Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
File:                     aVyQxtYzPUdic9L9bIg6oq2o0RU.mft (raw, json)
Hash identifier:          OKWE8MAvUibMv+HlYwYw8s5nw18/BYDar9w/BWD7HOQ=
Subject key identifier:   0B:EC:64:29:82:E4:EB:B1:B7:44:74:E3:7F:E9:BB:AF:39:0C:69:6A
Authority key identifier: 69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
Certificate issuer:       /CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Certificate serial:       01A0FE6BB5D1A3A66157E8DEE8B57F5EBBB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
Manifest number:          029C
Signing time:             Fri 02 Oct 2026 21:01:06 +0000
Manifest this update:     Fri 02 Oct 2026 21:01:06 +0000
Manifest next update:     Sat 03 Oct 2026 21:01:06 +0000
Files and hashes:         1: 6BKU6BQ0rm_dpv7UW41lofeDVAk.roa (hash: JSPR6ApMOGB4YeRrASVSoxpHimkIGb0YoSuAw+KKkoI=)
                          2: aVyQxtYzPUdic9L9bIg6oq2o0RU.crl (hash: lmKcsAn4BZOvtaCgyyqUeMXP1qq//xl3bPrCJjQzARw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 21:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fe:6b:b5:d1:a3:a6:61:57:e8:de:e8:b5:7f:5e:bb:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
        Validity
            Not Before: Oct  2 21:01:06 2026 GMT
            Not After : Oct  3 21:01:06 2026 GMT
        Subject: CN=0bec642982e4ebb1b74474e37fe9bbaf390c696a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b3:58:a1:62:6f:d1:f8:2f:ca:e0:aa:5e:0a:
                    78:ba:4c:46:00:e3:e9:fa:9f:ca:53:e4:a0:75:b0:
                    0d:77:36:95:4d:41:52:c6:19:09:01:a0:bb:61:88:
                    cb:b6:33:b0:ab:c8:3f:a3:aa:64:f2:90:23:75:4f:
                    43:9d:00:a8:5e:ad:d8:cd:8f:b1:0b:fd:b2:c4:02:
                    9c:5e:41:05:5d:83:e6:9c:db:c0:ca:9b:ad:78:21:
                    bd:11:55:8e:24:19:e6:56:1b:c5:58:0c:d0:af:7b:
                    33:4b:25:dd:0e:84:96:3b:f3:57:fb:7d:ac:a5:63:
                    48:fd:dd:2f:50:e7:bd:b2:85:e2:f6:af:7e:4b:16:
                    ef:90:26:dd:f6:a3:0d:f0:99:73:62:b3:5b:1a:87:
                    84:5c:53:c2:63:bc:b9:79:82:bf:91:e3:0b:05:73:
                    22:58:94:ae:f5:78:53:83:4b:54:39:bf:2a:12:f2:
                    02:14:c6:e9:58:c9:46:76:89:1e:b9:6e:ca:aa:49:
                    e4:cb:81:a9:00:ea:f0:08:f4:92:af:24:7b:20:78:
                    52:cd:4b:6c:45:b9:7c:cd:11:25:d3:54:4f:73:11:
                    17:f0:5a:8c:d5:d3:a2:6d:e9:13:0b:d9:52:a2:d9:
                    48:cd:fe:54:38:23:b6:9d:15:44:69:2f:65:de:15:
                    b0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EC:64:29:82:E4:EB:B1:B7:44:74:E3:7F:E9:BB:AF:39:0C:69:6A
            X509v3 Authority Key Identifier:
                keyid:69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a6:4b:07:41:4e:60:ea:da:1e:3e:07:9d:11:a8:30:50:bf:
         69:65:7f:18:42:fc:7b:1b:46:73:a7:b6:21:73:9e:db:85:14:
         0b:cc:65:e2:1d:37:b2:53:70:83:b9:f2:c7:96:21:18:5a:69:
         46:1e:aa:37:29:d4:dd:eb:ff:d2:a5:7b:26:ec:c9:d6:0d:ad:
         32:e3:28:0c:8d:7a:c6:4a:8e:58:9d:fc:bd:b4:52:e6:ae:f6:
         c9:ca:15:90:fa:5f:71:05:84:ff:5f:08:de:9d:1a:27:9d:e6:
         59:ad:a7:e2:aa:57:da:e1:2e:81:f8:96:49:a3:d1:1f:09:f8:
         3e:7e:07:85:ec:08:c4:f8:4d:59:89:6b:42:ac:01:3c:f0:42:
         e3:b5:8c:eb:44:bc:f7:47:b1:b5:c1:11:d4:f2:7f:ad:5b:fa:
         36:ab:3c:42:18:2d:d7:ee:a4:89:87:ae:9d:84:89:33:4d:3b:
         24:4f:1a:e3:ac:54:77:ee:22:03:be:30:6c:de:1d:66:f6:a6:
         2b:6a:f4:55:31:19:1a:01:e2:a0:81:71:82:2d:27:d0:83:3a:
         71:0b:34:0a:8a:37:55:6b:6f:6f:cf:3f:da:f4:08:9d:01:e4:
         99:8a:22:5c:f8:54:e0:64:19:dc:a8:fc:4f:4d:f1:e1:a9:9d:
         47:a0:9f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:38:05 2026 by rpki-client