Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
File:                     azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json)
Hash identifier:          WGCtd1hf9njHyoHjidhgQUlQUjF2EEgh6SOOlcGti4g=
Subject key identifier:   95:60:09:1F:AC:2B:25:2B:3A:40:F4:AA:CA:6A:9E:43:28:66:D5:38
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Certificate issuer:       /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial:       01A139372E796F2AC04B1BBBCA42FDB91956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
Manifest number:          1AA8
Signing time:             Wed 14 Oct 2026 07:01:19 +0000
Manifest this update:     Wed 14 Oct 2026 07:01:19 +0000
Manifest next update:     Thu 15 Oct 2026 07:01:19 +0000
Files and hashes:         1: BhiORD-UuUDBrhyIYI_DoUYPlI8.roa (hash: JTlV8Y8e4tmlDr8mHk2b5u6aD2TaQXFvARgJc495HDg=)
                          2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: sXg1/WQHHLxognK6rG1pUkbZq+NHBAEzfWemze5O/bM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 07:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:39:37:2e:79:6f:2a:c0:4b:1b:bb:ca:42:fd:b9:19:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
        Validity
            Not Before: Oct 14 07:01:19 2026 GMT
            Not After : Oct 15 07:01:19 2026 GMT
        Subject: CN=9560091fac2b252b3a40f4aaca6a9e432866d538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:b0:04:f9:6d:cb:68:1d:bd:62:5d:d8:b7:
                    1e:4b:31:1d:0e:7e:7e:0e:21:e6:5a:ee:67:67:83:
                    41:7a:81:c0:57:b3:26:31:4a:42:f5:80:e3:9c:26:
                    c7:15:d4:e6:e2:c0:f8:78:25:8e:a1:d2:3b:a3:00:
                    58:fb:e6:ab:77:07:14:3f:99:a8:56:3b:b4:48:ea:
                    24:c6:48:dd:ff:5a:0d:8b:dd:66:b2:27:b4:ce:5c:
                    f8:bf:e8:13:e2:ae:5e:98:32:88:d7:77:6e:d2:49:
                    50:55:8a:38:0e:1e:bf:5b:2c:1a:17:02:98:cd:8b:
                    2d:31:fb:38:f2:03:2f:e9:52:cd:53:a4:a6:2f:b7:
                    70:e3:1d:9d:60:eb:1f:c7:79:14:7e:c6:69:6d:8f:
                    cf:65:56:95:fc:dd:0d:b3:09:a7:f2:14:65:bd:56:
                    fd:7d:23:a1:c3:74:90:26:40:a9:03:db:99:32:7f:
                    e5:37:04:a0:d2:d4:f9:e7:b0:2e:23:30:a4:10:e8:
                    e1:95:fc:3d:bd:0f:e3:82:b4:ed:e4:c0:fd:be:f7:
                    fc:4b:fe:39:7e:1a:95:d6:78:ba:d8:e3:20:30:a4:
                    69:c2:82:c8:df:57:da:44:bd:af:9c:ab:88:4a:e2:
                    99:f5:a6:10:61:fe:cc:4d:dd:8c:3f:4a:7e:24:e7:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:60:09:1F:AC:2B:25:2B:3A:40:F4:AA:CA:6A:9E:43:28:66:D5:38
            X509v3 Authority Key Identifier:
                keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:21:55:6b:29:37:be:01:92:30:6f:98:39:0e:8c:f1:69:ab:
         6d:f5:93:53:69:bb:76:16:43:7e:3c:a0:b5:c6:de:ed:42:a9:
         b2:12:61:11:7f:fc:23:a2:72:64:bb:f9:4a:41:95:5f:7a:8e:
         ad:78:f3:d5:ca:95:7a:b9:c5:e3:4a:d5:e2:15:b1:9c:83:31:
         92:ab:f1:1c:78:e3:e9:45:fc:2a:de:19:0b:86:ac:40:ec:4a:
         f7:db:b3:18:1a:07:e0:46:59:37:08:9b:12:21:ef:64:38:23:
         3e:c8:95:27:bb:d3:70:60:90:b2:ba:dd:5c:a3:9d:73:a9:97:
         77:ee:70:96:05:2a:33:2a:dd:f8:c9:36:25:44:c4:a0:a0:12:
         2e:b2:c4:7e:bb:4e:08:e0:18:48:02:fd:63:c8:50:12:ac:64:
         fc:9f:83:8f:36:6f:28:80:b7:e9:4f:4d:14:d1:8f:c7:8a:89:
         fa:fe:74:84:ec:ed:56:84:83:35:f5:2a:ee:30:f8:7e:10:1f:
         b0:3a:e5:49:78:51:62:6d:a6:3d:83:06:d3:f2:f3:93:a2:83:
         b2:52:6c:3b:8b:c1:62:c6:2d:f3:46:e8:9a:34:13:5f:88:e7:
         e3:cc:66:9c:e9:0d:d1:25:07:7c:5d:10:c3:e3:7b:7b:9f:57:
         93:9c:6d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 16:52:11 2026 by rpki-client