Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
File:                     rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft (raw, json)
Hash identifier:          2f7RU7djbyZnPQx36dq94ZGDAuQ2OdnQs9G1dIY+x4I=
Subject key identifier:   E4:9F:EC:5E:11:48:0C:AA:4E:41:B1:DA:EE:FD:92:1C:10:31:7D:59
Authority key identifier: AD:5C:E5:53:00:60:70:FE:08:03:70:AD:FB:94:4E:D2:9B:7D:94:11
Certificate issuer:       /CN=ad5ce553006070fe080370adfb944ed29b7d9411
Certificate serial:       01A0EA76F7BAB686EEF010C9EB5BE589016F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
Manifest number:          0164
Signing time:             Tue 29 Sep 2026 00:01:00 +0000
Manifest this update:     Tue 29 Sep 2026 00:01:00 +0000
Manifest next update:     Wed 30 Sep 2026 00:01:00 +0000
Files and hashes:         1: Di2m4-5_QDl5Rldoh59q9lj5dCY.roa (hash: GNTOuw95a8w2YtoMmrRI/JIWU21DxcdrGmYPu8oxIao=)
                          2: rVzlUwBgcP4IA3Ct-5RO0pt9lBE.crl (hash: 0C2RA02xaEXwLfI5p+PzeHp0q71iktTXeTysvLYhMd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:76:f7:ba:b6:86:ee:f0:10:c9:eb:5b:e5:89:01:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5ce553006070fe080370adfb944ed29b7d9411
        Validity
            Not Before: Sep 29 00:01:00 2026 GMT
            Not After : Sep 30 00:01:00 2026 GMT
        Subject: CN=e49fec5e11480caa4e41b1daeefd921c10317d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:28:15:73:f9:fc:bf:37:1b:ea:1b:c4:62:c4:
                    68:ac:e5:83:c8:5d:a1:db:e1:5d:45:b6:67:ee:60:
                    c8:54:5b:e6:b4:a7:7b:b4:4d:12:2d:d3:ec:e0:8c:
                    78:5f:56:50:d1:c5:89:b0:82:a5:ac:77:af:76:4f:
                    c5:84:ba:08:cf:81:7a:50:c0:01:b9:75:b5:18:ef:
                    6d:dd:94:8f:18:2a:5b:e5:4e:c2:ff:48:42:75:a2:
                    5c:e6:65:40:f4:41:cb:e5:8d:56:8d:82:58:4b:58:
                    7a:4d:ce:fa:d9:93:49:90:a5:2b:4a:93:01:15:cf:
                    65:c8:e9:b3:b9:be:eb:79:dc:f6:7c:95:8f:da:21:
                    36:d7:77:4e:8b:23:c9:24:70:4a:44:cd:50:b8:67:
                    c1:66:be:bd:25:0b:47:3a:fb:ca:5e:d4:70:f1:27:
                    5b:8f:a6:47:d8:53:cc:1b:66:5f:c3:8b:fc:d9:d7:
                    7d:01:da:ed:36:b4:e5:b3:40:82:ad:d8:f0:bb:71:
                    b8:5f:a3:c2:e4:dd:76:06:16:c6:66:6d:c3:8d:a3:
                    ec:47:04:e8:cb:8c:c7:6f:12:01:44:bd:30:75:1d:
                    84:f2:34:9b:60:8c:e1:11:22:05:07:fb:a1:3e:79:
                    67:8c:3d:ac:df:44:2c:c8:67:38:4b:b0:de:13:2c:
                    8a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9F:EC:5E:11:48:0C:AA:4E:41:B1:DA:EE:FD:92:1C:10:31:7D:59
            X509v3 Authority Key Identifier:
                keyid:AD:5C:E5:53:00:60:70:FE:08:03:70:AD:FB:94:4E:D2:9B:7D:94:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:37:60:ae:cb:8b:15:9b:48:c3:96:84:2b:d0:aa:5d:68:8f:
         c8:44:4b:94:ac:17:5c:ed:5c:9f:d2:38:3e:36:0a:4d:4e:35:
         47:18:95:66:cb:03:0b:3f:6e:8c:e2:2a:cb:1f:41:ec:3f:01:
         18:92:b5:a6:a8:2c:92:5f:f1:02:34:2d:72:b9:83:d5:61:d6:
         bb:d3:6c:b5:8b:a1:75:af:4c:4a:a5:4b:0b:78:f2:4d:65:96:
         18:2f:81:6b:61:ac:d7:33:55:77:6a:27:5f:f7:ff:77:af:ae:
         2a:7f:69:77:53:91:65:04:24:44:f8:fb:1d:0d:f2:2a:47:b4:
         c1:15:77:59:49:04:e9:3e:52:b1:86:e6:e5:fb:d0:0c:84:9e:
         5d:68:72:21:b8:3d:09:6a:d0:31:62:16:30:89:5e:0b:55:46:
         95:40:be:8d:47:98:52:69:32:8d:4f:8b:b4:f3:92:e2:f0:d1:
         d5:93:5e:de:b5:d4:69:3a:af:96:ae:98:38:5f:26:00:b8:3e:
         6b:99:87:61:68:fe:02:43:fc:c1:49:ab:62:4b:b8:c8:55:2b:
         1c:55:27:20:20:df:0e:d2:b0:f8:df:64:50:82:af:4c:c8:b1:
         f1:be:06:fd:9d:e6:4e:b5:fd:8e:40:66:ef:dc:b5:e6:0b:88:
         3e:a9:fc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:55:51 2026 by rpki-client