Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File:                     M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier:          P5+6lVQqrcGR7Q5FFElk+LP9z99y9vqTHGsdSpQ0tjA=
Subject key identifier:   23:50:0E:B7:73:67:86:00:B4:1C:A7:41:13:AE:C4:A6:96:DD:9D:01
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer:       /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial:       01A14F50C22FE98F7B06B13C6404D7467E89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number:          1AAD
Signing time:             Sun 18 Oct 2026 14:00:54 +0000
Manifest this update:     Sun 18 Oct 2026 14:00:54 +0000
Manifest next update:     Mon 19 Oct 2026 14:00:54 +0000
Files and hashes:         1: 3I4M3z7hk5Jaghl-IJJmyqtHR94.roa (hash: HXLoBLMS+Moi8PgCDzeYzip6BSpqWVV46UR0vIKYGy8=)
                          2: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: JlFKfibVSccYRJhLsz+77yDt5Hi3IjFQSpJAG59r50M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4f:50:c2:2f:e9:8f:7b:06:b1:3c:64:04:d7:46:7e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
        Validity
            Not Before: Oct 18 14:00:54 2026 GMT
            Not After : Oct 19 14:00:54 2026 GMT
        Subject: CN=23500eb773678600b41ca74113aec4a696dd9d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f4:1c:73:12:57:f8:4b:23:35:bc:a9:15:c8:
                    d3:a5:81:b3:86:fe:1c:74:ee:ec:e9:90:15:e8:69:
                    b1:e4:2c:34:af:14:b3:ff:1c:6a:e6:fc:99:50:8c:
                    64:b8:13:f4:51:5a:9f:76:df:1f:4b:2e:ca:4e:6b:
                    04:db:bd:ff:ca:75:37:69:ef:d8:c2:73:3c:66:b4:
                    ba:56:fe:e6:77:c7:f3:d5:35:fd:2b:e2:ae:8a:9d:
                    80:a2:78:6c:a7:51:db:83:19:ac:3b:19:15:8c:6e:
                    34:cd:69:9d:25:c7:17:52:20:2b:d8:e9:ae:d6:4a:
                    3a:8e:66:ac:a0:bc:68:5d:7b:8c:f1:e6:1e:71:76:
                    75:6f:4e:cd:5e:17:77:d4:1f:31:0d:87:bd:ec:bb:
                    78:a9:5e:79:3e:a0:74:5f:75:01:a8:e1:1a:74:70:
                    63:b6:84:f9:ed:08:92:fc:f9:bf:76:b5:08:54:75:
                    13:cc:a5:d4:db:56:57:df:d0:0f:78:72:82:99:f3:
                    a7:01:24:e3:be:b7:91:10:2d:d4:86:45:f0:00:98:
                    dc:3a:ba:ee:11:15:02:b2:00:79:0a:d8:d9:97:6c:
                    4d:6c:7d:a9:8c:e8:b8:23:ef:82:66:86:9f:cd:3e:
                    db:98:55:25:5a:6a:bc:29:fc:69:48:a8:cb:b9:b5:
                    a3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:50:0E:B7:73:67:86:00:B4:1C:A7:41:13:AE:C4:A6:96:DD:9D:01
            X509v3 Authority Key Identifier:
                keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:97:ae:fa:41:c9:3d:92:0a:b7:7f:ba:74:93:02:c6:1c:11:
         73:7e:93:78:4e:e6:f2:b9:8b:da:3f:c7:54:65:c4:25:3b:6f:
         5d:b6:0a:31:61:98:a3:0f:46:1d:60:75:b7:70:78:60:ab:5d:
         69:54:cb:83:10:0f:96:8d:74:65:02:22:76:94:e7:18:6f:bf:
         5a:56:a0:58:64:05:4e:60:59:75:7d:49:61:62:a3:ad:3e:d8:
         9a:07:37:76:af:97:89:82:5e:31:37:5e:14:01:d0:6a:64:e0:
         54:a1:f3:e3:84:b5:c9:3f:a7:94:7d:cf:e4:16:6c:b8:89:40:
         81:9a:6a:a7:db:21:4f:ac:1b:fb:ff:3a:3a:42:06:6e:fb:d1:
         16:11:ec:49:97:dc:88:5b:87:ad:9e:00:47:7d:94:02:87:87:
         c9:4f:54:58:16:65:d0:84:79:f8:05:89:5f:40:02:0d:cb:a9:
         74:f7:0e:ea:d9:7f:96:e8:c3:26:f2:f5:91:25:19:d2:74:e5:
         14:d9:c5:30:b6:71:3c:55:17:71:02:be:60:0a:6d:e6:6f:06:
         7e:e6:35:37:32:bb:a7:7a:35:42:0a:73:1b:18:15:44:39:84:
         78:59:af:51:6b:e3:bb:54:ad:7a:63:ab:9d:78:27:ae:26:38:
         df:05:73:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 21:37:44 2026 by rpki-client