Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
File:                     V7dxGL1WsrO0SZxWanxkiq16bp8.mft (raw, json)
Hash identifier:          RnQ+wONkxGvstiB+t+j8Aku0oayH2mzF1Z9WY18aA68=
Subject key identifier:   A3:A3:0A:8D:80:EA:51:33:06:E4:DF:E8:4D:04:99:66:ED:B9:03:AA
Authority key identifier: 57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F
Certificate issuer:       /CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
Certificate serial:       01A0EB8A4FF7270EA1056FCC67C0121B61CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
Manifest number:          19AB
Signing time:             Tue 29 Sep 2026 05:01:45 +0000
Manifest this update:     Tue 29 Sep 2026 05:01:45 +0000
Manifest next update:     Wed 30 Sep 2026 05:01:45 +0000
Files and hashes:         1: MLkUvkA6uDTMU8BTbvTCb2LlDLQ.roa (hash: VagX+oyv5O56sokc/qHDCjREdjly46AXJeRdXSrzpR0=)
                          2: V7dxGL1WsrO0SZxWanxkiq16bp8.crl (hash: MTbus1s35RfHEICznvwj3V7SR7+04bwpR+SRyCKITCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 05:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:8a:4f:f7:27:0e:a1:05:6f:cc:67:c0:12:1b:61:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
        Validity
            Not Before: Sep 29 05:01:45 2026 GMT
            Not After : Sep 30 05:01:45 2026 GMT
        Subject: CN=a3a30a8d80ea513306e4dfe84d049966edb903aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:59:31:67:ac:fe:5a:39:b9:7c:a7:9c:1a:
                    3c:71:66:c1:84:f4:e3:89:32:99:6f:8d:82:ff:79:
                    e9:b6:16:c0:e6:6d:62:8f:08:73:3d:81:e5:b6:b8:
                    01:3e:72:4c:73:bd:e6:7a:5b:4d:6d:ed:a7:62:e1:
                    4c:71:64:6e:19:55:f1:a7:49:6a:94:d0:48:5a:92:
                    f2:49:ae:75:b0:d6:84:a1:81:f9:a9:29:61:0c:8e:
                    c4:f8:78:d0:05:dd:e6:75:58:4c:3e:e0:c1:aa:69:
                    2c:01:50:db:35:e7:9b:17:f3:61:cf:5c:f1:c7:4a:
                    04:c1:40:b9:2e:f8:b4:29:ad:ec:69:78:83:24:c5:
                    a5:eb:49:f0:94:59:32:8c:1f:cc:35:aa:6a:00:30:
                    82:d8:48:bf:5f:e1:18:09:91:2f:de:9d:6b:cc:29:
                    aa:b8:62:1a:45:e7:09:d3:f2:df:4b:0a:17:c4:cc:
                    80:5c:b6:08:dc:7c:39:20:42:2c:3f:49:38:19:7c:
                    2f:ad:26:f1:79:e8:c3:a0:44:c3:30:97:29:22:56:
                    c4:fd:aa:6b:bc:d4:9a:29:1c:f1:af:3e:2c:f2:64:
                    dd:32:50:8b:f0:82:4e:4e:66:13:66:ac:3a:a4:43:
                    4a:51:40:17:05:0a:8a:21:d0:d2:7b:c4:93:f6:80:
                    e7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A3:0A:8D:80:EA:51:33:06:E4:DF:E8:4D:04:99:66:ED:B9:03:AA
            X509v3 Authority Key Identifier:
                keyid:57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3e:a3:bf:29:5f:d4:0a:0d:f9:77:db:1c:8f:49:19:f5:6f:
         48:70:26:ac:d5:1d:e9:3b:0a:d7:d3:1e:6b:2d:7b:89:40:25:
         18:51:9d:ae:ae:4e:f0:d1:2d:2c:a7:d0:05:17:f9:40:d5:a5:
         97:e3:d6:0b:a5:0a:8f:18:9b:52:0c:1f:52:87:db:92:34:f7:
         78:66:27:f6:89:9f:00:7c:80:68:c4:f5:ec:21:6d:36:8e:4b:
         8e:f9:e3:61:2a:cd:82:4e:28:06:02:7d:e9:79:55:fb:03:4e:
         6c:24:a3:24:9a:9e:ef:90:f5:4f:57:0e:25:7e:c8:03:38:db:
         31:55:a4:7a:e4:51:80:d8:74:e6:5f:97:b9:76:8d:b7:a6:b5:
         6b:8b:04:f3:ee:9d:fa:2c:96:4c:58:e1:1b:a3:30:af:a1:85:
         c4:40:c7:66:ac:2d:cb:29:56:94:04:b2:99:ae:3a:6e:df:ca:
         03:ed:d5:96:30:b9:b5:1b:47:73:55:a2:bc:0a:9e:c1:39:1e:
         71:86:05:07:8f:86:a7:8a:11:d3:37:29:52:1e:0b:6f:f7:ec:
         b2:f0:f5:98:b9:70:e5:a3:56:60:f8:5f:f3:8f:22:bd:57:5c:
         5d:a5:8b:f3:b5:7a:f8:d1:b7:76:aa:c9:21:30:05:0d:49:a4:
         ae:eb:35:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:19:59 2026 by rpki-client