Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
File:                     d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft (raw, json)
Hash identifier:          ga6gvASgy491TBc2bTfx92J4Kiy3wUhALxTlMJZHCJ0=
Subject key identifier:   28:46:AA:CA:70:1E:18:03:55:1C:14:3F:AD:96:B3:17:3A:05:A5:52
Authority key identifier: 77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
Certificate issuer:       /CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Certificate serial:       01A0E0CFD43CCC2DB403577BB49C092E023C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
Manifest number:          1A73
Signing time:             Sun 27 Sep 2026 03:01:51 +0000
Manifest this update:     Sun 27 Sep 2026 03:01:51 +0000
Manifest next update:     Mon 28 Sep 2026 03:01:51 +0000
Files and hashes:         1: cjO-JSKeIeKfhSr8BfkC9JUrsaw.roa (hash: FDKs6XQEKS17A+eX40GCtBIucy/T4VULlaGZ/uQb+zQ=)
                          2: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl (hash: VcM6K23JnlxBvNjUeI7w5ZJk4ijG4I626tpVObs5CIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 03:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:cf:d4:3c:cc:2d:b4:03:57:7b:b4:9c:09:2e:02:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
        Validity
            Not Before: Sep 27 03:01:51 2026 GMT
            Not After : Sep 28 03:01:51 2026 GMT
        Subject: CN=2846aaca701e1803551c143fad96b3173a05a552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fb:de:e6:24:8c:d0:c7:5e:18:eb:9f:52:24:
                    14:1c:b8:fe:db:30:a3:79:71:31:57:0f:c8:92:fd:
                    0f:b2:2c:11:9a:23:04:d1:22:27:15:41:11:29:67:
                    ac:6a:4c:2b:05:0b:d5:7d:c3:d7:0d:42:2c:e9:b1:
                    26:e8:9e:b6:aa:8d:f2:cd:80:f5:e9:2c:8b:89:82:
                    1c:31:39:3a:34:67:c4:c7:c8:28:c2:3e:71:8e:56:
                    c7:ae:89:fc:5e:4f:d0:6b:ed:73:69:18:19:1c:fa:
                    c8:ae:4a:08:04:6e:05:5e:34:41:68:24:8b:fb:98:
                    8c:96:4d:8e:5f:7a:93:38:4b:dc:d2:f8:3c:10:44:
                    5d:6f:6e:39:97:11:fb:52:0d:4c:e4:dd:fb:1d:13:
                    81:e9:2f:ee:da:3a:80:90:55:f2:94:cd:cb:f0:2f:
                    32:3f:25:21:fb:df:e0:5c:23:d0:a1:1f:b2:f1:8a:
                    b8:66:eb:dd:89:34:db:8e:0b:f4:2e:24:1a:38:9b:
                    44:17:20:ea:b0:7a:a1:e3:25:ce:68:64:69:84:db:
                    fd:cb:02:d4:fc:0e:1b:a0:4e:ca:6d:e7:a1:ea:31:
                    20:1d:ae:86:1c:ac:35:f8:0e:db:07:bb:7f:e4:f9:
                    21:9d:26:3f:ec:de:0d:c6:aa:f2:5d:be:d8:98:06:
                    4e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:46:AA:CA:70:1E:18:03:55:1C:14:3F:AD:96:B3:17:3A:05:A5:52
            X509v3 Authority Key Identifier:
                keyid:77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:8d:fd:8e:26:7d:c6:e0:e6:23:d8:fd:df:38:2b:21:ac:3e:
         49:9f:0f:99:5a:40:41:ca:42:a2:2f:ef:a0:1e:a1:05:b0:61:
         7f:8f:6b:a1:93:a3:bd:af:b1:3f:8f:e5:45:1c:67:67:2d:9d:
         69:cb:fd:19:42:b5:41:de:90:27:0b:af:de:9f:0b:70:5d:43:
         a4:aa:16:50:d1:57:e7:36:31:03:03:9e:39:3e:74:52:8c:bc:
         32:12:31:51:22:20:70:a1:bd:34:2c:a3:47:d8:e5:04:22:e4:
         e4:8b:cf:91:7e:fd:89:78:35:7e:1a:ea:98:59:83:60:d1:68:
         6e:d7:e5:24:01:9d:5b:6c:fa:a1:d8:c4:3a:66:e5:b6:a3:c9:
         28:e5:21:dc:9e:3d:37:c7:f7:77:c0:4b:49:d3:c9:b1:8a:6d:
         ff:9d:39:cd:23:2f:05:02:f7:7c:06:a0:0a:cc:f8:e6:b5:18:
         53:a4:9e:38:7b:3b:fd:d7:07:9e:68:51:f9:f0:64:20:50:a3:
         1d:be:bc:0f:0c:b6:4d:ac:71:5d:22:8d:e6:1c:84:ff:cc:4a:
         2d:b9:cc:23:39:67:8f:5c:f5:8e:b5:0c:db:60:2c:3d:e3:12:
         60:2c:ba:2c:77:fd:25:5f:39:e2:42:4a:d2:e1:f4:ed:2d:23:
         8c:7c:8b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:11:26 2026 by rpki-client