Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
File:                     rPB-8xBznj1eeVAcrOqJp8qy_ic.mft (raw, json)
Hash identifier:          QBd5xxAwqgUocg9EKzx2tkBqGo+8RL1nMvmgRmn+WCY=
Subject key identifier:   47:92:06:BB:F7:72:9C:3E:CD:80:F2:61:92:39:D0:49:C2:89:34:07
Authority key identifier: AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27
Certificate issuer:       /CN=acf07ef310739e3d5e79501cacea89a7cab2fe27
Certificate serial:       01A100C80493618F747A4B0732F079FC9269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
Manifest number:          022C
Signing time:             Sat 03 Oct 2026 08:01:10 +0000
Manifest this update:     Sat 03 Oct 2026 08:01:10 +0000
Manifest next update:     Sun 04 Oct 2026 08:01:10 +0000
Files and hashes:         1: 5rBPZdaUmnnvoDphMpg0g3YswCw.asa (hash: 7Eg90jHkUTWS1OEeoEBVZ3nD/aanQ7UPalxj2Kd5AAo=)
                          2: XT0TwWf3saDmUZLJkEZTVoj08Go.roa (hash: IK7s2dRYQhCtsnAJ87ZpG0v9gy5QrOO4Jv4XvFQQKxY=)
                          3: rPB-8xBznj1eeVAcrOqJp8qy_ic.crl (hash: IqMv5Aevf/2ODprsjQ9FwxrZeo6639WyKDz3HnqIFnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 08:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:c8:04:93:61:8f:74:7a:4b:07:32:f0:79:fc:92:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf07ef310739e3d5e79501cacea89a7cab2fe27
        Validity
            Not Before: Oct  3 08:01:10 2026 GMT
            Not After : Oct  4 08:01:10 2026 GMT
        Subject: CN=479206bbf7729c3ecd80f2619239d049c2893407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:95:e5:8c:35:1d:b1:35:0a:37:7e:3e:75:
                    ea:1c:8d:00:a9:ef:c7:d1:86:10:06:9a:63:12:c4:
                    ce:62:ba:b3:e4:b9:33:b5:65:21:72:fc:f9:0c:43:
                    eb:67:9d:0b:ce:df:0d:d7:26:c0:be:f5:da:c0:40:
                    3d:bc:16:f3:da:f7:ea:4e:dd:19:96:e9:1a:2a:64:
                    f3:d9:84:98:e1:11:f7:65:0b:53:87:01:97:20:57:
                    e5:3c:b6:85:8d:05:07:dd:c1:f3:71:1f:1a:97:60:
                    51:09:c0:36:fe:85:24:3c:4e:57:20:d9:2e:ba:d8:
                    73:63:e2:58:4b:51:3a:b7:44:ea:9e:7e:6d:8a:32:
                    db:c1:07:a6:a2:1c:74:62:c7:fe:6a:8a:61:f8:4a:
                    7f:d1:48:91:97:1e:99:12:61:a8:53:4d:4a:a6:2e:
                    c5:aa:7c:ed:4f:3e:e6:1b:40:2d:d6:f0:f0:c1:99:
                    b1:fa:6f:8d:a8:75:87:e7:46:a1:28:e7:fd:a6:84:
                    9a:43:28:3a:23:5b:0d:4d:94:06:f3:68:92:7d:63:
                    4f:55:82:ca:b3:e8:9a:53:77:c7:9d:c3:4a:b6:dd:
                    77:65:54:d1:e3:ae:7b:e8:08:a6:eb:c5:88:26:51:
                    35:11:67:78:b7:47:92:90:fa:db:85:21:3d:0c:01:
                    b2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:92:06:BB:F7:72:9C:3E:CD:80:F2:61:92:39:D0:49:C2:89:34:07
            X509v3 Authority Key Identifier:
                keyid:AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:1c:fa:f3:d3:b5:68:6b:5e:50:b6:8a:46:17:c8:04:8a:1a:
         52:54:59:88:e2:77:37:be:e7:d6:06:09:85:8f:5d:55:f5:77:
         3e:6c:11:ed:4e:7a:c4:b8:b6:1f:87:18:37:1c:99:42:61:b2:
         f0:64:14:e9:e9:a5:d8:19:1f:19:3d:ff:da:e8:64:3c:3c:67:
         d8:5e:f9:72:c0:04:fe:d7:83:87:b4:94:fa:51:4f:30:fc:24:
         78:2d:1e:45:ae:1b:ba:1d:02:1d:50:2d:86:bb:a1:9e:41:eb:
         fb:ae:93:7e:c2:f9:90:9c:12:b3:92:df:07:1e:1e:de:06:c3:
         79:7e:47:98:69:31:25:0c:92:44:5e:0d:a9:49:a0:d3:48:85:
         14:09:5a:58:4e:38:4c:78:ca:c0:fb:ae:b1:9e:06:3c:1e:26:
         1f:a9:59:e5:17:cd:ed:1a:0c:3c:c1:4e:79:ce:f8:fa:4b:57:
         61:0f:f3:3b:74:b5:89:02:15:ce:67:43:6d:00:82:db:8d:89:
         dc:0f:b1:eb:08:8b:f3:e7:ac:ff:cc:62:93:10:04:37:6a:07:
         53:39:fa:62:52:e2:90:d4:39:b8:43:61:6d:6f:5c:be:80:f1:
         37:cb:3a:51:6d:44:f6:b6:41:86:18:18:a6:70:22:e9:8d:40:
         09:ef:ef:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:33:29 2026 by rpki-client