Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
File:                     v1axbhD6Re7KFoexaJ_CHxgR53U.mft (raw, json)
Hash identifier:          Qh9Sbl8XFVmkaZ5XVsrgJM+fZweVWp5yZFFbexVev/I=
Subject key identifier:   82:E2:76:57:FC:A5:FF:F1:12:47:D5:5C:D7:B1:E4:64:21:84:1C:48
Authority key identifier: BF:56:B1:6E:10:FA:45:EE:CA:16:87:B1:68:9F:C2:1F:18:11:E7:75
Certificate issuer:       /CN=bf56b16e10fa45eeca1687b1689fc21f1811e775
Certificate serial:       01A0EF2FB39FF009AA439AC13BC9562F1A09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
Manifest number:          02AC
Signing time:             Tue 29 Sep 2026 22:01:15 +0000
Manifest this update:     Tue 29 Sep 2026 22:01:15 +0000
Manifest next update:     Wed 30 Sep 2026 22:01:15 +0000
Files and hashes:         1: pdd46O_7-gqSCVYzyxen2RSC1dU.roa (hash: GncF/pont0DY3uOfDhLzl1X5Kar3INu8dZi3iu5gRVM=)
                          2: v1axbhD6Re7KFoexaJ_CHxgR53U.crl (hash: edHz9YMJjI8IogxUGt36jm39pF4svcIHtQd+2r6abzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 20:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ef:2f:b3:9f:f0:09:aa:43:9a:c1:3b:c9:56:2f:1a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf56b16e10fa45eeca1687b1689fc21f1811e775
        Validity
            Not Before: Sep 29 22:01:15 2026 GMT
            Not After : Sep 30 22:01:15 2026 GMT
        Subject: CN=82e27657fca5fff11247d55cd7b1e46421841c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:76:da:b7:b7:3d:ce:0d:45:8d:b5:cc:15:b4:
                    15:2c:70:2f:d4:2c:bc:07:38:e8:78:75:0b:7e:58:
                    4a:b3:2e:f4:8b:c1:d6:b8:5c:4b:8a:30:86:8a:d2:
                    56:8d:b2:3d:8e:9f:b9:ca:e8:25:c2:1e:8b:0a:7c:
                    23:cd:50:59:60:72:71:82:5a:01:0f:df:5f:04:f7:
                    eb:4e:89:18:d4:03:f4:cd:8b:b9:b9:7a:b8:06:d4:
                    ba:9b:5f:4f:64:7d:2c:19:da:cb:3f:c5:14:10:a5:
                    1e:58:dd:5a:8f:7c:d4:92:24:87:bd:36:5a:c7:d1:
                    a0:ed:4c:27:f4:26:d9:c8:08:e1:56:c1:99:cb:e9:
                    da:94:ec:0b:8e:44:48:39:c6:01:da:d8:26:5d:90:
                    6e:f1:a0:3d:21:a9:57:ad:5b:01:0c:d4:40:5b:21:
                    60:c1:ce:8f:3d:25:77:2a:35:21:5a:d6:ee:8a:4d:
                    15:ad:b9:41:9a:5e:e5:b1:bf:78:a5:0b:b6:0c:18:
                    db:55:22:4a:d2:7d:67:80:6d:5d:40:d9:4e:39:7f:
                    21:a8:94:f0:3d:8d:a3:d3:d2:c4:dd:ec:06:21:82:
                    42:fd:09:26:ee:b1:47:ef:38:4c:69:7c:eb:db:1e:
                    3f:91:53:5a:ac:5b:e1:7d:ae:6a:eb:16:6b:9d:21:
                    83:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E2:76:57:FC:A5:FF:F1:12:47:D5:5C:D7:B1:E4:64:21:84:1C:48
            X509v3 Authority Key Identifier:
                keyid:BF:56:B1:6E:10:FA:45:EE:CA:16:87:B1:68:9F:C2:1F:18:11:E7:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:1c:31:fa:38:ba:3d:8d:65:30:e9:d6:ab:ac:bf:87:e6:7d:
         1e:10:54:c4:4f:c9:9f:d0:1b:5d:81:6e:e0:d7:5d:cb:25:78:
         0e:73:2f:29:87:0d:ad:c3:1a:fa:6b:c4:43:e0:2b:99:fb:b2:
         e7:24:4c:82:dc:19:db:5b:a9:a0:80:9a:74:b4:6e:b3:56:d9:
         12:3f:f0:2f:98:c1:a3:19:1b:3a:cd:1c:ea:7d:6d:cf:51:a0:
         6d:0a:fd:00:12:3b:12:f7:66:63:26:f0:03:ec:7f:21:ab:c7:
         1f:f4:2b:43:de:bd:23:ed:ea:90:5b:2e:53:74:cf:ca:ae:00:
         e2:4d:ba:1e:a3:96:5b:0f:33:1e:98:e9:21:03:db:99:cd:83:
         be:ef:b7:f7:de:1c:24:fe:62:8d:9d:9a:2d:34:6d:0f:cf:6e:
         32:24:5b:9c:e5:0a:f3:36:80:06:fa:d5:a1:61:85:ce:2f:53:
         63:35:cc:05:7a:b8:9d:79:6f:96:37:b9:75:d4:eb:2c:fb:1d:
         05:51:ea:0d:d4:13:98:6a:09:9a:13:68:75:51:46:e9:cc:59:
         5f:28:f7:07:30:a7:06:5a:32:af:c8:7f:2d:49:48:1d:fe:f1:
         24:22:80:a7:70:06:a7:e1:63:a5:95:13:a4:cb:28:5f:c1:31:
         ac:a4:24:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 07:43:22 2026 by rpki-client