Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File:                     _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier:          jeeDYa2odGFNHulhH9mL5k6CHrUARi/YTs8pqUOO8sg=
Subject key identifier:   11:1B:FF:F3:15:DE:2B:C3:D2:80:F9:7F:EF:A3:C3:5F:B6:EB:E1:CE
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer:       /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial:       01A127D597812675E947DE7CE390D8B3CB9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number:          1A9E
Signing time:             Sat 10 Oct 2026 22:01:11 +0000
Manifest this update:     Sat 10 Oct 2026 22:01:11 +0000
Manifest next update:     Sun 11 Oct 2026 22:01:11 +0000
Files and hashes:         1: 69ezvJY8aZV8eEgrj-WQsC1gmeE.roa (hash: 2O4ZGW2UdJh7j7rNGC7PYb1zr3cjwg8+gzgKPe0rI+g=)
                          2: TJqx5z4O1Xagn5GaFc8l5cODFoE.roa (hash: +baCLKE9D+7LByc+dShAgxs5RJI5DOiwKbenlW3pVyo=)
                          3: XuPVDCotzHlj3lb_lOE7NOSPito.roa (hash: baZCCVrWNS9+G+RlcQkU24dkfJlXQ2RNZWZ0Ao+9ppk=)
                          4: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: Ne0/1AisL06UbZcm7CXA8+LAZo7QA9FxKx9/As/MKec=)
                          5: hoPMx8cKt2l3U6Uh7qXffDc38GI.roa (hash: cSBxnQp/0+IglLraeUk1nEXqdG208OR0aDWNNNv7dX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:27:d5:97:81:26:75:e9:47:de:7c:e3:90:d8:b3:cb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
        Validity
            Not Before: Oct 10 22:01:11 2026 GMT
            Not After : Oct 11 22:01:11 2026 GMT
        Subject: CN=111bfff315de2bc3d280f97fefa3c35fb6ebe1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:a5:82:bb:5b:65:f3:7d:16:50:17:78:20:
                    52:48:cd:68:b5:7e:b8:b9:bf:51:d2:1f:93:26:33:
                    cb:29:45:34:94:1d:08:64:b4:6e:40:1a:d4:0f:69:
                    d2:f8:5f:92:2f:33:ea:ab:15:78:40:fa:93:e7:18:
                    b3:a1:89:87:ac:c9:ba:50:04:f0:3f:2f:66:4a:80:
                    bb:61:39:cf:53:9d:f3:9a:85:dc:41:19:dd:1d:70:
                    ef:91:61:9a:cd:02:78:34:58:ad:6b:9d:8c:a1:aa:
                    62:75:7a:71:ab:6d:74:be:31:eb:e1:0a:12:7f:1d:
                    dd:00:72:8a:6a:0e:3c:78:50:f0:a8:47:76:cc:28:
                    42:28:28:41:06:78:68:15:87:b8:ba:cc:1b:96:d5:
                    bd:53:1e:91:90:7a:f8:e2:6b:90:a0:22:7f:a1:3d:
                    f8:85:4d:f5:1d:6f:de:86:47:42:96:5c:c7:94:3f:
                    cc:e3:e7:97:e9:cd:5b:c4:dc:60:46:2e:9a:28:36:
                    33:49:ea:ef:03:1a:aa:e9:e3:c9:91:ee:4e:f0:fd:
                    8b:bb:c8:18:fe:36:ca:44:e4:94:ab:3f:e4:2c:50:
                    af:ee:55:27:0e:7f:dc:cf:a4:2d:41:fc:b8:53:8a:
                    e2:65:64:76:b3:04:aa:73:75:65:d9:8d:10:cc:e1:
                    3a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1B:FF:F3:15:DE:2B:C3:D2:80:F9:7F:EF:A3:C3:5F:B6:EB:E1:CE
            X509v3 Authority Key Identifier:
                keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:7a:c4:02:3d:a8:68:52:69:20:36:76:26:4e:26:ae:7f:8f:
         8f:1d:15:b9:c0:25:66:33:b4:8a:d3:db:a4:5b:69:ef:98:ed:
         6c:ac:2a:6c:1c:e1:ef:bd:d2:62:34:25:32:02:1b:52:45:ae:
         c0:5d:56:ba:81:5e:78:a2:33:a1:6d:52:93:d2:8d:40:29:5b:
         85:29:6e:30:65:c5:06:fb:b7:19:e7:12:23:c3:e5:fa:76:a7:
         50:9c:15:a2:98:a8:7d:07:8e:5a:fc:85:5a:0d:96:96:28:c9:
         da:c3:91:4e:7d:77:b6:94:fa:e8:37:01:ce:88:0d:ae:16:d3:
         19:f2:5a:0d:1e:d2:f6:5e:db:fb:97:d6:69:c1:4f:df:00:9d:
         6b:3c:43:5f:41:cf:cc:67:8e:9a:5c:26:e0:45:8f:54:6f:68:
         0d:7d:6b:01:53:a5:bb:b0:e1:b9:21:91:c2:ab:c3:ed:c4:04:
         46:43:d4:c9:0d:d0:54:fb:9e:f4:1d:27:9e:75:ad:4f:32:33:
         5d:fc:4b:9d:2b:19:65:23:bb:7f:d9:27:21:38:5e:71:64:71:
         a2:fe:62:97:f8:b3:db:12:cc:4a:70:68:c2:9f:04:d3:84:4e:
         d4:14:80:10:c9:10:5a:2a:c7:9f:d7:02:50:76:73:fb:75:c9:
         4b:66:23:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:49:45 2026 by rpki-client