Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
File:                     Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft (raw, json)
Hash identifier:          nnrQwuS3XPYRxqg1IPrSZtimsxri22SlSp/RWUbqHW8=
Subject key identifier:   1A:15:27:4B:89:64:5E:DF:75:96:9A:18:7E:4C:9A:85:05:91:03:AB
Authority key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
Certificate issuer:       /CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
Certificate serial:       01A0F67B4D19FFD403E943AC0BE9A6DF9044
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
Manifest number:          097E
Signing time:             Thu 01 Oct 2026 08:01:10 +0000
Manifest this update:     Thu 01 Oct 2026 08:01:10 +0000
Manifest next update:     Fri 02 Oct 2026 08:01:10 +0000
Files and hashes:         1: 9MMTJC9bSYJjm0yH2SR40mWxLt4.roa (hash: 911epWb1C+HTij7xHBBtK6BFbTtOQmcCGUfZtk4CgN0=)
                          2: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl (hash: vyyOWqtgwohdeQebwWNgKq9mUZqN1C6kfurh90hOE1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f6:7b:4d:19:ff:d4:03:e9:43:ac:0b:e9:a6:df:90:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
        Validity
            Not Before: Oct  1 08:01:10 2026 GMT
            Not After : Oct  2 08:01:10 2026 GMT
        Subject: CN=1a15274b89645edf75969a187e4c9a85059103ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:42:a4:bf:3c:5c:d9:b8:10:8c:2c:b6:47:5e:
                    13:22:80:08:e1:80:e3:96:8b:95:26:81:1f:c1:20:
                    6d:f6:50:68:29:55:da:a1:fc:bf:b3:88:03:f7:92:
                    de:f9:2b:ba:19:b3:c3:3e:9d:cb:0e:af:6f:76:fc:
                    1c:a4:e0:59:81:04:15:e9:cf:9e:9b:14:99:0d:03:
                    75:e2:43:3e:19:a6:a3:1d:3b:e3:71:12:05:08:1d:
                    59:51:98:90:09:ef:59:4a:d8:65:1b:4f:88:8d:03:
                    dd:4a:c6:bf:21:5f:02:e5:8a:1d:41:ac:84:be:8a:
                    1c:7b:08:98:8c:59:70:58:1f:66:72:38:b0:0f:9f:
                    78:0c:26:48:4e:22:b2:87:36:aa:e7:a8:41:12:ec:
                    bb:9d:9b:19:95:68:35:f1:82:e4:83:c2:0c:1a:02:
                    de:1d:76:4f:2c:80:e8:71:d4:e6:34:2b:61:7f:33:
                    6e:14:d5:3d:86:df:7d:d3:1a:b2:9b:5c:30:49:bb:
                    47:e7:70:f5:56:37:3f:75:da:e3:8c:7f:1a:bd:1e:
                    ff:16:0a:fe:75:c2:2b:f6:8d:c7:62:7f:a4:b5:9c:
                    26:53:d6:5f:53:dd:fd:f2:39:06:60:72:1d:ae:08:
                    eb:5a:eb:33:7e:ed:02:24:e9:90:9b:45:c8:31:85:
                    8c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:15:27:4B:89:64:5E:DF:75:96:9A:18:7E:4C:9A:85:05:91:03:AB
            X509v3 Authority Key Identifier:
                keyid:3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:34:77:29:bc:7c:0c:2c:b5:cb:d6:16:12:c6:87:f5:2a:20:
         f4:bb:16:73:f9:af:40:4c:7e:36:13:ed:e9:32:60:1d:fc:f0:
         6a:c5:18:a5:a8:00:ac:43:01:70:6f:98:7b:3d:65:82:31:d0:
         ca:c7:da:fb:b8:aa:8d:3e:b4:bd:81:5d:07:d5:05:84:17:64:
         c4:c9:ec:e4:98:2c:da:11:54:a2:2a:5a:ae:fa:e0:e1:db:0c:
         a2:d6:0e:a8:66:08:e6:1e:50:58:14:e7:08:b5:a4:1b:b5:25:
         0e:72:6b:54:44:c0:a1:29:21:46:14:cc:62:11:f3:9f:c5:21:
         b5:19:74:4c:c2:23:35:80:31:4e:d6:64:07:21:90:ea:39:29:
         a4:85:c9:1d:c8:ca:64:e4:7e:51:97:c6:71:1f:5c:b5:98:bd:
         0d:3f:34:a5:21:e9:f1:9f:8f:e3:f5:bd:4d:8a:6e:72:87:ca:
         f4:c4:31:ba:3b:da:2f:7e:77:a3:da:52:26:e4:90:60:29:fd:
         66:b3:40:8b:44:24:f1:be:f8:97:a3:1e:dd:81:06:45:c0:ad:
         0b:2e:7e:8a:26:0d:06:5b:48:fe:ed:4e:aa:56:54:53:e1:c2:
         e2:4c:01:ab:99:7e:25:e4:af:3f:5f:66:55:01:78:0d:d3:06:
         58:54:a0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 14:00:40 2026 by rpki-client