Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
File:                     aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json)
Hash identifier:          DQ3jmvTDFmFR1q9GLJJ4agLy5uwWJA5RDraMeQiqQHE=
Subject key identifier:   55:D2:18:34:3D:07:93:7F:8A:F6:DC:5D:3A:A9:38:E4:95:6C:F7:85
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Certificate issuer:       /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial:       01A0E0CF134D25197DFBAEE78F4D5DA74DFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
Manifest number:          1A77
Signing time:             Sun 27 Sep 2026 03:01:02 +0000
Manifest this update:     Sun 27 Sep 2026 03:01:02 +0000
Manifest next update:     Mon 28 Sep 2026 03:01:02 +0000
Files and hashes:         1: DqpxxMPjiSQ9laP_ySepffCvlk8.roa (hash: aa8qqy86lAASIZeHc6KLaXJ1QeLKbYEq/R9968YDwxw=)
                          2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: d7ZwFV3krs5rD/o6bgZI4ZoIrQhms3Oe9MZSRz/36uE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:cf:13:4d:25:19:7d:fb:ae:e7:8f:4d:5d:a7:4d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
        Validity
            Not Before: Sep 27 03:01:02 2026 GMT
            Not After : Sep 28 03:01:02 2026 GMT
        Subject: CN=55d218343d07937f8af6dc5d3aa938e4956cf785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:85:65:4e:a8:95:87:c8:df:25:74:87:89:d5:
                    50:9a:68:68:8d:cb:e4:4d:81:6b:d8:e8:bf:8c:b0:
                    24:d7:00:c4:9e:1b:50:d6:ac:b0:10:c2:2e:7c:ab:
                    9e:0d:00:76:02:a0:27:5b:76:e4:c8:57:84:2d:89:
                    c0:f7:7f:c6:df:88:4b:ca:5c:ff:4e:73:56:56:d5:
                    10:5a:f4:c8:ad:c0:d5:ed:5c:34:a9:c2:0c:17:d1:
                    a3:e6:e6:a7:73:20:39:92:6f:aa:39:5b:99:71:e3:
                    42:87:25:f1:e0:1b:44:cb:08:60:4d:7e:1f:1b:e7:
                    d3:8c:ab:f3:28:74:23:ab:72:97:f5:c1:49:67:fd:
                    44:1d:1a:95:f5:28:e5:68:e8:5a:52:b4:6d:4c:f1:
                    3f:54:bc:d8:4c:4f:47:fd:e0:c2:d8:87:13:b1:23:
                    a0:0d:a4:c0:f6:b4:e3:26:53:6e:b8:08:b8:50:84:
                    de:28:1b:1a:3b:71:70:a2:97:51:18:6a:21:16:b0:
                    21:62:c7:34:d1:1d:e5:90:f9:f9:67:38:31:12:77:
                    df:05:15:d1:35:bf:88:60:bc:a6:e4:a8:da:89:83:
                    06:58:43:66:f0:61:26:93:4b:0b:e4:b1:ae:24:53:
                    6e:98:96:ba:b1:7a:e8:e1:e0:7b:4f:9d:b2:1d:7b:
                    d3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D2:18:34:3D:07:93:7F:8A:F6:DC:5D:3A:A9:38:E4:95:6C:F7:85
            X509v3 Authority Key Identifier:
                keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:fd:6d:1b:a4:a4:35:2c:76:76:cf:92:ba:d2:64:06:f9:b0:
         a1:c6:ce:b5:ef:65:34:6c:ef:cb:c5:97:e2:fe:18:f2:06:d8:
         a7:4f:84:fd:78:4c:5e:e8:6f:20:68:49:ca:15:64:0f:19:7e:
         32:43:25:a5:91:a0:32:58:22:46:00:7d:fc:d3:33:ec:c6:1e:
         cd:3a:77:9a:69:ae:c4:b7:e0:f7:16:69:a0:ab:e6:22:fe:dc:
         fa:06:18:1d:69:66:0a:09:bb:fe:7a:86:e6:b2:93:83:2b:7b:
         40:86:41:c5:b8:65:86:ab:a3:ec:6c:26:6a:08:45:8a:63:26:
         9a:21:8e:b3:19:31:a8:2d:e1:f8:0e:e5:34:34:3d:12:74:be:
         60:62:20:fc:a7:81:d5:86:9c:68:2c:d1:0a:73:ff:fe:22:fc:
         42:70:38:d1:d3:d3:f4:e0:30:22:95:ce:45:d9:48:11:3d:5f:
         31:aa:ba:fc:19:f1:dc:ed:04:04:83:e6:13:21:ce:80:6c:cc:
         a8:3c:f2:05:7c:1c:4b:36:01:bc:7b:04:0a:7d:89:f6:a2:54:
         61:94:8b:e9:70:c4:72:55:7b:18:01:2c:4b:d3:76:3b:90:3a:
         8e:75:aa:b7:fb:5b:a4:e7:96:38:58:fb:a9:a5:bc:c8:23:50:
         f0:7e:bf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:30:03 2026 by rpki-client