Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft
File:                     csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft (raw, json)
Hash identifier:          YtkPuIH1ZbmpTfhZLT5kXvcZO9p+hLnffU2mbe4EMHU=
Subject key identifier:   66:9D:65:35:88:1D:40:1C:01:A7:52:9E:AB:E9:BC:03:CA:19:DD:BF
Authority key identifier: 72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
Certificate issuer:       /CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Certificate serial:       01A0F9EA221009EA565291F3F10B4154F750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft
Manifest number:          1A87
Signing time:             Fri 02 Oct 2026 00:01:06 +0000
Manifest this update:     Fri 02 Oct 2026 00:01:06 +0000
Manifest next update:     Sat 03 Oct 2026 00:01:06 +0000
Files and hashes:         1: 3nMeVP3tT3HQkOTTt8YDf9LOG-U.roa (hash: oMfy3S3J5yMFJoD9DdHs9/Ccms8GV4Kew6SHBYWA0pI=)
                          2: BgqEiCCAE1vEtOTzbV9_LIj_s3s.roa (hash: a4g/rJW7QVDmBaSO4YTu2x4EbNhaP4qFCMs3UP9frTM=)
                          3: Wf4b69W2HIyydqZuj7Hmrgl5Tok.roa (hash: nql6Y+KJSPOOX+Nx26GOdRZM62yY1NZG15EA+Lo/1qg=)
                          4: _FB3a1IMmiFPJpYG4zHFh_Bnma4.roa (hash: 6QQmSkfHFBHFiPCb7O/MO/s0noXwpbC2rqthJpYrs20=)
                          5: csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl (hash: XJGGoOmq5X3geDAtk6PTuJtrxV8FddVtjeCpax0rQ/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 16:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f9:ea:22:10:09:ea:56:52:91:f3:f1:0b:41:54:f7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
        Validity
            Not Before: Oct  2 00:01:06 2026 GMT
            Not After : Oct  3 00:01:06 2026 GMT
        Subject: CN=669d6535881d401c01a7529eabe9bc03ca19ddbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0f:ad:71:e2:e6:1a:85:ae:1b:6d:a0:73:92:
                    81:a6:28:27:34:91:75:e5:5d:9c:41:79:d4:e2:04:
                    92:60:45:c7:50:93:94:2d:e9:3f:33:07:8d:80:58:
                    8d:84:c0:f9:2f:5e:d9:ae:76:ee:ac:36:36:9f:d7:
                    e3:58:c2:45:af:e5:3f:39:bc:a2:f7:d0:d7:ed:d9:
                    9a:96:05:f3:b1:11:9c:7a:94:6a:a9:19:bb:3a:1c:
                    be:e8:98:34:08:c9:21:20:b8:a4:26:6d:0a:88:75:
                    0a:f3:3b:da:20:5b:f2:03:64:b6:3c:58:86:04:2a:
                    b5:a9:65:20:22:20:73:3d:50:2c:1e:c6:6a:04:06:
                    77:9c:3a:12:47:b6:7e:41:52:d1:ee:9c:35:f4:cf:
                    f2:57:87:15:58:33:e0:5c:33:54:24:0a:10:a5:23:
                    30:90:d1:12:97:18:9b:0c:ef:f7:02:3b:6f:22:6f:
                    8a:f2:38:9d:65:ac:45:b9:86:bb:2b:79:66:c7:8f:
                    d9:f2:43:96:8f:ff:e0:48:04:17:b7:4b:83:a7:00:
                    c1:7d:16:e5:20:b8:1e:f4:7a:4d:fe:45:d5:05:22:
                    9b:31:21:36:27:40:fb:55:81:ac:37:bc:b2:bf:42:
                    c3:5f:98:5f:8a:d2:10:9e:76:93:b7:15:26:2e:ac:
                    dc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9D:65:35:88:1D:40:1C:01:A7:52:9E:AB:E9:BC:03:CA:19:DD:BF
            X509v3 Authority Key Identifier:
                keyid:72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:d1:e6:cd:bb:39:10:60:30:92:ca:cf:ef:98:a0:9e:10:27:
         0e:c7:77:c7:a3:35:81:77:93:1f:af:2b:0a:dd:06:e1:8a:6b:
         96:ff:b6:29:02:91:e5:fb:01:2b:cd:e6:cd:1c:87:3f:37:11:
         6c:7f:5d:44:14:43:e9:d5:3c:97:17:76:dc:9c:30:bc:d9:07:
         36:f5:ab:e1:45:85:06:71:93:e9:73:4d:af:75:b8:88:d4:cb:
         0e:f3:c7:0c:b2:46:05:ce:c2:b0:bf:e7:19:d0:e5:b2:6d:ff:
         f1:e9:c9:f2:34:37:22:fe:76:10:b9:97:41:a2:9b:86:e7:17:
         55:30:69:a1:52:1e:1c:56:f8:e2:9c:22:38:ef:55:b9:1a:a4:
         cb:f9:b6:1b:ad:4c:0b:80:bc:7f:88:f0:3e:a7:2e:5a:43:74:
         bb:ba:6e:a9:a6:95:67:0e:54:2c:cb:24:9a:50:11:24:15:d3:
         43:c9:bb:1b:c9:d2:57:53:e5:07:57:84:b9:b5:52:f0:93:73:
         cd:76:c0:e7:24:03:43:ef:af:d5:90:2c:c4:f5:a0:71:25:c0:
         fb:f6:91:7b:82:d7:7a:5a:de:6a:3f:a9:6a:54:aa:a2:17:1c:
         e2:ba:a0:db:b3:e4:0b:66:48:24:c2:7f:05:60:89:3b:3a:60:
         ce:c8:99:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 10:09:28 2026 by rpki-client