Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
File:                     _pLvNTIb-Pcic0v_nfpj-9DwaQo.mft (raw, json)
Hash identifier:          +6R/V6IEXwdvbwbHO1mMYXRyCwnf3aThIn7lQx6YM+s=
Subject key identifier:   7A:88:FC:9A:C3:3F:A7:73:22:8A:19:4C:08:78:67:CA:D8:14:76:BE
Authority key identifier: FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
Certificate issuer:       /CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Certificate serial:       01A10023275B9D4D2E54FB928163FEE2F5BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
Manifest number:          13F0
Signing time:             Sat 03 Oct 2026 05:01:06 +0000
Manifest this update:     Sat 03 Oct 2026 05:01:06 +0000
Manifest next update:     Sun 04 Oct 2026 05:01:06 +0000
Files and hashes:         1: UBGkKBFV2Aa7JBw4pAiIxve4fn0.roa (hash: 9cBrWgFQDzVn82NDm23DCCjfy/yynDnSQwWNQi58HvU=)
                          2: _pLvNTIb-Pcic0v_nfpj-9DwaQo.crl (hash: yTWkNBP8nVja4258JEGuCOc+QPJvS2UexzBOTQAgd0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:23:27:5b:9d:4d:2e:54:fb:92:81:63:fe:e2:f5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
        Validity
            Not Before: Oct  3 05:01:06 2026 GMT
            Not After : Oct  4 05:01:06 2026 GMT
        Subject: CN=7a88fc9ac33fa773228a194c087867cad81476be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:cb:e9:03:21:67:a0:d8:eb:6b:ff:fa:83:
                    16:37:5e:78:3c:36:50:c0:67:c8:e9:97:5f:b0:d8:
                    9c:c6:99:1d:8e:69:09:04:ed:26:01:ec:07:ce:0d:
                    ef:52:22:02:8d:03:cd:b6:8d:8a:04:6f:c1:fc:8c:
                    4e:47:3c:13:6f:27:95:59:2e:15:a1:4d:2a:8e:81:
                    d6:66:0d:b0:a6:44:12:b4:07:82:80:d5:12:78:9b:
                    da:7d:85:e8:57:5f:ce:2a:12:fd:87:32:33:f0:16:
                    67:c4:9e:a9:8c:81:3e:3f:9a:6c:b6:6b:4b:ee:09:
                    64:48:f9:60:f6:9a:84:95:d6:5c:1e:ba:11:5c:ed:
                    31:a2:04:63:71:66:cc:37:74:92:31:07:fc:e4:98:
                    8c:94:63:e9:8a:21:2d:ed:4d:b8:07:5b:60:f4:8a:
                    e9:22:fe:17:50:5f:41:09:30:96:22:c0:ab:fd:d2:
                    83:aa:54:9e:86:f3:0e:ab:62:00:51:95:0b:96:46:
                    90:a8:7d:4f:1c:c4:1f:99:97:19:03:a3:38:e4:62:
                    b4:8b:06:79:d6:d6:0e:6c:c0:22:d2:31:b0:7c:e6:
                    0b:f2:dd:03:88:67:2b:42:a4:4d:0a:10:b4:7a:f0:
                    71:3d:fb:e8:38:37:eb:a8:41:11:fd:4d:c0:40:7d:
                    da:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:88:FC:9A:C3:3F:A7:73:22:8A:19:4C:08:78:67:CA:D8:14:76:BE
            X509v3 Authority Key Identifier:
                keyid:FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ee:be:5c:4d:f0:1a:70:c0:7e:61:e7:36:49:e1:93:a6:6b:
         99:9e:f9:98:34:ca:68:e2:5a:66:19:9d:d7:87:f9:b9:9f:5a:
         9c:24:50:df:de:79:6a:4a:64:cd:be:a1:72:58:5e:66:89:44:
         3d:0b:7e:26:62:3e:88:8f:42:b1:7f:d9:bd:ad:78:4e:94:4e:
         3b:d9:1a:b4:ca:0c:cd:07:ae:2e:a6:76:16:c9:fc:ef:f5:9b:
         b4:95:56:17:6c:32:f9:be:ed:ff:85:3a:04:8e:79:d5:09:55:
         81:a0:fc:e9:55:a8:a7:fa:ea:07:0e:01:e2:c3:46:40:fd:2a:
         2a:62:52:20:28:fe:40:2f:df:a7:03:57:40:40:9f:f5:14:c5:
         93:29:a1:71:45:31:b5:40:45:a5:3c:d3:f7:c5:76:3d:ef:c6:
         8c:43:04:05:04:28:0e:7e:13:e5:98:52:6f:80:ac:29:69:fb:
         e3:38:f5:a1:46:2d:63:78:c6:94:4f:93:42:e0:00:5d:9d:2b:
         9a:19:58:1b:a9:a8:f2:c4:70:53:70:01:6b:f0:5a:bc:04:a1:
         4c:1a:09:e3:63:c1:48:12:96:a9:6e:59:81:bc:6b:9f:79:a9:
         18:19:bc:e3:2c:70:a6:9b:4f:23:5f:fd:11:d3:d7:d6:74:13:
         5a:e1:c4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:10:03 2026 by rpki-client