Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
File:                     dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft (raw, json)
Hash identifier:          FkhQ2jYKKgnOTz3VbynM2DGflW10/139viFiEhsGFl0=
Subject key identifier:   88:2A:34:BA:F1:46:86:B4:6E:3D:35:26:FD:E9:14:14:AF:E6:FA:2D
Authority key identifier: 74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
Certificate issuer:       /CN=749ea3b1e58ba060b41fc2a078f6016264759664
Certificate serial:       01A135C81F9CB1ADFD2D284C1FFA7252E718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
Manifest number:          1AA1
Signing time:             Tue 13 Oct 2026 15:01:10 +0000
Manifest this update:     Tue 13 Oct 2026 15:01:10 +0000
Manifest next update:     Wed 14 Oct 2026 15:01:10 +0000
Files and hashes:         1: dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl (hash: ijWF+TrJ37PnUv6242SALHXjZ6Xv9x+Zg/n5dqAsNG8=)
                          2: kVHOrLRn8dYHPF-qShmVfrIGZWE.roa (hash: RBY+pXDY3wuZ3UWMC49u2LOFQA3uX8fBCHLmuTx0kas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:c8:1f:9c:b1:ad:fd:2d:28:4c:1f:fa:72:52:e7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749ea3b1e58ba060b41fc2a078f6016264759664
        Validity
            Not Before: Oct 13 15:01:10 2026 GMT
            Not After : Oct 14 15:01:10 2026 GMT
        Subject: CN=882a34baf14686b46e3d3526fde91414afe6fa2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:94:47:4a:e5:a9:62:ca:73:6c:9a:dc:10:bc:
                    3e:74:e2:dd:55:37:b5:95:67:b1:11:62:34:b1:f9:
                    75:33:e6:f5:b1:c4:a3:c5:83:85:32:ce:df:40:1d:
                    e3:4d:20:e6:13:6a:4e:70:fa:c5:70:3e:04:2d:46:
                    c9:44:8d:d1:7c:9b:ce:85:70:c9:ac:eb:30:a3:9b:
                    43:78:38:d4:9c:0e:c3:9d:43:5c:c2:6d:31:c0:71:
                    b1:5a:fc:e2:6b:d0:88:33:d8:85:8e:c2:26:30:67:
                    d1:49:56:d6:b9:ed:9f:58:d8:d3:f6:60:ec:b9:a8:
                    1c:4d:29:a5:1c:ca:98:63:25:6a:05:ae:0e:62:4d:
                    0f:b1:35:09:02:90:63:19:63:4f:72:d4:0a:db:d3:
                    fc:79:43:d6:83:10:0f:f3:c8:7f:3f:0d:86:63:bc:
                    9a:4d:07:5e:1f:ad:f9:45:4e:8c:4c:ca:47:b4:ba:
                    c8:eb:f8:e3:81:f6:1a:e2:a9:2f:7b:0e:71:d6:71:
                    11:76:69:3d:7d:a4:72:8f:2e:57:28:e3:d7:e7:61:
                    60:6b:07:61:d6:93:d2:94:15:c6:7a:fc:b6:f3:f6:
                    c6:7a:18:9f:41:42:71:21:fc:60:d1:82:7b:e7:f0:
                    4b:0a:79:2b:3f:5b:1b:83:c1:f7:a1:a2:67:02:fa:
                    28:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2A:34:BA:F1:46:86:B4:6E:3D:35:26:FD:E9:14:14:AF:E6:FA:2D
            X509v3 Authority Key Identifier:
                keyid:74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:11:f1:d8:f0:5e:18:32:ed:4e:4b:cb:21:3b:35:50:b3:59:
         bc:0b:c0:14:f1:61:e0:71:39:59:93:f2:31:71:79:a4:4c:97:
         c3:8c:6a:6f:7d:9c:71:c8:20:7d:08:85:5c:90:82:ae:16:c3:
         44:56:f5:04:bb:b5:11:20:a3:89:ba:d0:4c:d4:d7:2f:64:c4:
         ba:13:7b:5e:d6:0d:4f:a7:e8:5c:b2:88:50:12:28:03:e1:95:
         b5:ac:3b:f7:0a:f8:1b:cb:0d:50:46:e3:c6:18:76:53:ff:d8:
         d9:86:74:dc:b4:cc:c5:60:21:52:38:5f:d9:78:0e:7c:35:d6:
         55:4d:8b:45:e9:ef:08:49:96:cd:5b:ef:f3:2a:e3:2e:08:ad:
         2e:27:ec:1e:e7:d3:c5:27:79:f2:02:bf:23:4d:95:bd:e7:22:
         35:35:88:06:fa:e2:89:77:9a:32:cc:a8:23:c1:8c:60:ad:db:
         d1:81:d3:4c:50:41:53:1a:e0:b8:25:87:10:0f:4b:ca:40:09:
         2f:de:9f:ff:d2:09:fd:a5:6a:8e:06:3c:df:a8:75:5d:10:ed:
         4d:8e:64:6e:9d:90:fa:87:28:51:89:3e:e6:57:09:18:b9:01:
         67:dd:ff:b4:89:43:f6:5d:a7:f7:a0:77:fe:a5:d1:b0:40:00:
         ec:91:fc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:42:24 2026 by rpki-client