Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File:                     aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier:          9uI0PJC0eW4X+Lzi8+eFHF1JXGbLENwfgLzZYDV4lmg=
Subject key identifier:   E4:AB:A4:C6:3F:34:48:7D:F1:96:D5:D7:E1:18:54:9C:0E:5B:C1:0B
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer:       /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial:       01A0EAAEFE7D25D2764C579EFDA1D29363E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number:          1A78
Signing time:             Tue 29 Sep 2026 01:02:11 +0000
Manifest this update:     Tue 29 Sep 2026 01:02:11 +0000
Manifest next update:     Wed 30 Sep 2026 01:02:11 +0000
Files and hashes:         1: 2s8BwWfMsc1DdyxWLxSnFJbe2GM.roa (hash: NV7KOQeRFSKnPsVfH3yXaw+5FrZAKvvgJHtK0M65oGw=)
                          2: 5Qkrye_BdRj_KcilndhhMxwQKeU.roa (hash: M+o8cm6+Lmjuj+2WuiEMDee7ML6JKyuX/hZR2CMS3Pk=)
                          3: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: h23wayeTzrhEhs9kjAncvbnZg7fssKuHiUcU3IsFVhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:ae:fe:7d:25:d2:76:4c:57:9e:fd:a1:d2:93:63:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6954e90899ff25644520724cde8c211613600bef
        Validity
            Not Before: Sep 29 01:02:11 2026 GMT
            Not After : Sep 30 01:02:11 2026 GMT
        Subject: CN=e4aba4c63f34487df196d5d7e118549c0e5bc10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4b:48:8f:34:ac:02:0d:89:51:cf:69:2e:50:
                    5e:b1:ed:45:e7:e6:26:5d:c1:e0:a1:57:c6:7a:e6:
                    6f:22:14:a7:bc:6a:07:e5:cb:45:1c:b2:31:e3:51:
                    35:22:1f:fc:37:7d:67:f1:b6:9a:34:1d:79:64:4a:
                    c4:0a:ac:97:1a:80:8c:06:a6:bc:e7:dd:06:c9:bb:
                    60:78:9c:d7:74:12:27:6e:b3:90:b7:d7:76:be:a7:
                    1c:38:22:e5:b7:f2:c8:5c:63:88:15:fd:2d:11:fb:
                    fe:05:a2:0a:d7:46:f9:6d:c4:ad:4f:83:40:6b:1a:
                    24:be:4d:00:5e:ce:20:8a:9f:dc:cd:73:49:8d:9c:
                    7f:5c:38:ba:20:e4:32:5a:dd:22:5f:94:79:32:7c:
                    57:33:0a:03:c8:f9:af:02:4b:a1:b5:4c:55:6d:b0:
                    e0:2f:a6:89:76:48:3e:04:e7:d4:f4:d0:84:f2:fb:
                    5b:0c:41:c6:82:00:72:0d:d3:33:0b:26:81:3c:51:
                    2a:c0:33:93:0e:46:01:b6:a2:6f:ee:7a:dc:97:78:
                    24:c4:3f:7d:fd:a7:dc:09:cf:4a:a2:f2:a6:88:a7:
                    fe:75:7a:4a:93:ed:9a:7b:d9:11:78:32:69:25:fa:
                    8e:67:63:39:d5:23:2a:17:f0:e9:ed:6b:9c:a2:05:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AB:A4:C6:3F:34:48:7D:F1:96:D5:D7:E1:18:54:9C:0E:5B:C1:0B
            X509v3 Authority Key Identifier:
                keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:66:6e:c9:f9:c1:5a:32:66:f2:32:af:e6:51:c6:c3:77:15:
         32:83:70:36:30:bf:11:79:13:20:2a:dc:c3:eb:e1:23:a5:aa:
         f6:e3:42:28:f8:a0:a2:b8:a1:51:4f:3d:9e:bf:c7:7c:31:6c:
         63:e4:54:1f:9c:a1:67:9c:b9:d8:c7:12:85:40:b8:c1:8c:d4:
         f0:4c:5e:56:dc:dc:9e:ec:6a:c4:51:8e:07:8c:6c:04:08:8b:
         a1:55:fb:56:85:3d:19:b5:e4:af:f0:bc:cb:10:43:4d:57:1f:
         f8:e8:f1:55:e8:3b:1f:1e:df:1e:ff:ce:72:05:98:1c:4a:47:
         24:e9:68:72:9a:61:11:23:00:dd:36:90:57:39:98:42:28:98:
         5a:cf:5a:26:01:a3:08:1d:46:e6:05:2c:29:11:b0:31:81:bd:
         5d:5a:81:59:59:ab:a1:10:e0:cb:eb:5f:f9:19:59:c0:1a:e4:
         90:a0:29:b5:61:7b:30:e3:19:8b:11:12:d2:0e:b1:4f:51:33:
         ab:c5:67:d8:6d:29:03:98:d9:fe:2f:ac:e2:a0:2b:a6:1f:f3:
         bf:c9:5e:9a:f3:6b:d0:8f:14:fc:f2:57:9d:91:7b:c7:05:e8:
         b1:ed:33:a7:c3:ef:03:7a:7b:31:60:2b:fa:31:fc:3e:d0:ec:
         ab:e4:92:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:55:57 2026 by rpki-client