Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
File:                     rWUjcvDl0WnCAPfR0IDoVw_-23E.mft (raw, json)
Hash identifier:          Lkk2lPrjoQqhUF7oTP0jk2nVJZEF4hhVrbB1QCZ3uLA=
Subject key identifier:   7F:C7:7B:5F:7F:B1:BC:A8:BB:1B:F3:27:A9:D8:C1:9C:9C:85:73:55
Authority key identifier: AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
Certificate issuer:       /CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Certificate serial:       01A126F986A8F4532345A63E9CA022C4F405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
Manifest number:          0804
Signing time:             Sat 10 Oct 2026 18:00:49 +0000
Manifest this update:     Sat 10 Oct 2026 18:00:49 +0000
Manifest next update:     Sun 11 Oct 2026 18:00:49 +0000
Files and hashes:         1: TVDGXyDJKjGf9M2l61hPydz0GW8.roa (hash: GPBRCtJGeJYsInHOu3V8vVubHvszvLhmWvGPlsGdKsk=)
                          2: rWUjcvDl0WnCAPfR0IDoVw_-23E.crl (hash: XJ8A+GrplKJ0baGygYQBGrgnPRcFeVxKQgADJL7oOQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 18:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:f9:86:a8:f4:53:23:45:a6:3e:9c:a0:22:c4:f4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
        Validity
            Not Before: Oct 10 18:00:49 2026 GMT
            Not After : Oct 11 18:00:49 2026 GMT
        Subject: CN=7fc77b5f7fb1bca8bb1bf327a9d8c19c9c857355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:a6:b5:56:f7:d5:3f:31:56:3d:7e:56:36:
                    58:8b:8c:54:2e:ad:34:8e:7a:bc:e6:f7:01:f3:da:
                    c3:d3:c3:50:3b:9b:22:cc:60:03:19:c1:5b:a0:49:
                    6a:53:ff:4f:98:f2:2a:f6:9f:fb:4f:c2:15:71:2d:
                    04:dd:09:8f:00:9f:49:eb:52:d2:c9:31:13:3c:88:
                    d7:e2:15:e5:b5:27:24:e2:92:aa:c1:30:e2:a1:13:
                    0c:c3:0a:c9:c2:19:54:e1:c9:81:d3:6c:04:d2:9a:
                    d4:56:88:60:a5:ae:0a:7a:f0:c6:f3:94:16:61:d5:
                    40:2e:13:e1:ca:e1:69:96:88:45:dd:f0:5d:65:08:
                    b6:52:89:b8:07:25:e4:ea:e5:e3:01:96:0c:53:8c:
                    31:cb:52:9c:f5:de:39:51:dc:55:0d:0b:10:c9:e1:
                    18:c5:4b:9d:a3:b8:52:1e:0d:e0:1f:0b:9f:08:88:
                    98:17:76:72:f4:6a:34:90:e3:83:e4:1b:c2:6d:77:
                    20:6a:d4:64:96:85:53:a4:90:08:0a:0a:4f:5e:4b:
                    ea:d3:fc:40:a6:9e:fd:c5:b1:c6:09:b6:83:95:7b:
                    e9:f5:3b:98:ad:05:ad:25:53:ac:3b:91:71:0c:f2:
                    c8:35:e1:59:37:32:23:fa:60:d6:d4:fb:73:f6:d8:
                    4a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C7:7B:5F:7F:B1:BC:A8:BB:1B:F3:27:A9:D8:C1:9C:9C:85:73:55
            X509v3 Authority Key Identifier:
                keyid:AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:4c:74:c0:41:a0:54:09:32:28:f9:5b:d5:c6:3a:e8:ab:fa:
         2b:5e:07:3d:d5:6e:40:85:39:07:c1:43:02:27:23:bf:b9:1c:
         1b:50:09:7a:3f:18:fd:09:4d:f9:b2:b5:6c:d5:19:07:80:6a:
         f8:5b:9a:45:dc:a4:c5:67:37:89:1c:5a:e2:6f:76:1b:57:18:
         56:eb:df:19:9e:e2:e7:1a:0a:6a:4a:93:1b:40:a8:4c:32:80:
         b8:f2:c0:24:45:14:12:16:43:96:43:cf:fd:87:4d:45:f3:19:
         e6:90:24:8d:9a:fa:5f:06:c3:27:5f:c7:36:b9:90:28:a9:fc:
         32:72:e3:db:e1:f4:61:ee:e9:3f:10:c3:ac:06:e3:5d:38:53:
         69:89:a5:16:a2:87:29:98:e9:61:64:3b:aa:d4:2c:fc:4d:72:
         11:8c:94:75:c3:cf:0b:bc:6e:81:c7:bf:6d:5e:45:29:f1:6f:
         55:58:02:66:71:94:23:82:a9:74:b9:4b:ce:42:72:20:be:0d:
         c8:cd:c6:a5:ea:17:03:b3:4e:80:5b:fa:c7:b0:6e:26:8d:07:
         87:db:38:fa:fa:6e:95:d4:2d:56:94:98:bc:44:7c:52:d9:36:
         f9:91:99:64:1c:56:48:ee:b7:48:05:16:5f:1e:4e:53:97:88:
         a4:a3:16:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:59:50 2026 by rpki-client