Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
File:                     r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json)
Hash identifier:          ZLhwTO1h1E0QsFPoe48NbfKUw0vqy7BBW5QlMxdd8Rk=
Subject key identifier:   FE:7D:BA:84:F6:AE:EB:44:75:4F:A5:D9:1B:ED:F2:30:73:14:E4:85
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Certificate issuer:       /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial:       01A10FCCC121B1ABF9F92F7DC5D3C539B04B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
Manifest number:          1053
Signing time:             Tue 06 Oct 2026 06:00:39 +0000
Manifest this update:     Tue 06 Oct 2026 06:00:39 +0000
Manifest next update:     Wed 07 Oct 2026 06:00:39 +0000
Files and hashes:         1: NYQTyqXhO5SfIKalilF-9jPbRJo.roa (hash: 5lrctU6hrWDAzuX+vKa0ZLHPNzNKbXOgcE47QemStpE=)
                          2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: d6tdtzvwoqMDbQvICtjuLp6FBuqm9P475i6UfO5lXvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:cc:c1:21:b1:ab:f9:f9:2f:7d:c5:d3:c5:39:b0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
        Validity
            Not Before: Oct  6 06:00:39 2026 GMT
            Not After : Oct  7 06:00:39 2026 GMT
        Subject: CN=fe7dba84f6aeeb44754fa5d91bedf2307314e485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:c2:95:92:f0:ac:60:05:fb:f5:57:b8:f4:
                    7f:9e:80:09:58:a1:58:dd:d2:aa:0b:4f:a4:3b:c6:
                    a7:b2:1c:84:d9:3c:ef:fd:75:ba:de:66:23:ee:43:
                    2b:6d:43:44:5c:fb:35:54:57:fc:db:c8:66:a5:7b:
                    0a:31:7a:07:79:33:14:14:79:e8:31:dc:4d:80:92:
                    d2:88:da:0d:25:7f:29:bf:aa:65:57:12:4d:73:49:
                    04:67:81:1b:6d:28:75:05:ef:2a:e7:64:b9:cd:b6:
                    88:74:d9:da:9b:b4:4e:0a:95:63:f4:48:ec:0f:6b:
                    83:15:fc:4e:4a:0a:b1:d6:b9:a6:73:cc:74:ef:1e:
                    b5:75:c7:d1:f7:24:9d:2f:99:61:53:b6:0f:c2:11:
                    98:60:6c:5a:f4:6b:f3:f9:4b:3b:02:b6:a7:de:e4:
                    04:bb:87:63:45:12:26:af:61:66:cd:2c:f5:95:5e:
                    38:00:7f:fa:1f:97:4a:20:f2:24:26:d8:68:a3:0e:
                    43:2a:0e:5e:d3:7d:2f:a1:61:2a:8f:e4:a6:57:d4:
                    83:a2:49:9b:7d:4e:34:c8:d4:f9:9a:33:48:3e:fd:
                    cb:b5:f0:58:ca:4a:cf:9c:4c:c8:32:8f:0e:da:6b:
                    cc:38:d8:ce:e9:e4:f8:2e:ea:d9:dc:4a:b0:05:cd:
                    83:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7D:BA:84:F6:AE:EB:44:75:4F:A5:D9:1B:ED:F2:30:73:14:E4:85
            X509v3 Authority Key Identifier:
                keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:5f:06:49:ae:f7:e9:50:ad:76:58:79:13:fc:bd:dc:90:3d:
         fa:a3:64:48:3a:de:28:0e:3f:a6:46:c1:1a:47:1a:23:5c:0f:
         71:d4:a6:b7:88:f9:66:32:2b:79:62:bd:c1:ba:91:da:08:a0:
         5b:71:8a:67:fb:74:0d:11:96:0f:a6:c9:a2:b8:c2:85:01:d1:
         76:f8:be:b6:b0:c8:1b:4c:a7:26:f0:6e:f2:7c:b9:55:b6:b0:
         aa:4b:9c:9f:16:8f:78:ec:e3:a0:36:2a:e7:03:a5:80:e9:bb:
         70:94:c8:95:d0:f6:87:4e:93:f3:f6:5a:a1:98:c6:12:70:cf:
         7e:6b:32:e7:c9:31:52:2c:0a:35:e8:95:57:e0:bc:1f:f1:30:
         d0:60:68:3c:e1:ce:f6:66:4f:2c:b0:ac:84:d4:4b:e8:1c:e6:
         be:49:08:8b:18:8b:a6:cb:77:79:0a:94:31:a4:88:19:dc:f3:
         2a:0c:e6:36:b5:b7:b5:3c:72:fc:4c:f4:86:60:30:f3:93:26:
         60:4c:15:54:2b:27:a5:0d:fa:b5:76:ca:68:22:5e:4f:d3:17:
         e4:6b:eb:03:7d:3e:de:f0:2b:f2:b2:da:3a:23:16:7d:83:6e:
         e5:f0:96:ee:ae:af:3e:6d:c1:0d:5b:3f:2c:72:30:6a:e2:cd:
         7d:b7:ba:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:34:44 2026 by rpki-client