Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
File:                     rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json)
Hash identifier:          dFdxQ86nbPpyCnkJdxnrpAwQoCj37Ykxudt8cd7eCSI=
Subject key identifier:   21:11:99:C0:B6:69:28:2A:50:E1:DD:9E:44:19:39:FC:31:77:B5:71
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Certificate issuer:       /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial:       01A0FC7D79A13E5B3B5F3717DB33D05C7E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
Manifest number:          1A83
Signing time:             Fri 02 Oct 2026 12:01:16 +0000
Manifest this update:     Fri 02 Oct 2026 12:01:16 +0000
Manifest next update:     Sat 03 Oct 2026 12:01:16 +0000
Files and hashes:         1: PtYo6MwEWy1vpndhzACUN02erEo.roa (hash: 3/Pp/u1BR3pOxJGz3l7tc76JM7PepsEG/RPZ3ABSNvU=)
                          2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: hjRBUBcW1QHQ0uygWoC3hc/hxeTQXXz1fEWwtGHtQjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fc:7d:79:a1:3e:5b:3b:5f:37:17:db:33:d0:5c:7e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
        Validity
            Not Before: Oct  2 12:01:16 2026 GMT
            Not After : Oct  3 12:01:16 2026 GMT
        Subject: CN=211199c0b669282a50e1dd9e441939fc3177b571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f7:e8:61:20:e9:ae:88:03:1b:57:4f:04:cc:
                    56:8f:df:a0:4b:51:2c:65:c8:de:c9:25:c5:16:e1:
                    74:b3:5f:51:f6:fa:3d:fa:e6:97:51:ce:73:52:e2:
                    15:39:0a:ba:75:69:58:41:d7:31:18:af:93:ec:95:
                    00:80:51:1f:a3:4e:94:ee:10:72:3e:10:3a:e2:f7:
                    40:bd:d8:bd:f6:19:8a:31:6f:31:36:af:28:c8:56:
                    62:15:c4:a9:90:4e:30:9f:98:eb:fb:69:1e:8d:2c:
                    85:fb:20:68:7c:18:38:02:ed:fd:5d:16:43:22:2b:
                    2b:50:8f:84:ee:ae:5c:e8:e6:00:14:2a:bf:f3:e3:
                    28:a7:34:56:e0:c6:ff:a6:fb:a5:41:ac:02:d3:22:
                    8f:8e:08:a6:0d:e1:d7:ea:e2:5d:c7:cc:91:52:63:
                    18:69:16:81:ce:d1:09:95:5c:80:3b:59:ff:0a:fd:
                    72:ac:a6:11:ca:9b:b6:af:08:81:e6:1b:f5:8e:7d:
                    43:bb:db:5d:9e:96:e2:56:46:01:f2:f9:ff:1c:b8:
                    cb:1a:bd:8d:ab:80:5b:63:52:6c:08:9e:38:73:3a:
                    90:eb:5b:40:81:b2:25:c5:d6:ce:73:05:8c:13:ca:
                    6f:2d:a9:b4:8b:f3:3f:d5:52:4d:a7:d3:87:c0:02:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:11:99:C0:B6:69:28:2A:50:E1:DD:9E:44:19:39:FC:31:77:B5:71
            X509v3 Authority Key Identifier:
                keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:03:7f:cc:09:df:30:2b:4e:6a:1f:b5:29:cb:38:4b:88:31:
         e5:6c:53:3a:6f:2c:4a:c5:da:71:3f:56:dc:a0:3a:04:07:83:
         67:cb:69:4b:e1:f4:4f:c3:1e:7a:e3:72:cc:3e:20:ff:8f:e6:
         e7:a0:d1:21:95:c8:65:6d:1c:7c:66:1a:13:29:33:5f:4f:5f:
         ac:57:e6:3e:aa:6b:76:1f:38:d4:e5:3b:07:a2:16:c3:44:20:
         82:1b:7e:78:56:a7:af:25:6b:25:13:8a:04:5f:5f:24:e0:31:
         ca:12:d4:6c:45:d3:1d:15:d6:b4:53:d0:44:bd:48:67:bf:40:
         3c:8a:9a:01:2f:59:92:5e:2a:79:37:7e:3b:2e:c1:9d:e9:fe:
         12:f4:b9:dc:25:fa:bf:f3:49:ff:4e:33:e9:4f:1e:1c:09:f1:
         de:a3:d9:4e:39:da:a4:64:17:1b:d0:84:84:4f:78:82:0e:f9:
         d5:97:00:a5:4e:5e:e7:8c:bd:3a:10:4d:d6:98:39:4c:19:d8:
         0f:0c:ef:27:b3:91:16:0c:43:cf:0a:b9:fc:81:35:21:7e:9e:
         46:c0:8f:a2:70:3a:ed:dc:93:bf:42:f1:9c:41:bb:67:5a:12:
         13:38:45:2b:c6:09:c7:37:4e:6b:b2:4a:7e:f0:1d:22:90:de:
         08:92:19:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 20:58:11 2026 by rpki-client