Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
File:                     ADssOHEGkAKtCy9CsMv16S475LM.mft (raw, json)
Hash identifier:          gZ5osVS2Z0JAJeIXGBK4wGueaoWCg3mq7b43PZCKvUY=
Subject key identifier:   9B:C1:60:05:88:FA:87:83:09:7C:21:0C:7A:96:BC:53:90:60:78:71
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Certificate issuer:       /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial:       01A110A8EF71B24EFCCF073B6D6DD0518875
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
Manifest number:          1A9B
Signing time:             Tue 06 Oct 2026 10:01:09 +0000
Manifest this update:     Tue 06 Oct 2026 10:01:09 +0000
Manifest next update:     Wed 07 Oct 2026 10:01:09 +0000
Files and hashes:         1: 2c0jqBuEH1mHawmDju5SJrb9XO4.roa (hash: 4iGaC+nsr7eIRDAsx1YlRBvu72t0bZzh6T9oxMZT12o=)
                          2: 49mG2LIAGgPUY2ZzmJGz3IeznXI.roa (hash: 7aWoWG5rNXduvslZ3E4HwcG2X6Htck+37nEJTi56c7o=)
                          3: ADssOHEGkAKtCy9CsMv16S475LM.crl (hash: K+AYeRWdQka3juzKL/45mtKe4G0AFPVMd/MGpgU/HHk=)
                          4: Fb3QRguUDty9iQr1ULGmN54gLiI.roa (hash: kgzbakyVLR8dQ8e9EI+6xpmdVsMJI+WFbZcHU/IXAUc=)
                          5: SfEPdB4zSzundHQL8u1ry-xE4Vc.asa (hash: YBQfRgXIESZ5hCHeLjGYkAamoqJ89Tdiiao0w4ZWcjY=)
                          6: dECFcKuPIDtaKYfkBtHP9FzNkPY.roa (hash: nfxA7gIFHYR0X3UKRvPVNyH71Z4WvtDgdmK9W79oICs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 10:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:a8:ef:71:b2:4e:fc:cf:07:3b:6d:6d:d0:51:88:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
        Validity
            Not Before: Oct  6 10:01:09 2026 GMT
            Not After : Oct  7 10:01:09 2026 GMT
        Subject: CN=9bc1600588fa8783097c210c7a96bc5390607871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:f7:85:fd:7c:2b:46:f2:ef:8c:65:ae:74:
                    4e:41:94:34:5d:f1:72:a6:0c:18:20:61:9b:21:5a:
                    e1:30:e6:b5:9a:dd:bd:5a:0a:f7:92:84:08:3a:32:
                    78:4f:6b:14:16:cb:37:18:6c:8f:d3:5f:85:df:f2:
                    f3:7f:a5:21:c9:54:64:2d:14:4d:60:cb:74:26:b7:
                    b2:61:ee:18:c9:62:2d:44:d5:ea:66:a6:49:a1:98:
                    ce:d0:d5:32:53:b2:a7:4d:40:d4:82:02:d9:78:70:
                    d4:f0:fa:d8:a2:76:38:17:20:46:fd:2b:61:15:30:
                    b7:58:e3:53:fc:c0:f9:22:61:53:6e:5b:75:db:cd:
                    83:40:19:c3:36:b3:b4:ca:5e:28:ca:13:6d:3c:3f:
                    1f:32:69:54:8c:ab:d4:71:12:62:97:c2:fc:1e:5b:
                    62:a4:b5:b0:11:d2:bc:9c:de:1a:5f:79:8a:26:59:
                    2b:08:73:25:e7:7f:41:1d:9e:1c:e7:23:79:5c:3b:
                    7a:48:e4:38:10:31:e4:9a:61:89:61:9d:e5:08:7d:
                    46:b6:c0:c5:b3:d3:0b:44:c9:93:c6:ca:97:2d:82:
                    f3:da:84:f1:1a:44:74:fb:55:80:5a:d0:e2:a3:0e:
                    75:18:f4:69:88:c1:24:75:c0:d4:6f:5e:3f:32:34:
                    19:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C1:60:05:88:FA:87:83:09:7C:21:0C:7A:96:BC:53:90:60:78:71
            X509v3 Authority Key Identifier:
                keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e7:d8:2a:aa:51:40:7b:d9:54:1b:da:a8:ec:43:de:9d:c4:
         07:89:36:9b:2a:e5:7c:0d:94:18:b1:70:b5:19:c0:b5:36:1d:
         93:5a:7f:de:a2:56:9d:8c:74:30:cf:04:8c:fa:20:01:cb:ad:
         d4:17:12:bf:6a:3c:45:de:76:f4:96:d8:04:60:db:8e:f7:28:
         1a:f0:7d:c8:6f:b6:dc:09:fa:53:f9:02:b2:86:48:92:9b:24:
         3b:32:bb:5e:1f:e5:c2:5e:2f:b3:93:51:7e:7e:56:df:d8:ae:
         c7:a8:b2:7d:34:3c:51:48:33:0f:6f:81:e6:49:83:10:4a:1b:
         8a:05:54:14:b9:68:51:7e:3e:77:0c:d5:51:22:9d:1d:81:67:
         5e:b7:5b:64:5a:3b:67:6e:04:51:a1:12:d8:6b:65:8e:6a:36:
         b3:78:b7:55:6a:31:4b:b0:44:7b:5a:12:26:2f:6e:ae:75:7f:
         34:f6:33:b5:24:de:88:ad:de:c4:9c:72:e6:9a:84:26:77:4b:
         a6:9e:7c:21:c6:5a:d7:b5:40:bc:16:d1:22:db:86:93:c6:e9:
         3e:08:01:85:16:0d:b8:94:45:72:62:21:80:48:2b:37:fd:7f:
         76:93:00:cb:68:53:12:21:63:b8:9f:b7:7c:78:ab:21:01:fc:
         d7:1e:15:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:02:21 2026 by rpki-client