Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File:                     A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier:          aouWxggZGIGj6VdB8dosX5kQeyr+Lf4yOE87ZEgoQg4=
Subject key identifier:   23:E4:09:2D:56:69:6D:6E:1E:63:1A:C4:BA:91:8F:0F:94:F4:7C:DD
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer:       /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial:       01A13E9534E96657BE521810F4C9D1A4AB1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number:          0B83
Signing time:             Thu 15 Oct 2026 08:02:08 +0000
Manifest this update:     Thu 15 Oct 2026 08:02:08 +0000
Manifest next update:     Fri 16 Oct 2026 08:02:08 +0000
Files and hashes:         1: 1-9EYds5QZQE-vovjbt_drwBxnu4.roa (hash: ul50Tik7XID6y3g8duwa0RTiUsbpmAyvina9WBduoA0=)
                          2: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: 7DyglkOhkfe6cTdTNV/WdeGGPRxu5F/9Du2tfcjyJqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:95:34:e9:66:57:be:52:18:10:f4:c9:d1:a4:ab:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
        Validity
            Not Before: Oct 15 08:02:08 2026 GMT
            Not After : Oct 16 08:02:08 2026 GMT
        Subject: CN=23e4092d56696d6e1e631ac4ba918f0f94f47cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:58:70:45:e5:c6:a7:50:b8:59:eb:b1:91:91:
                    33:d1:d3:1e:15:69:3c:5c:bf:19:4c:48:a3:39:e3:
                    6f:90:ce:6b:38:2b:3d:7a:84:62:c1:a4:2c:e7:86:
                    7e:5a:12:0f:bb:33:88:d0:9c:a1:4d:cf:04:2c:5f:
                    4e:6e:31:02:9d:2f:10:81:6c:26:a3:2b:16:05:8f:
                    97:cd:56:d5:84:1f:60:fe:0c:a4:c3:53:fb:f0:2f:
                    2f:b6:ac:f6:da:ed:6f:87:72:6f:58:0f:c1:6c:ad:
                    3e:70:df:98:79:c7:b2:fb:e8:e4:c3:76:b8:db:3a:
                    19:89:13:04:02:d1:0e:b8:46:7a:92:8b:ac:f7:55:
                    69:ba:63:ac:9f:24:44:60:4f:a4:ca:61:91:1d:00:
                    7f:4d:ca:65:39:a3:e0:90:89:c8:3f:4b:73:29:26:
                    7a:0e:51:f2:0e:f6:5e:bb:8a:09:d2:61:3b:ae:cb:
                    ac:05:ca:6a:a3:d2:93:60:51:8e:98:5a:ab:b7:ac:
                    86:03:eb:f5:77:f6:b0:e9:e9:7b:23:e7:f2:6d:4b:
                    bc:a3:d3:c6:e2:dc:64:fa:cf:d0:ae:0c:35:48:b4:
                    0d:9b:2a:36:b1:b7:5e:8a:1d:ac:5b:31:bc:ee:5b:
                    a7:52:81:ca:42:a2:ac:cd:12:0e:c1:20:0c:9b:c1:
                    24:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E4:09:2D:56:69:6D:6E:1E:63:1A:C4:BA:91:8F:0F:94:F4:7C:DD
            X509v3 Authority Key Identifier:
                keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9b:c7:8b:4b:2e:0a:ca:18:84:e0:16:46:72:ba:31:d9:7b:
         2c:f0:e6:8c:7c:ad:56:24:1b:9d:d7:3f:db:f6:cc:0a:d0:ca:
         6d:27:1b:af:ba:6c:fa:57:ee:d8:de:3d:9f:dd:a4:02:e8:7b:
         1c:7b:97:aa:2c:a0:de:fd:f2:bb:71:38:af:ed:56:7d:2e:20:
         2b:03:36:0b:fd:aa:bb:5e:a4:91:9d:ce:21:1e:b5:94:53:b5:
         ff:9a:c8:d2:1a:ea:63:82:1a:66:9b:33:f1:90:48:2a:22:72:
         33:f1:94:fc:a1:2f:8b:f9:69:13:49:1c:48:7f:e7:ce:ae:f8:
         49:5c:5e:19:48:1d:4e:c2:12:54:f2:97:61:c7:fb:9d:97:32:
         27:72:af:03:e3:2b:e4:ef:c3:59:1b:c1:7a:c0:1f:71:97:86:
         a7:e6:c6:cb:0e:f2:8b:93:a9:d2:23:ed:77:48:ba:ae:da:6b:
         b8:f7:ca:f0:fc:e1:a6:45:87:6d:c1:e8:76:fa:82:c7:04:20:
         5a:f7:57:80:56:d4:0d:0f:41:e8:9b:61:63:ac:7e:e0:6f:f8:
         29:fd:04:56:82:dd:a8:00:59:10:05:ef:a5:6c:98:e5:d1:90:
         35:50:3e:7e:c3:cd:95:df:aa:74:63:4a:58:5c:30:c5:b9:a0:
         7c:a0:bd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:49:08 2026 by rpki-client