Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
File:                     dkkoqXvpVTdwE9OCxilA6VDdISs.mft (raw, json)
Hash identifier:          Sz2avBqcD74a0XJq9xIsl/qD7KbARJVNUDHae5Xfr6E=
Subject key identifier:   A3:CC:9E:59:3D:4A:6D:01:24:E3:30:1B:19:43:AB:72:9B:9D:F7:0A
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Certificate issuer:       /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial:       01A107A5BB796DFF21362CFEB6A2A7A256CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
Manifest number:          1564
Signing time:             Sun 04 Oct 2026 16:01:04 +0000
Manifest this update:     Sun 04 Oct 2026 16:01:04 +0000
Manifest next update:     Mon 05 Oct 2026 16:01:04 +0000
Files and hashes:         1: B7aCk0b-K5XgdvEjGdk5wXSAkDc.roa (hash: nyiUF3Zt9sMp6+mzeEZ8PMtjO/iACI+KfmNy9BotXDk=)
                          2: D9aUpKX2PTU1wmWHLRRqPaZtLBI.roa (hash: dH6am4VhkjdQhWRQqbXQ4D/HbErjXar5HVgXeANi9W0=)
                          3: Lp0vHH3sV5CmRox_CW0AyUEO49A.roa (hash: HnRMr5r2HkpjEYviPbeXFZfwzUunRvvI+wgZvCnFlCc=)
                          4: c6nKpma73pYWxvMGKppaadDfEFw.roa (hash: vhO0PPLdQXMMpfgBSaG37tdr8r6MbA4mP7J/LJzhZao=)
                          5: dkkoqXvpVTdwE9OCxilA6VDdISs.crl (hash: lwJlBGbQRJWGveTMtRoIYjnfcvdcMc/EJScsEHUaSWI=)
                          6: jGSNHMpFNbQkO_PxgFvC_4Gf8QE.roa (hash: K41n6g6IzXx6vx3vFplymreUJX4uIZoX2K6TNqcNUyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:a5:bb:79:6d:ff:21:36:2c:fe:b6:a2:a7:a2:56:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764928a97be955377013d382c62940e950dd212b
        Validity
            Not Before: Oct  4 16:01:04 2026 GMT
            Not After : Oct  5 16:01:04 2026 GMT
        Subject: CN=a3cc9e593d4a6d0124e3301b1943ab729b9df70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:80:8a:59:56:9f:fb:84:22:39:6a:1c:54:
                    a3:ea:ea:13:16:a9:46:cf:3c:ed:f5:12:a6:89:5b:
                    d3:a3:91:99:f8:fe:91:1d:e6:2c:df:48:2f:78:a0:
                    c3:6b:b8:d1:70:68:fa:6f:74:9c:5f:f8:31:52:4b:
                    cf:22:ef:e2:2f:68:5e:81:ba:57:17:d7:f1:b2:1e:
                    5b:8a:c3:d9:80:38:62:d2:b1:be:0c:ea:a3:33:b6:
                    af:15:72:0b:d5:15:0d:2f:5f:dd:f4:cf:3c:9d:ad:
                    79:30:7f:d8:74:49:16:24:86:ca:bd:8f:00:b2:1f:
                    8c:07:b5:80:53:40:37:ba:35:51:4c:41:60:0e:eb:
                    87:c9:4d:61:24:8e:36:95:d3:47:01:69:b3:c7:34:
                    68:de:80:bf:e5:f2:0c:f0:10:40:4a:c5:98:d9:88:
                    e0:b7:b8:17:69:db:9b:00:cc:47:15:f0:93:a4:22:
                    6a:93:2c:87:bb:d5:72:53:9f:41:1f:e9:e1:56:27:
                    55:96:1f:fe:a4:db:4a:fc:94:6d:3c:01:b4:9a:d4:
                    d0:e7:b7:3c:63:ad:02:53:99:b9:75:65:80:07:ad:
                    1e:84:fb:ef:d0:a9:81:f9:14:13:69:a0:c2:bf:99:
                    ca:d3:de:2b:2c:15:64:93:1d:d6:84:73:e4:cb:11:
                    a1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CC:9E:59:3D:4A:6D:01:24:E3:30:1B:19:43:AB:72:9B:9D:F7:0A
            X509v3 Authority Key Identifier:
                keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e2:03:e3:08:61:da:18:48:28:8e:d0:14:54:fc:22:95:4b:
         7e:b2:52:ed:8e:6b:77:5e:fd:50:00:e1:4e:ee:81:9f:24:56:
         4c:df:ae:32:04:16:31:d2:5c:5f:60:a2:e4:dc:c1:9b:f3:7a:
         66:95:eb:9d:a3:c4:d8:55:0d:02:f4:d7:2d:ea:a3:2e:f1:4c:
         ac:ac:00:73:a9:a3:7c:db:6e:67:03:95:64:56:96:7f:6b:62:
         9b:e2:47:16:bd:97:01:4f:c7:dc:5c:c6:f0:59:ff:1f:c1:0c:
         e3:be:a3:50:15:e5:12:45:79:ad:e1:ff:6e:d4:a2:b1:11:31:
         3a:e6:15:a9:0b:8d:8b:1d:42:1d:9b:cd:91:88:96:23:e2:d8:
         b7:cd:f2:4a:5d:e1:b6:03:44:4a:c4:1a:e3:e1:a1:81:14:a4:
         5b:de:89:3d:f7:b8:24:a4:22:6b:e9:39:4b:b2:8e:b7:47:74:
         11:51:8f:3e:0e:af:25:4a:1f:c1:17:3c:80:60:20:3f:0a:8b:
         d4:01:78:a1:7d:92:34:73:b3:78:ec:83:1f:fb:3f:b6:81:f4:
         01:3b:28:a6:dd:67:c0:28:f8:d9:ef:30:32:28:6e:ca:95:64:
         a9:89:b5:13:c2:4a:86:40:c7:5d:9f:1b:19:2d:97:66:c3:9f:
         71:8f:6a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:40:32 2026 by rpki-client