Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File:                     8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier:          g72NpbNNhW+6cBn6VXs3TyMFmN9ae4TJmvs0wBlee6g=
Subject key identifier:   67:3E:5D:31:C3:AE:4D:A7:92:A5:7E:15:4C:D2:D4:32:4F:63:08:75
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer:       /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial:       01A1336C3CA81DA4198E96226A4C67D7267B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number:          1464
Signing time:             Tue 13 Oct 2026 04:01:33 +0000
Manifest this update:     Tue 13 Oct 2026 04:01:33 +0000
Manifest next update:     Wed 14 Oct 2026 04:01:33 +0000
Files and hashes:         1: 2hKU1NYjNBDhpco5HEAK3um-kbE.roa (hash: YhjeByYxX6wVLssUtZI4v3Qulxa9a1zwl57K6O3z8yo=)
                          2: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: JwmY/hTmeYMGv3Op0ADVS0yZEedQ+X4zKDpIKYG1n1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:33:6c:3c:a8:1d:a4:19:8e:96:22:6a:4c:67:d7:26:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
        Validity
            Not Before: Oct 13 04:01:33 2026 GMT
            Not After : Oct 14 04:01:33 2026 GMT
        Subject: CN=673e5d31c3ae4da792a57e154cd2d4324f630875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:46:92:8a:39:2a:8f:06:49:de:09:e3:50:ba:
                    d3:25:a7:3c:bc:2f:bd:4a:3a:44:57:db:7b:c0:fb:
                    29:25:00:76:94:8e:da:47:f0:fa:7c:61:79:b5:56:
                    ad:a2:d9:b5:9a:fb:0a:45:c9:b3:82:a8:0e:e0:42:
                    17:bb:89:be:65:4c:0c:02:53:29:b8:c2:b7:ef:4c:
                    99:e3:5c:3e:b3:b5:94:e8:ed:b3:8b:46:1b:87:9e:
                    65:6c:7a:3b:fb:27:98:dc:59:e7:8b:31:ff:6d:3f:
                    ed:f8:1f:6f:ac:ea:4b:0a:05:46:45:6d:97:07:71:
                    95:fb:f8:d6:8d:d2:4a:08:f8:66:4a:6b:dc:8b:08:
                    e0:5f:81:18:a4:9d:c2:b0:93:c5:1e:54:b7:e4:a9:
                    a9:29:83:d0:14:cd:4c:fd:07:64:c7:66:74:87:0f:
                    85:15:6d:ea:cf:9c:91:1a:0a:41:bc:ea:0f:e0:e8:
                    83:99:dd:24:f0:e3:eb:4b:b5:3e:40:94:62:54:90:
                    fc:c3:21:82:9b:e3:68:00:d6:02:bf:c5:c9:fc:cc:
                    b6:76:3e:38:06:f4:2f:ed:f6:f1:e1:23:76:3a:6f:
                    c0:28:f3:21:4d:8f:af:da:65:0c:2b:1b:85:fd:bc:
                    b3:5d:6b:2b:62:40:6a:f9:aa:2e:93:53:55:b7:17:
                    1f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3E:5D:31:C3:AE:4D:A7:92:A5:7E:15:4C:D2:D4:32:4F:63:08:75
            X509v3 Authority Key Identifier:
                keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:fa:6b:0e:7d:11:b1:fd:2a:0a:52:5e:0a:03:0a:52:eb:00:
         78:90:f0:18:16:75:5d:ef:d3:84:1d:4d:87:1b:54:a9:c1:11:
         10:d9:af:ff:9e:da:fd:80:82:07:12:34:a1:40:e3:5e:46:41:
         c1:29:5e:33:c9:3b:b1:c4:57:47:5c:1e:ca:b1:e8:32:27:41:
         f2:1b:e1:8a:69:fe:5c:68:f1:03:bc:ce:57:bc:4a:d5:73:fa:
         28:ba:ce:dd:c2:54:4e:d2:47:c8:69:1e:f9:a7:9a:8a:88:82:
         75:52:f1:0a:97:74:19:00:b6:7e:d7:72:1b:95:8a:e7:7d:0f:
         ca:da:df:59:c7:d7:86:1c:9f:da:5c:94:00:b6:d0:76:8c:cb:
         8e:af:26:49:eb:de:93:1d:0f:db:93:c0:27:e2:80:26:a6:70:
         8e:d2:19:9b:e9:a2:f9:77:f5:60:3e:bb:98:da:a6:22:3a:4d:
         b7:2e:7b:cb:5d:cd:5f:b6:13:32:52:ae:90:ea:32:9c:20:11:
         01:19:07:8c:73:1b:d1:23:f0:8a:80:85:a3:48:a1:18:8c:39:
         3c:9c:52:18:2f:2d:78:06:be:fb:7f:63:8d:04:43:2e:a5:c3:
         0c:e6:8e:42:60:e7:a6:3c:13:69:ff:9b:83:a9:8f:bf:50:f9:
         82:e2:b9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:08:47 2026 by rpki-client