Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File:                     rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier:          pqJAOYWAiuge/cyKgdum/PcEGRvgFWAzFPs7gac7/rM=
Subject key identifier:   B5:60:A0:7F:0C:40:D8:C5:6C:17:9D:C9:CE:98:08:B8:14:E0:D2:F3
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer:       /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial:       01A0C9A214694B1FCA604111E8AAB7113798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number:          1A71
Signing time:             Tue 22 Sep 2026 15:00:37 +0000
Manifest this update:     Tue 22 Sep 2026 15:00:37 +0000
Manifest next update:     Wed 23 Sep 2026 15:00:37 +0000
Files and hashes:         1: 0SdAWy5FbGh2pB-UZZKsGcwkt5M.roa (hash: +N3CbDkY0v4sIs+KAKMovKpqq8wIicumkVCtsw7Q2eE=)
                          2: 2RHf-9fOIvKsA2VNSiC87nFbCOs.roa (hash: dgDZc/LxnLIjKHM4eGdgAhe4w7g3MVLAoMHC9X1LCgI=)
                          3: STxyqEZJdelIgYwPQkrFzkgfanw.roa (hash: s65hDXY2ql7cBoPqQwS0YK+flCpqESibXFG1uh5dHgQ=)
                          4: WnHzbxcWnfjBlVEJkzUqvflkBLA.roa (hash: eI8gIZ4QgUUkSDU1/GTW0FbHxY0wg/TC2Y43t8FWow0=)
                          5: qXgX-MgGakZBvHLGFfMng5J68aM.roa (hash: tdETsvPamgqJs8d2zdVQ7bKa0GNEeta7JZJxdAHdr5I=)
                          6: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: Ni+467W7jdFVvMGVDam3xKcadIL/Cvk1/Tq5P/sRnTE=)
                          7: uljHeXtwPoXTWfqHenoj_DXb3ww.roa (hash: wGmp5Bh78//8aIg6gUIYujT06jT2kqD/3V641rlo7LY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:a2:14:69:4b:1f:ca:60:41:11:e8:aa:b7:11:37:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
        Validity
            Not Before: Sep 22 15:00:37 2026 GMT
            Not After : Sep 23 15:00:37 2026 GMT
        Subject: CN=b560a07f0c40d8c56c179dc9ce9808b814e0d2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6d:7f:29:bd:f3:03:2f:73:40:62:65:4e:40:
                    55:3a:d0:51:02:fc:7c:98:c2:0e:8f:ef:ea:2f:d6:
                    97:58:61:28:d8:1f:e2:45:16:bd:bc:50:fb:c7:6e:
                    21:fe:19:66:bd:a3:18:fd:11:7e:c7:06:cc:0d:dc:
                    8c:06:76:dc:ba:ae:8b:6c:c9:3f:ff:13:9d:05:8f:
                    a1:eb:69:f8:4f:fe:ea:97:e7:dd:e6:a3:d8:9a:7e:
                    70:cd:59:b7:e6:83:f9:06:88:06:5f:1c:a8:35:77:
                    27:e9:54:ee:e0:af:b1:65:1b:36:dd:fc:07:4a:a5:
                    ca:e3:1e:ba:f4:51:ce:c6:20:a8:9b:da:7f:cb:1d:
                    f4:04:19:9b:7d:d2:9b:39:54:7c:4a:30:ba:73:5d:
                    ab:ab:0e:bc:8b:92:ef:ef:46:82:3e:09:a9:ab:5f:
                    e3:69:5e:f4:db:12:5e:95:cf:03:3b:f9:73:ed:26:
                    1f:eb:1d:69:da:3d:e3:15:3c:2c:11:e5:dc:2d:0d:
                    cb:09:89:ed:fd:dc:13:f7:3d:79:21:ba:be:2f:ec:
                    03:cd:5a:6a:50:0e:af:14:a6:bb:2c:28:00:ae:2a:
                    e0:45:56:a2:39:7f:a1:26:7b:40:1b:d9:06:ea:42:
                    21:b9:f4:75:d2:8f:4c:1d:fe:0f:c4:bd:1c:9f:aa:
                    0e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:60:A0:7F:0C:40:D8:C5:6C:17:9D:C9:CE:98:08:B8:14:E0:D2:F3
            X509v3 Authority Key Identifier:
                keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9c:2f:73:cc:83:66:37:31:05:e0:b6:9a:d7:ab:43:3b:ea:
         9a:23:b4:27:15:d9:be:f6:4a:aa:58:4e:0f:55:95:87:72:3b:
         78:e6:42:36:6d:06:a7:9f:04:93:90:44:5b:11:1f:eb:02:6c:
         56:d7:87:20:c0:22:20:84:85:3e:91:9b:28:89:4e:bb:85:2e:
         bb:b1:f6:88:84:a8:2d:4d:08:6c:07:e8:c9:18:15:d3:d2:8f:
         ed:01:8e:d6:67:79:3f:a8:a5:41:f4:80:53:ed:03:ae:9b:61:
         b0:fe:8d:d0:00:95:10:82:f4:f6:60:57:06:c7:36:a1:d0:72:
         c0:07:0c:6b:f8:c7:4c:44:ff:a4:f7:11:fc:21:83:8c:04:d0:
         5c:fb:3a:9b:0b:77:71:36:c4:a7:9c:bb:35:19:85:32:0f:b0:
         39:6c:c6:d2:18:1e:e2:b2:92:bf:11:87:c5:2b:36:d6:f9:a8:
         08:51:c1:c2:45:85:fa:e3:c7:21:08:3f:fa:7a:65:4c:a8:73:
         f2:d0:24:14:42:78:46:56:96:df:2b:48:20:43:0a:52:b9:7e:
         74:ee:06:f6:8f:00:4b:33:5f:6b:4e:ea:63:02:7c:b1:47:34:
         9e:3e:67:65:23:e6:3a:59:77:2d:c4:5e:cc:1e:b7:9c:7e:c2:
         2e:3a:ca:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:09:15 2026 by rpki-client