Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
File:                     iDg0C7z4K84GXO6zeMuqR7mjLN0.mft (raw, json)
Hash identifier:          rts7cObAv/PV0xDJ7XMKsLNtbAQzyafgFXQxOnL6+xs=
Subject key identifier:   A6:1A:94:70:91:9E:05:DF:87:78:39:AE:12:68:1D:30:F3:6A:CA:8A
Authority key identifier: 88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
Certificate issuer:       /CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Certificate serial:       01A11A5092A9433FDACA5685934E034A1744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
Manifest number:          02DE
Signing time:             Thu 08 Oct 2026 07:00:50 +0000
Manifest this update:     Thu 08 Oct 2026 07:00:50 +0000
Manifest next update:     Fri 09 Oct 2026 07:00:50 +0000
Files and hashes:         1: 82yqy0aGJzKzR4R_K7jhO-MXZ48.asa (hash: QLpjtYyVJWNod7Hjm1qgZ6D0o3OhLnBCKHSjT6fQXEI=)
                          2: iDg0C7z4K84GXO6zeMuqR7mjLN0.crl (hash: 265OeZle6XnvZ+aSjNXnZFSCQWFkBEhXMA+2TLhFJN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:50:92:a9:43:3f:da:ca:56:85:93:4e:03:4a:17:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
        Validity
            Not Before: Oct  8 07:00:50 2026 GMT
            Not After : Oct  9 07:00:50 2026 GMT
        Subject: CN=a61a9470919e05df877839ae12681d30f36aca8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:b3:0e:b4:b6:2d:5a:17:da:ae:b1:9b:f4:
                    bd:47:90:2c:9b:13:dc:b4:8a:20:80:cc:50:bc:9b:
                    76:8d:5e:af:a6:94:49:ac:60:fd:6a:4f:00:36:1b:
                    42:01:71:41:cb:55:77:06:fe:3d:13:ab:e8:cd:37:
                    87:66:0d:5a:e9:87:c9:2e:d0:8f:eb:7c:cc:77:08:
                    af:15:24:51:3d:cb:b9:07:5a:67:f5:20:43:a0:4c:
                    9b:d2:b3:c7:33:b2:6a:7f:64:31:5a:58:7e:ef:88:
                    dc:d3:bd:75:12:0e:da:f8:e1:84:05:30:fa:4b:a6:
                    6c:e0:b2:f2:14:de:db:7d:57:bb:07:e7:98:13:cf:
                    48:81:d4:75:35:d1:a3:4b:6c:74:04:25:2f:57:58:
                    77:d7:e4:06:2b:08:96:08:8b:58:c0:53:f8:99:f1:
                    71:89:9d:0f:c6:4d:2e:77:04:f4:89:d6:9c:3d:66:
                    0d:49:d6:55:d7:1a:11:b9:20:d8:44:38:ad:84:d2:
                    22:5b:23:0b:3b:bd:56:ad:c1:4c:8d:f3:87:90:e3:
                    29:c8:3d:73:73:1c:60:92:01:c0:0b:10:96:21:f4:
                    0a:d0:8e:de:73:3d:c0:7b:5b:3b:61:29:c3:7c:06:
                    86:5d:3c:65:30:42:9b:5b:c5:6b:4a:82:1f:c3:4a:
                    35:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1A:94:70:91:9E:05:DF:87:78:39:AE:12:68:1D:30:F3:6A:CA:8A
            X509v3 Authority Key Identifier:
                keyid:88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:89:ae:18:25:c1:3c:4b:ea:70:1d:8d:2c:2b:97:9f:13:9c:
         0d:40:bd:1a:cd:bd:3f:3e:5c:54:eb:9b:0f:a3:b2:22:51:73:
         45:bd:51:18:b7:eb:89:da:0d:f6:10:12:f1:07:50:ff:f7:43:
         b0:3a:19:9b:40:40:db:1b:f5:6a:aa:30:6f:c6:4a:99:fe:69:
         04:5c:0e:1c:59:4d:41:02:6d:e0:5d:75:f9:54:3e:d4:e8:67:
         c8:60:03:6b:3a:2b:8f:04:35:30:76:e6:b8:fa:75:b7:0f:26:
         cb:53:71:63:47:a7:f8:81:2d:45:12:14:87:e1:0c:c2:47:b6:
         92:d0:87:28:74:75:41:3e:23:6e:e4:70:36:37:07:c6:20:c2:
         32:07:ea:75:c9:ae:bd:61:be:1a:21:f4:62:8a:62:29:09:11:
         4e:be:83:97:cc:79:9e:47:57:42:10:39:bc:a2:0f:a3:a2:98:
         52:2d:b6:05:6f:f5:b1:60:73:5f:5c:58:c7:e8:38:76:e6:c5:
         85:e4:0e:58:fc:fe:48:d8:65:4a:30:13:07:19:11:d5:be:e5:
         f5:1f:a3:d8:f8:ca:ef:f0:ee:5a:2a:7a:2e:59:c2:2b:a0:7e:
         39:9a:a7:ec:0f:54:1a:b4:9c:85:67:ca:74:7b:8c:34:12:9b:
         60:29:74:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:06:58 2026 by rpki-client