Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
File:                     aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft (raw, json)
Hash identifier:          zLuj5VqkhQeadBV30PNKrl5Z+SnM0MpP7Q0zeqqDyoQ=
Subject key identifier:   55:AB:50:F7:87:D1:30:C4:E8:F5:B3:73:08:2C:D9:EF:B5:31:12:31
Authority key identifier: 68:A7:60:54:BB:7E:B7:8F:D7:06:CD:41:8A:9F:6E:36:45:66:36:6F
Certificate issuer:       /CN=68a76054bb7eb78fd706cd418a9f6e364566366f
Certificate serial:       01A0DC16EECC9C5EBACF96245CEE9C0EBE84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
Manifest number:          0124
Signing time:             Sat 26 Sep 2026 05:01:25 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:25 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:25 +0000
Files and hashes:         1: aDxqedKr2O-4oJIg4fDpZa5gLAc.roa (hash: fppPlyvE3ZEeKH+ON2djCXrH3zpgUITE612vD7TTNF4=)
                          2: aKdgVLt-t4_XBs1Bip9uNkVmNm8.crl (hash: KyQVVVeTIVwu5lJlEd6fbmmIwGX6+AuYPkFJ2BevcAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 05:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:16:ee:cc:9c:5e:ba:cf:96:24:5c:ee:9c:0e:be:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68a76054bb7eb78fd706cd418a9f6e364566366f
        Validity
            Not Before: Sep 26 05:01:25 2026 GMT
            Not After : Sep 27 05:01:25 2026 GMT
        Subject: CN=55ab50f787d130c4e8f5b373082cd9efb5311231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:e7:c3:cd:2a:d9:53:37:df:cb:e0:1c:bb:
                    0a:76:c2:43:e9:48:e9:d4:1f:0a:ae:25:f0:fc:c8:
                    2e:33:6b:14:fd:9e:c9:f3:ac:0a:b8:5b:0e:2d:b5:
                    08:b5:43:5d:bc:64:5f:79:e7:34:64:71:37:77:79:
                    17:7c:f2:8b:63:06:f4:42:36:0b:4b:1e:68:d1:b0:
                    95:a6:a2:af:ce:a9:80:e5:02:48:22:df:8d:ba:00:
                    57:ac:6e:72:a8:0b:8f:49:30:7a:ae:cd:bd:af:28:
                    ce:30:08:27:f2:c6:87:7f:92:a2:e9:c5:41:48:3d:
                    65:aa:10:f8:4f:91:d3:2b:7a:db:28:00:3f:92:10:
                    6b:50:02:db:b6:07:b2:71:11:1b:dc:97:b1:90:3b:
                    e4:bb:16:66:f6:f1:05:9c:55:07:e2:7a:ab:a8:eb:
                    ac:13:47:bb:26:7e:46:b5:db:b7:25:5a:dc:3f:2b:
                    46:bc:15:e3:2c:15:35:ab:73:97:aa:36:6f:46:c2:
                    10:1c:63:28:ec:2a:28:98:90:56:30:e7:56:ba:16:
                    1d:6e:f9:ce:a9:0e:b2:17:6e:71:5b:72:e3:24:56:
                    aa:88:15:cc:0e:0d:19:f1:ab:33:3d:a5:4a:89:19:
                    27:80:1e:02:ff:c4:0d:f4:6f:84:93:5c:86:92:ab:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AB:50:F7:87:D1:30:C4:E8:F5:B3:73:08:2C:D9:EF:B5:31:12:31
            X509v3 Authority Key Identifier:
                keyid:68:A7:60:54:BB:7E:B7:8F:D7:06:CD:41:8A:9F:6E:36:45:66:36:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3d:37:01:32:af:ac:7e:19:e8:f7:a7:11:04:d0:ec:d3:25:
         76:f8:24:09:62:3c:c8:63:ef:56:b0:a6:bb:09:7f:ed:51:42:
         a4:52:34:3f:36:c1:9f:2d:e8:5c:11:ce:de:5e:c7:5e:64:f5:
         ed:55:ab:c1:05:2b:0e:ef:fb:c2:5f:11:63:e7:3c:3f:39:88:
         75:a5:2a:33:80:e6:ed:c0:30:34:f9:2b:9c:3f:6b:ac:ea:9c:
         ab:46:79:b8:59:71:94:4a:fe:73:3c:99:8f:58:2f:31:b8:e3:
         b1:36:48:65:f8:c7:1c:26:61:4f:32:b3:cc:08:11:d9:17:1f:
         7d:4d:aa:58:2e:36:e7:da:f7:55:ae:a3:dc:e0:44:42:ba:b3:
         d1:a6:33:34:04:01:ec:52:c5:24:43:c8:e9:2b:74:da:5b:6d:
         69:38:ba:0b:70:96:ab:5a:be:45:c7:93:76:a0:74:5b:1a:2b:
         c6:3d:1c:e0:d8:a1:b4:14:92:f8:19:ac:aa:a4:72:1d:42:a6:
         c9:b6:3c:81:11:e6:73:8e:32:85:d9:7a:0b:11:d4:ac:08:95:
         27:e5:a1:f1:53:1d:6e:f0:0e:f1:8e:a6:30:87:bf:af:a5:95:
         90:7b:d8:f9:5c:cc:41:d6:cf:a0:a6:96:3d:bd:7e:9d:27:b1:
         1d:bf:78:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:30:33 2026 by rpki-client