Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
File:                     pszH03YZ_dof84uT_s5gq9SYq4Q.mft (raw, json)
Hash identifier:          uwlWaqyzbXWAscGCOXAB/5oqe5XbbWETIp+cqsWQmYo=
Subject key identifier:   F1:34:F7:18:69:E1:C6:1F:AA:23:20:18:FA:47:E1:0D:38:1C:D5:DD
Authority key identifier: A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
Certificate issuer:       /CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Certificate serial:       01A12B44FFDEEF10D75ED8E31C364305B49C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
Manifest number:          0394
Signing time:             Sun 11 Oct 2026 14:01:44 +0000
Manifest this update:     Sun 11 Oct 2026 14:01:44 +0000
Manifest next update:     Mon 12 Oct 2026 14:01:44 +0000
Files and hashes:         1: cNWWHlQTLoBnWDX0Cr-HJhDwkyQ.roa (hash: RBDJxnmtcnqGTkRo8S/I5iM/CbwoBW03aRJgb8eIgr4=)
                          2: pszH03YZ_dof84uT_s5gq9SYq4Q.crl (hash: Una3uDLHz3huP8LVjtQBKpsKtAAZt221VI5lhsvZLXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:44:ff:de:ef:10:d7:5e:d8:e3:1c:36:43:05:b4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
        Validity
            Not Before: Oct 11 14:01:44 2026 GMT
            Not After : Oct 12 14:01:44 2026 GMT
        Subject: CN=f134f71869e1c61faa232018fa47e10d381cd5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:a4:7e:03:35:20:98:95:ec:36:0a:4f:84:
                    90:fb:63:90:a7:83:d0:82:58:99:3d:9f:10:75:2f:
                    49:8d:21:31:eb:91:f4:e8:d0:06:6c:38:30:7b:d3:
                    6b:6e:d2:b8:c8:80:7a:0f:28:17:78:1f:13:a7:cc:
                    c9:11:09:d3:ac:ef:3e:33:22:79:fa:5c:27:04:78:
                    df:47:f7:95:5b:86:da:58:26:1a:3c:bb:9e:ee:89:
                    d0:a9:97:ab:4f:ca:c5:a9:76:37:75:bb:49:05:2f:
                    1e:99:d1:b4:e9:cc:9f:9c:3b:02:ea:ce:1f:e2:88:
                    97:71:1e:c0:38:47:4b:b6:a5:d5:f1:05:05:77:a9:
                    d6:70:c4:09:47:d8:e9:61:a6:13:74:58:6d:be:a9:
                    04:b0:56:7a:7a:d7:0b:46:d0:75:4b:70:f6:9f:7b:
                    6b:6b:58:c6:a7:44:60:b9:4b:58:2e:fd:65:80:90:
                    b0:59:9b:50:72:4c:01:00:68:de:a6:82:26:b9:1a:
                    10:8c:3f:0a:0c:5a:43:37:3b:73:20:7b:fa:f5:d0:
                    a1:16:81:6a:fa:69:a5:c6:0f:b6:52:5f:a0:93:02:
                    15:32:0d:89:7c:b7:a9:79:33:0b:d8:6e:8e:e9:95:
                    cc:0b:4b:70:c9:60:e2:16:45:17:1b:34:e6:f5:2e:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:34:F7:18:69:E1:C6:1F:AA:23:20:18:FA:47:E1:0D:38:1C:D5:DD
            X509v3 Authority Key Identifier:
                keyid:A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:37:4c:02:0d:f1:3d:6f:c6:a6:f7:01:82:cd:36:0f:a9:24:
         87:24:85:27:24:a6:96:93:e2:5f:26:c3:f1:4b:f2:a3:29:51:
         66:c5:9f:bd:d5:bf:ef:bc:cc:29:15:0e:19:37:b6:52:cd:e1:
         4c:f5:55:3e:d9:d0:93:26:37:06:b7:6e:0b:b4:f4:d9:0a:34:
         4e:06:84:9c:a4:4d:c4:b8:cc:5e:c8:b1:a4:ac:55:7f:f3:ae:
         4c:38:84:e6:7d:c3:05:fa:fd:10:3a:2e:02:c5:fe:2a:9d:85:
         93:0c:bc:76:09:6c:67:7f:ab:fb:47:ff:ea:31:34:e3:d4:5f:
         42:f6:be:67:5f:27:3f:2e:f5:de:c6:1d:75:2d:c6:2c:10:15:
         92:f4:19:13:68:79:06:18:19:9d:d3:1d:32:23:1d:e0:39:fb:
         00:d8:6f:a5:35:d9:1a:93:e7:dd:38:08:79:46:0b:38:54:01:
         ef:6f:5b:30:c6:6a:18:df:9f:6a:21:76:3b:82:5f:a4:a2:11:
         95:17:48:fd:e0:7c:0f:0f:53:60:de:50:c1:19:a8:88:c8:aa:
         b6:4a:db:71:c0:17:b0:4e:6c:64:ec:b1:bd:f5:a1:17:18:86:
         74:8f:aa:08:2b:59:30:93:9b:7c:9f:cf:60:ff:fa:2a:ab:54:
         5b:49:47:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:39:35 2026 by rpki-client