Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft
File:                     acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft (raw, json)
Hash identifier:          PzpHOAqGWre/rZpAFq8LInrslc7G/yQ18fpDHUujnak=
Subject key identifier:   27:41:29:4C:FE:41:62:76:06:55:36:A6:CA:04:D9:1F:40:19:1F:EF
Authority key identifier: 69:C4:66:D5:82:EC:55:8E:4B:EA:AE:E6:50:BE:50:07:70:9C:58:9F
Certificate issuer:       /CN=69c466d582ec558e4beaaee650be5007709c589f
Certificate serial:       01A0DF8626672ABA55529881EE6C8AEA41B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft
Manifest number:          ED
Signing time:             Sat 26 Sep 2026 21:01:45 +0000
Manifest this update:     Sat 26 Sep 2026 21:01:45 +0000
Manifest next update:     Sun 27 Sep 2026 21:01:45 +0000
Files and hashes:         1: 0TImoeOFobuAvAOMciF7V3TPB10.roa (hash: nUfjfiRcg/UYaizImww1B/czlUWqulii1BNxBqglWNk=)
                          2: 8bTaJMY9KA8sxo8C-PobXPhUnb0.roa (hash: kBR9btSmRDhhnq1VHoWKPZe1M57zc/8ujhKRSZXQCf0=)
                          3: acRm1YLsVY5L6q7mUL5QB3CcWJ8.crl (hash: kckDDZ4Z0DcHdDGcd2TIEJml+zfGeeqFpOmUBw2Jmx0=)
                          4: gM-2NKzsRL5q1qBx4EqW33hVJ5w.roa (hash: s9y3WddOKeg5V2uaL8tmFWIaSe1uuSfJdfFDI6pSOAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:86:26:67:2a:ba:55:52:98:81:ee:6c:8a:ea:41:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69c466d582ec558e4beaaee650be5007709c589f
        Validity
            Not Before: Sep 26 21:01:45 2026 GMT
            Not After : Sep 27 21:01:45 2026 GMT
        Subject: CN=2741294cfe416276065536a6ca04d91f40191fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:6a:81:47:f4:7d:60:55:97:81:2c:9a:eb:
                    ca:06:90:99:3f:8b:a0:5c:2a:77:84:48:66:dc:46:
                    32:27:49:ac:e7:9e:9a:ab:32:24:5c:97:c8:ea:81:
                    fd:0e:85:a0:26:12:ae:df:ba:35:7f:51:df:b3:37:
                    98:7b:80:12:ae:8c:a5:b4:9e:5c:bb:98:84:71:6e:
                    0a:dd:d6:af:3c:da:92:1b:7c:bc:0a:30:af:e1:10:
                    8a:74:81:ee:f0:94:ed:d1:af:83:92:25:7e:c3:3d:
                    9c:7d:e5:d2:02:c7:b9:4d:b8:e7:2c:f2:c0:b4:4a:
                    63:50:33:1d:7a:fd:64:ef:15:08:bc:c4:7a:52:70:
                    07:46:21:0a:22:c5:c8:0d:bd:93:b6:3e:15:fc:34:
                    75:ab:fe:72:55:45:f8:96:8b:65:3a:69:9c:72:81:
                    cc:d7:a2:15:36:a0:52:74:8e:0c:55:b8:84:3b:63:
                    f9:d2:be:05:f2:88:c5:50:2e:cd:35:17:90:dd:b9:
                    e5:8d:df:fe:34:09:31:3f:18:85:5a:73:f1:38:8f:
                    46:cb:cc:f6:e4:c4:bb:78:40:67:10:4e:62:e7:b8:
                    71:03:44:45:7e:cf:ba:d2:03:6a:48:94:6d:af:87:
                    d4:3f:b4:c1:33:32:87:59:74:ac:e4:b2:17:2d:0a:
                    cf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:41:29:4C:FE:41:62:76:06:55:36:A6:CA:04:D9:1F:40:19:1F:EF
            X509v3 Authority Key Identifier:
                keyid:69:C4:66:D5:82:EC:55:8E:4B:EA:AE:E6:50:BE:50:07:70:9C:58:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c2:87:ea:e9:db:48:3f:9f:75:26:df:1c:13:69:8b:c2:33:
         65:8c:cb:7c:96:50:4e:33:ea:1f:2b:51:08:4b:f6:13:92:e0:
         11:54:23:d1:66:69:95:ca:b3:a8:d2:bb:5f:8b:79:4a:d0:82:
         80:73:98:f6:02:3a:87:72:eb:44:e9:f8:39:7c:80:4c:27:c8:
         c0:9f:a4:49:58:8d:10:0b:df:6e:fa:dd:1f:e7:ab:84:0d:1c:
         ff:9f:34:fa:92:98:ae:69:44:c9:44:a8:ce:07:e6:ac:d9:e5:
         c3:1e:ed:77:9f:7f:fc:31:82:eb:75:be:7f:41:33:6c:0b:3b:
         c8:76:b4:c9:fd:f2:58:a9:16:6a:77:61:c1:d1:45:f8:a3:83:
         f1:d5:61:39:98:c2:71:aa:70:9c:ed:40:ae:82:99:90:8c:a0:
         c4:2c:46:4e:49:be:5f:8d:69:b4:ff:a6:c4:11:91:1e:09:17:
         cf:0e:bc:2b:10:92:98:42:11:28:e4:e6:18:1b:ef:2e:a7:d6:
         37:00:70:94:8e:ae:da:98:36:aa:89:9e:42:e3:d4:c8:cd:20:
         7b:c9:8d:e2:c7:d9:20:55:8c:7a:fd:29:b4:da:e0:93:93:de:
         b3:f8:72:42:fe:47:a2:f6:c9:e9:12:11:b4:77:71:1e:9d:1c:
         ef:6f:b1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:40:48 2026 by rpki-client