2:ce:
                    e6:9c:f3:88:ff:96:5e:b5:0e:60:f4:d0:e9:39:f4:
                    3d:cb:f8:5f:66:7a:c4:16:6e:82:2a:86:22:a5:ee:
                    9a:e6:d0:55:09:88:03:da:da:e7:51:a6:9f:0a:53:
                    5c:f8:67:56:67:6e:e3:dc:f7:b3:d0:6d:9e:02:20:
                    b1:2e:be:d0:40:be:53:4a:2a:64:56:4c:dc:8d:21:
                    d1:be:81:ec:e0:22:32:d1:7b:3e:b2:f9:57:09:17:
                    c2:4a:0e:d2:22:60:b1:d1:1b:66:14:49:86:63:54:
                    a6:71:ea:58:96:e2:34:8b:38:f9:9d:4b:5b:48:9f:
                    38:1b:95:31:0b:bd:a1:5a:bb:12:15:95:0f:cd:86:
                    cb:1c:77:96:40:68:ad:54:9c:42:6c:89:19:aa:5d:
                    38:6d:c6:fd:47:99:24:ed:8e:75:cd:ef:11:66:15:
                    ff:81:9e:04:d4:a8:5f:a9:50:29:3e:63:fa:d6:dd:
                    0c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:40:03:64:68:FA:64:BD:B2:0C:EF:14:E4:A2:E2:ED:D4:6A:6F:D6
            X509v3 Authority Key Identifier:
                keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:11:93:9d:aa:58:9c:53:96:3e:55:06:b1:16:b8:65:96:27:
         39:b2:83:c2:ab:2f:5d:80:bb:18:f5:09:35:9c:43:ee:6f:a2:
         93:6e:19:0d:70:f6:e4:94:14:62:07:c5:93:cf:de:ea:c5:42:
         c6:ba:ba:22:7c:59:14:76:39:39:a7:aa:71:4f:ea:8e:55:c6:
         6e:90:93:58:5e:28:ba:8a:29:7a:35:4a:4b:bb:87:a6:f3:f0:
         18:fc:ac:d3:9f:01:df:49:d2:53:68:6e:7c:35:f8:5d:c5:46:
         01:a8:1c:36:4a:35:82:be:df:78:12:ee:57:5e:52:0f:4c:08:
         1d:3b:8c:42:6b:eb:7b:22:bf:f7:9c:9d:09:f0:d9:36:d5:4c:
         62:22:a4:b5:a7:cd:89:e4:40:c1:ed:09:30:b8:02:55:91:4e:
         22:ee:8b:3b:2d:d3:ee:64:24:ea:68:fc:55:57:cc:b6:50:b4:
         4e:87:76:a5:88:e7:76:5e:f7:4b:a0:60:c9:14:12:e8:ef:84:
         f6:71:54:ab:e3:7b:95:06:19:77:55:04:17:aa:c7:b2:51:92:
         81:fc:36:d9:ae:9f:00:27:6c:a0:d8:7e:30:e7:6c:4d:53:bc:
         3b:23:f4:af:8d:03:2e:7f:55:52:d0:cf:a1:64:d8:a6:e4:7e:
         8e:e8:dd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:59:18 2026 by rpki-client