Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
File:                     r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft (raw, json)
Hash identifier:          /KrQFJkjzFgmjxOtaA6JwYZfyPBKuzfApgqjsORsrd4=
Subject key identifier:   4A:AA:E0:26:CD:19:8D:AF:B9:60:37:C9:D1:32:D9:89:52:5A:E1:14
Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
Certificate issuer:       /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Certificate serial:       01A125B03B8E0504CB72BF21218345E6FE1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
Manifest number:          0BA6
Signing time:             Sat 10 Oct 2026 12:01:08 +0000
Manifest this update:     Sat 10 Oct 2026 12:01:08 +0000
Manifest next update:     Sun 11 Oct 2026 12:01:08 +0000
Files and hashes:         1: r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl (hash: bKEWRNCkwhfcGUwv7ngzeD5k07j8DS1muEXtHBVXe/s=)
                          2: vOap3lF_tFCZW-DOrcwPq0UBrm0.roa (hash: sDecGEkGDmv0nje/6thzunoswSWfLrwvt0Nww3M0Lpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:b0:3b:8e:05:04:cb:72:bf:21:21:83:45:e6:fe:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
        Validity
            Not Before: Oct 10 12:01:08 2026 GMT
            Not After : Oct 11 12:01:08 2026 GMT
        Subject: CN=4aaae026cd198dafb96037c9d132d989525ae114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:ac:01:ca:a4:06:d6:a1:47:b0:0e:06:2e:
                    85:30:b7:bb:73:6a:8e:ff:3c:70:6e:32:f1:ab:c4:
                    55:af:95:33:a8:c9:09:d9:6c:51:4d:ff:cc:fb:26:
                    c3:33:b1:88:d6:3b:ce:62:e5:06:67:13:7c:fc:14:
                    b8:61:18:b9:5f:65:93:83:fd:c2:2b:f2:f4:6d:de:
                    58:ad:76:3a:25:db:42:1d:11:92:40:7e:57:6c:7f:
                    09:71:10:7f:d4:6d:a0:a9:36:a3:97:00:c8:ba:6f:
                    41:de:85:8e:05:d5:c8:90:9c:79:de:90:02:63:34:
                    f1:9c:78:fc:2f:57:f6:51:17:4e:9b:7e:21:51:43:
                    85:2e:be:88:20:ea:09:38:c9:94:d9:f8:22:45:c9:
                    41:c1:2f:4b:01:c5:c7:10:2a:8a:9a:d1:6d:28:1d:
                    60:bc:d1:a4:77:46:91:9e:77:22:16:b6:41:68:f2:
                    70:57:06:8d:c0:07:03:98:d7:69:d4:fb:57:46:5a:
                    b7:28:8d:1b:88:48:74:50:4a:7e:83:af:13:19:7f:
                    06:bd:d5:a5:5b:a5:6b:66:94:11:17:02:94:ad:76:
                    f9:12:1b:8a:e2:7d:03:ac:84:ba:f1:dc:27:d6:9e:
                    36:79:05:53:85:76:b4:b8:ce:f7:d9:47:09:37:a7:
                    9f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AA:E0:26:CD:19:8D:AF:B9:60:37:C9:D1:32:D9:89:52:5A:E1:14
            X509v3 Authority Key Identifier:
                keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:63:f9:52:20:9f:f9:43:b3:36:3b:7f:44:98:82:be:0c:74:
         fe:94:93:98:a3:e0:be:eb:aa:fd:bc:0a:f4:47:1d:fe:e0:eb:
         7f:c7:14:a1:d8:84:e9:1b:8e:ac:c4:30:77:c5:11:94:f4:77:
         92:95:9f:45:33:b9:1b:df:b8:da:b1:52:f7:94:c9:8b:78:11:
         5d:70:5e:b6:2e:b6:f1:f9:c3:a2:0e:ac:78:9c:e4:05:e2:6a:
         13:f5:57:cd:9f:fe:a8:f9:d6:d9:e2:30:93:b0:5e:40:65:ad:
         15:e6:f1:fb:8d:bb:a2:ad:5d:8d:23:4b:0e:70:70:75:69:db:
         cb:37:33:83:ff:ea:8e:f4:a0:82:9f:f1:c3:8f:b0:bc:fc:12:
         33:6d:63:3a:fb:93:8f:df:6f:60:ff:4b:8d:a6:65:34:2b:34:
         3b:6a:c2:ad:dc:e0:0d:8c:45:eb:d6:ac:8d:e2:59:ea:84:92:
         b8:52:23:87:9d:34:79:42:5e:f4:ec:16:59:a1:35:b3:d6:3b:
         2f:58:64:48:ea:4b:59:cd:f0:e6:c3:ee:44:0c:35:d9:5d:44:
         7a:a0:5e:50:9f:f9:90:b2:6e:07:da:d4:77:d7:44:56:87:bd:
         e1:68:28:99:c3:62:66:3a:4c:aa:0c:d6:44:fb:81:be:e3:d6:
         26:04:21:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:47:00 2026 by rpki-client