Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File:                     ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier:          lfcbAmUzOG4sgvcJkND/vSwbT18g6NhNLr+KaHYdhBw=
Subject key identifier:   8E:25:D4:BF:03:B4:01:7C:4F:6C:E4:7A:5B:46:F8:80:04:36:EF:BE
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer:       /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial:       01A120F7AED9F41864C26863787A83D78808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number:          1405
Signing time:             Fri 09 Oct 2026 14:01:05 +0000
Manifest this update:     Fri 09 Oct 2026 14:01:05 +0000
Manifest next update:     Sat 10 Oct 2026 14:01:05 +0000
Files and hashes:         1: 3JNSQLDSVjMCAeXDdRfs56ArU_A.roa (hash: rZTM/BDsvJUHVVJdlV2ux5RuYfvV5Fs0/F1F4geykB8=)
                          2: VTknZ-I_GU8r0qWqKMpUO2ZewjE.roa (hash: 3hD9W96lP9a4vkoDA7OXWeZO5moSVt18MKLKHlgk0dU=)
                          3: sFtpmEwf8BZ7WD7WnZcVk65ZP4c.roa (hash: m7H1o/4M+RauJJ9zEivTYaIxQJNTjYvvSZKIkxe1inE=)
                          4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: kMw/cborfmRP4vWNoRks8fD0qinsljlKOyoueU863t0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:20:f7:ae:d9:f4:18:64:c2:68:63:78:7a:83:d7:88:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
        Validity
            Not Before: Oct  9 14:01:05 2026 GMT
            Not After : Oct 10 14:01:05 2026 GMT
        Subject: CN=8e25d4bf03b4017c4f6ce47a5b46f8800436efbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:b0:26:94:7a:a2:58:af:b6:b9:a2:a2:a4:
                    7d:af:c3:9d:cf:35:1e:23:6a:fc:6d:7c:9e:11:7c:
                    51:4a:7b:54:49:7f:7c:69:ad:ff:98:32:95:9c:ea:
                    7c:11:ed:44:9f:12:d4:25:a0:9d:49:8d:2e:69:2c:
                    f7:b2:27:3b:ae:98:b6:97:18:11:5d:fe:10:5d:3d:
                    3a:03:4f:f7:c0:5c:7b:3a:df:8d:44:79:8b:f3:31:
                    36:5e:38:4d:c3:2a:49:e3:3d:89:c5:2e:43:03:9b:
                    89:d5:a7:92:c1:4a:a3:c1:e5:f0:ec:6d:f3:4a:c9:
                    d3:45:18:41:af:35:84:ca:06:cb:e3:d9:f6:c5:2d:
                    79:cf:31:fe:4c:b6:04:41:78:c9:9a:75:be:5d:51:
                    62:e9:c3:a9:ca:cc:19:85:dd:fc:2b:6c:41:ef:d6:
                    b6:dc:3b:a1:4a:0b:ba:67:88:95:92:09:6a:71:e7:
                    5d:01:58:61:5d:03:e3:b9:ef:97:6f:c4:ad:2c:d9:
                    d8:90:9b:c3:54:a8:bd:32:02:3d:b8:b5:81:27:15:
                    2e:f2:f5:e6:73:6e:d2:ed:25:86:18:3f:95:15:1b:
                    f8:ab:fd:8e:0b:ac:1b:9b:8f:f5:78:7d:0a:94:06:
                    83:f7:8f:bb:63:0b:78:99:79:dc:e7:a2:b3:4b:1f:
                    b7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:25:D4:BF:03:B4:01:7C:4F:6C:E4:7A:5B:46:F8:80:04:36:EF:BE
            X509v3 Authority Key Identifier:
                keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a6:2c:26:17:d5:a3:3c:b3:42:0c:6f:02:71:fe:ef:27:f2:
         dd:2b:b9:49:df:0d:60:59:ab:3e:6d:6d:42:a5:a3:c2:a6:db:
         93:a4:6f:6b:a0:85:cc:d7:27:05:49:81:4a:cf:2c:dd:f9:eb:
         29:7d:1c:0b:e7:d3:a0:b6:e7:95:db:2a:c7:fc:30:b9:3a:cf:
         e2:64:fa:a7:1c:7a:a3:22:6d:c4:d7:74:01:79:05:2d:f8:09:
         f8:e6:ed:a0:ca:0a:52:70:36:9b:de:e3:9b:52:2f:37:7c:82:
         c7:9d:54:86:e7:cf:96:7a:67:33:3a:5c:f6:5e:2b:c2:1f:9a:
         cb:43:ad:8d:c2:aa:11:9d:be:1e:65:f6:45:b0:8f:f5:cf:f4:
         0a:9c:b8:34:f7:44:84:4f:e3:d3:4b:89:0a:38:33:73:38:70:
         38:c0:f4:25:54:f8:11:ae:dc:5d:61:4d:80:3f:41:cc:72:bf:
         8c:2d:68:ef:fd:5b:32:c2:b1:64:80:fa:84:a4:65:70:80:d7:
         24:56:a6:c5:ec:84:4f:d8:32:4a:1a:c9:cf:32:92:dd:f0:c6:
         74:c4:f2:6e:18:4b:89:ab:e6:7d:e3:a7:98:73:4a:72:18:50:
         eb:a1:24:5d:86:34:87:cc:50:ab:92:73:65:fe:78:5e:c8:93:
         fc:3b:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:43:18 2026 by rpki-client