Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
File:                     pdSlpdFMijuMuU0ctGwNbiocSEc.mft (raw, json)
Hash identifier:          t9dlXrVAmOPaBLzoByyGEDrYKT+S1BkEfWTMwCKovEU=
Subject key identifier:   AF:11:5C:6C:4C:C6:BF:2E:CF:E0:FB:3C:D7:E5:6D:DC:A9:F5:C5:5F
Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
Certificate issuer:       /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Certificate serial:       01A0EF66CB5CF050866782B7192702EE5010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
Manifest number:          1A83
Signing time:             Tue 29 Sep 2026 23:01:26 +0000
Manifest this update:     Tue 29 Sep 2026 23:01:26 +0000
Manifest next update:     Wed 30 Sep 2026 23:01:26 +0000
Files and hashes:         1: 9R0cNh7tpRGDeQddrrwgSyExnk4.roa (hash: PqbwlQKDPSasGMUXgw1wOQWlaHSoiKJ6p6YuOnnchI8=)
                          2: Q9Nt9gX8DHi90LT4tMlOZ0m6IJo.roa (hash: UYO/NtK9AfbvXNvm3O/IQCzfg04aFD89bh7YW2P92Vk=)
                          3: pdSlpdFMijuMuU0ctGwNbiocSEc.crl (hash: NWCgtxaR44NQs8oTpGEpiwzeW4K+j8rRGzTELF2RI+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 20:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ef:66:cb:5c:f0:50:86:67:82:b7:19:27:02:ee:50:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
        Validity
            Not Before: Sep 29 23:01:26 2026 GMT
            Not After : Sep 30 23:01:26 2026 GMT
        Subject: CN=af115c6c4cc6bf2ecfe0fb3cd7e56ddca9f5c55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0b:37:38:41:e5:da:f2:65:d9:a1:26:b2:12:
                    da:d1:ac:b0:fa:fb:ac:4e:61:da:b6:8c:77:d1:d4:
                    dc:7e:45:cb:f8:02:39:57:20:89:9f:a0:46:1b:db:
                    57:9e:1d:11:72:e5:4f:d5:eb:6e:91:4f:91:08:39:
                    d1:bc:a3:69:05:21:f9:b7:b6:34:48:a4:7f:ec:29:
                    91:fe:92:20:e6:35:33:b3:9e:e3:66:05:74:18:a4:
                    48:9e:2f:fd:6a:6a:85:58:c2:ff:5a:d4:bc:cc:30:
                    70:27:5d:97:20:74:1d:24:98:00:d8:4f:3c:db:cd:
                    d1:fd:34:ec:61:9d:63:1c:27:24:3f:84:0a:a6:14:
                    bc:23:ef:cb:b5:3c:e0:3d:f9:03:18:a5:8d:6d:43:
                    7f:4d:db:a3:26:47:a4:96:61:f4:61:ef:5c:3c:f4:
                    66:e5:31:f0:bf:a1:7c:dd:2c:a9:20:40:ae:8d:de:
                    a6:c1:ba:03:8a:a8:45:48:ba:3f:c8:8f:31:a2:e9:
                    6b:28:3e:eb:75:75:bb:29:9e:dc:47:17:08:24:00:
                    ff:01:16:62:f9:b9:05:bb:7f:a6:da:11:3a:3e:f3:
                    d0:45:c5:c3:f1:64:9e:4d:0c:29:e8:2d:f5:8f:c6:
                    66:15:0d:65:b0:11:d4:27:8c:b4:3b:d2:fa:0f:f4:
                    7d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:11:5C:6C:4C:C6:BF:2E:CF:E0:FB:3C:D7:E5:6D:DC:A9:F5:C5:5F
            X509v3 Authority Key Identifier:
                keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:63:7d:1c:42:df:b6:52:b5:04:0c:bb:a1:9f:e9:ad:8e:90:
         01:97:f6:bc:d1:7b:b4:da:87:16:e2:b8:64:a7:4b:c1:28:09:
         37:43:ab:45:aa:44:f2:a2:d4:4b:66:4d:bc:c1:e4:a2:4c:e6:
         d4:3b:7b:1e:e9:73:2e:09:af:ac:35:71:da:a0:94:d2:b1:ec:
         4f:eb:ac:bd:c2:b5:8d:9c:a6:52:47:bf:4b:52:1d:75:8b:55:
         cc:d5:f6:a2:86:80:98:83:e3:aa:f3:42:44:d7:1b:83:c2:66:
         b5:ee:70:39:eb:94:ee:8b:76:02:a2:2c:40:f9:93:ac:5c:9a:
         13:ae:d7:ff:fd:82:4c:dc:5e:95:91:50:2a:a9:cc:26:60:e4:
         63:79:79:89:22:f2:c7:31:c9:cf:a1:53:91:7b:43:a8:4c:c8:
         9c:52:8f:2d:73:fc:ae:9c:5b:3c:e8:82:29:b9:a3:73:c0:6a:
         be:bc:27:96:1f:3c:08:e3:9b:ee:e6:b3:60:0c:e4:8e:0e:a2:
         65:09:ac:50:cd:db:37:0f:93:7f:64:51:46:1e:83:c2:c6:74:
         cf:15:17:af:e3:a7:4c:d0:88:65:3b:34:2a:3d:dc:1f:21:ad:
         29:c2:ff:31:a2:64:4c:49:53:c5:c2:a7:73:54:41:39:92:9b:
         09:c5:51:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 07:30:08 2026 by rpki-client