Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
File:                     aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json)
Hash identifier:          i3CQGKytZg6dg+0YW/64Igb+XIFjFMpv2tQLrcWyUQI=
Subject key identifier:   A8:C1:28:E9:31:B0:53:BA:30:CB:BF:C5:A4:08:83:51:F0:8A:00:CD
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Certificate issuer:       /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial:       01A135C80F9E413FCD3613EB7537E98FA867
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
Manifest number:          1AA6
Signing time:             Tue 13 Oct 2026 15:01:05 +0000
Manifest this update:     Tue 13 Oct 2026 15:01:05 +0000
Manifest next update:     Wed 14 Oct 2026 15:01:05 +0000
Files and hashes:         1: IRp2Cv-8KzRBK5kjOx5O71bWsko.roa (hash: Ld1XWN7Sn3t+gSZshK2rptc8lciUjiiDr1oOC9C30/s=)
                          2: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: LpRJpwcZhsoSEjYLLtciBM4td91BzU48xkz5o9IFmVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:c8:0f:9e:41:3f:cd:36:13:eb:75:37:e9:8f:a8:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
        Validity
            Not Before: Oct 13 15:01:05 2026 GMT
            Not After : Oct 14 15:01:05 2026 GMT
        Subject: CN=a8c128e931b053ba30cbbfc5a4088351f08a00cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a8:f0:b4:91:09:e0:45:5f:6a:65:28:22:b4:
                    52:7c:01:31:68:e4:b5:58:e9:d1:23:12:89:04:88:
                    2c:2a:84:b9:65:b3:93:3e:97:2a:59:1f:08:0e:64:
                    21:76:25:0a:14:00:9b:e2:96:97:bc:e5:de:1b:b4:
                    a3:73:71:94:f5:05:72:14:06:d3:7b:90:e5:5f:e4:
                    67:47:39:83:6c:f4:b0:7d:cb:36:aa:a6:d0:85:a9:
                    48:6d:43:e7:b8:98:e0:13:2a:8b:5b:ef:dc:72:6a:
                    b5:82:10:bd:44:67:df:63:04:58:33:ed:18:79:a4:
                    1d:74:54:9d:1d:d7:e6:ad:9a:cc:67:f6:35:7c:5a:
                    61:31:64:54:e6:94:d8:e1:1c:67:a2:63:0f:4d:86:
                    1f:0e:ab:14:37:77:92:a7:bf:2d:f2:95:cc:e5:72:
                    ca:81:a1:55:fb:81:0e:2a:a1:20:92:1c:73:e6:6f:
                    56:35:ca:47:6b:62:e8:d0:41:53:af:ca:8d:e4:e8:
                    74:15:8a:d0:02:96:90:93:0f:de:78:49:4b:b9:e7:
                    88:a3:94:98:12:60:b8:8a:51:7f:63:88:a6:ed:c7:
                    8d:5d:50:9e:fd:a3:d8:c3:1d:be:aa:c1:06:e8:7a:
                    49:fd:eb:68:e2:98:02:8f:59:82:89:93:55:3c:9c:
                    9e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C1:28:E9:31:B0:53:BA:30:CB:BF:C5:A4:08:83:51:F0:8A:00:CD
            X509v3 Authority Key Identifier:
                keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c0:df:fc:57:fe:36:0d:6d:6a:6a:69:02:6b:e3:ee:2c:8e:
         77:58:0b:75:dd:71:08:1b:5f:4f:71:8e:40:0d:80:e1:4c:e5:
         b7:a0:dc:38:bb:7c:4c:d5:4d:41:ee:67:7f:91:69:22:01:5f:
         0b:3c:38:d1:44:19:ab:c1:6d:f5:59:a4:72:64:12:8c:57:15:
         00:2b:e1:ec:e6:e0:7c:28:6d:e7:56:ca:7d:22:30:73:8b:7c:
         c9:d9:d5:73:86:82:ed:be:7b:03:ba:c2:26:5d:fe:5c:9a:e2:
         9f:09:55:1f:17:da:db:4b:66:38:1b:50:ed:a2:f0:93:8a:56:
         81:c2:bf:b3:90:1c:06:44:bc:b7:d9:0f:ee:97:d5:23:41:fa:
         3f:78:a5:53:87:fd:2f:0d:52:f6:e3:11:c4:20:8b:a9:29:f7:
         01:c1:0a:08:2f:0f:8a:f7:69:ce:96:93:45:85:39:3a:c7:ef:
         25:d2:82:33:b0:f6:0e:ff:66:83:54:1c:c9:95:03:0e:19:36:
         60:f7:12:bc:95:67:49:89:66:ea:4e:f7:40:30:fa:ec:25:28:
         33:c4:26:eb:23:bb:31:79:de:0e:28:e6:c4:a2:96:59:3d:f3:
         c4:dc:2b:24:13:7b:24:12:79:5b:a9:5c:8b:32:8b:b8:85:71:
         07:44:5f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:16:32 2026 by rpki-client