Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.mft
File:                     g026NqGaEf0f34ohJn8s01da1Rg.mft (raw, json)
Hash identifier:          shEeu4zSsG9WbI6XtS4nwafWBZhSyUjM/OEo5jZ7/iU=
Subject key identifier:   82:86:CA:D4:9A:97:63:B9:24:C2:E3:F8:46:A5:5C:63:DE:CE:96:05
Authority key identifier: 83:4D:BA:36:A1:9A:11:FD:1F:DF:8A:21:26:7F:2C:D3:57:5A:D5:18
Certificate issuer:       /CN=834dba36a19a11fd1fdf8a21267f2cd3575ad518
Certificate serial:       01A13B92C800763FA22581A5FFEC5E47249C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g026NqGaEf0f34ohJn8s01da1Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.mft
Manifest number:          011D
Signing time:             Wed 14 Oct 2026 18:00:37 +0000
Manifest this update:     Wed 14 Oct 2026 18:00:37 +0000
Manifest next update:     Thu 15 Oct 2026 18:00:37 +0000
Files and hashes:         1: g026NqGaEf0f34ohJn8s01da1Rg.crl (hash: vteQJmhgdnNfEiEztYv+IFZqxOiV07k9rmAixWXpNfg=)
                          2: ywr2yHe5YezVa2DkSIoiUW3iClE.asa (hash: jWQ90LGYbnX6nj6NxZX7augHUME0QxkMdKQ2+9Sa29s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g026NqGaEf0f34ohJn8s01da1Rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 18:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:92:c8:00:76:3f:a2:25:81:a5:ff:ec:5e:47:24:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834dba36a19a11fd1fdf8a21267f2cd3575ad518
        Validity
            Not Before: Oct 14 18:00:37 2026 GMT
            Not After : Oct 15 18:00:37 2026 GMT
        Subject: CN=8286cad49a9763b924c2e3f846a55c63dece9605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c3:ef:ac:64:7e:11:79:ad:e4:52:71:eb:01:
                    a3:78:ab:fb:f5:da:67:cf:12:23:50:7f:4a:1b:c3:
                    b7:29:b5:51:da:4a:56:df:13:97:09:04:0d:c9:e9:
                    fc:64:17:c7:a1:63:14:4d:60:ee:8a:b4:6b:ae:7f:
                    3e:bc:55:14:8e:32:a6:76:a3:9e:5c:ad:a4:79:5e:
                    70:19:b1:e6:3d:ac:f4:74:8c:53:48:c5:bc:cc:03:
                    40:35:dd:2b:b7:af:93:f7:73:4d:a0:c4:2a:a2:51:
                    4c:e7:d7:f2:04:86:16:d8:c2:53:84:12:f3:7a:70:
                    c8:20:8d:ec:ff:a1:10:6a:d4:f4:83:26:4c:5f:8c:
                    ab:91:73:c6:0b:a4:f2:7b:eb:60:a3:59:4e:ef:f8:
                    ce:e7:7a:96:43:72:66:72:98:8f:fa:8b:0b:35:18:
                    a7:38:4b:b9:03:f4:d8:5c:09:e1:e5:84:18:c0:51:
                    91:29:ad:75:b6:c3:92:64:dd:6c:6d:bf:3a:79:e1:
                    3f:02:37:0c:ec:69:f8:84:32:47:da:cb:c3:cf:c2:
                    5d:32:34:9e:b6:8e:a7:99:e1:21:44:b9:d6:7a:0d:
                    17:10:53:8b:cc:38:80:0a:a3:73:54:46:41:27:be:
                    bc:e3:e6:db:cf:78:aa:f0:aa:a6:b4:3a:ff:78:c1:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:86:CA:D4:9A:97:63:B9:24:C2:E3:F8:46:A5:5C:63:DE:CE:96:05
            X509v3 Authority Key Identifier:
                keyid:83:4D:BA:36:A1:9A:11:FD:1F:DF:8A:21:26:7F:2C:D3:57:5A:D5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g026NqGaEf0f34ohJn8s01da1Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:0d:fa:5c:a8:30:26:71:93:aa:6b:5a:9c:57:b9:79:a2:0b:
         57:2d:7b:ba:ff:5f:1a:c1:10:65:d4:af:9f:24:10:e5:ee:15:
         61:7f:8c:6d:d7:4c:ef:e9:b0:1a:96:8e:af:2b:cb:29:81:bf:
         23:fb:11:ea:16:6e:6a:0d:7a:10:fb:05:8e:63:4c:1c:d6:7c:
         f3:54:a4:80:53:83:5e:47:9f:6f:d7:b4:a4:6c:42:23:6e:66:
         24:2d:4e:ad:cd:76:87:41:94:a3:33:c5:09:8e:d0:ef:39:5d:
         5e:37:9a:fb:b3:23:6f:c3:fc:94:cb:69:9a:f9:3b:04:4d:5f:
         e2:84:a9:30:ec:75:bd:b8:34:46:64:28:cf:cb:60:8d:58:24:
         10:8f:73:2c:2c:fb:60:49:a2:04:7d:4a:57:45:cd:e7:b4:f5:
         64:be:17:89:aa:83:f8:05:86:d7:3e:26:c7:d0:46:bf:03:bd:
         0a:af:ba:08:c3:e1:c8:32:2d:39:09:b0:5f:31:71:6d:66:67:
         d5:4a:eb:2c:40:5c:1e:88:3c:41:00:3f:18:bc:7c:ec:8e:e9:
         5a:ef:fa:4c:25:e9:1a:d6:d0:ba:9d:b5:f3:76:ec:9e:e6:23:
         a5:82:d2:ee:0a:a8:ad:ad:b5:70:72:74:d6:c2:e5:28:e5:02:
         34:e9:79:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:33:17 2026 by rpki-client