Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
File:                     bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft (raw, json)
Hash identifier:          CfRd4DlxogvkgzfZoKpo9VC+pHgDVmJKW3tdX3wLvUU=
Subject key identifier:   60:D2:CC:BB:56:EC:45:FE:8B:3E:F6:A9:2C:3D:A1:EB:79:8B:21:90
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Certificate issuer:       /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial:       01A12B0DB2567B8F06C9F909798D43F58720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
Manifest number:          1AD3
Signing time:             Sun 11 Oct 2026 13:01:20 +0000
Manifest this update:     Sun 11 Oct 2026 13:01:20 +0000
Manifest next update:     Mon 12 Oct 2026 13:01:20 +0000
Files and hashes:         1: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl (hash: 9+wx54HpIhhQTyZu1rlidxcIIafmj1u2Hlp/nNyJbOQ=)
                          2: twp4Qc_IfaZm5YE2R9dG6fqSpJ4.roa (hash: KryWaKXhp+XF5Bj82qDMC0PiQYEMyEcKF+PGbAmtZ7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:0d:b2:56:7b:8f:06:c9:f9:09:79:8d:43:f5:87:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
        Validity
            Not Before: Oct 11 13:01:20 2026 GMT
            Not After : Oct 12 13:01:20 2026 GMT
        Subject: CN=60d2ccbb56ec45fe8b3ef6a92c3da1eb798b2190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d6:7c:f9:1f:d9:98:d0:58:87:ce:42:62:4e:
                    29:fd:cc:63:a2:63:f8:20:f6:53:47:e2:7e:5c:ed:
                    46:1f:69:e9:26:80:85:a8:26:77:96:55:1d:f1:34:
                    be:87:75:e0:a4:61:f8:18:32:c7:bc:cd:6a:1f:b5:
                    fa:7e:dd:34:94:31:89:b4:a5:f1:41:2c:62:78:8a:
                    68:a6:2c:e3:c6:aa:5a:13:96:20:6b:c3:fb:a0:8d:
                    38:e8:23:7e:4e:08:3d:3c:5f:7f:49:5e:e4:cc:91:
                    c6:2c:23:05:85:02:02:2c:80:0c:10:f6:04:23:99:
                    d2:92:0e:2c:ac:59:d5:ba:b3:7c:3e:05:4e:3c:6d:
                    6c:7c:5e:4b:f0:1b:2b:d6:ea:78:fd:5b:ce:9e:95:
                    f4:e5:a3:e5:c4:be:57:33:48:b5:07:ca:5d:5b:fc:
                    be:4d:9a:4d:4c:25:00:60:af:38:31:c0:24:3f:13:
                    ae:78:3e:42:8d:11:a0:f5:20:9a:04:1d:93:0a:e1:
                    ea:8e:ed:ed:e7:88:6c:6f:9d:66:25:51:5a:7c:df:
                    07:34:69:cf:87:34:ec:2f:0d:47:a3:59:fe:80:64:
                    8c:94:7f:19:fb:84:9c:12:fb:50:a3:72:2c:2d:fd:
                    ed:68:58:23:0d:a9:5a:7f:26:33:3d:bf:9f:b1:f3:
                    dc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D2:CC:BB:56:EC:45:FE:8B:3E:F6:A9:2C:3D:A1:EB:79:8B:21:90
            X509v3 Authority Key Identifier:
                keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:57:fe:9b:ed:83:07:8a:36:20:c8:ab:65:35:31:88:39:31:
         bb:cd:bd:bf:56:80:33:8b:69:90:8b:de:11:bf:ee:03:f8:f3:
         2d:be:e8:01:d4:a5:93:5c:b8:3a:5a:6f:75:e2:1d:b4:89:c0:
         05:76:4b:98:32:c7:a4:8c:7d:36:87:e7:38:88:17:93:ca:f1:
         75:be:ab:8f:78:f5:e0:f7:a9:aa:2e:e3:4d:48:ee:77:d0:dd:
         b6:7c:82:7a:38:f4:f7:91:ff:37:58:fd:9b:a0:f7:18:ca:c3:
         7e:73:82:24:a0:80:c1:18:a8:72:56:9e:41:1b:e9:e4:3a:3a:
         88:87:b3:83:65:08:9a:b7:45:cc:c4:13:ae:54:a0:af:e2:d9:
         9c:70:01:ca:dc:4c:0a:95:f8:79:13:ae:c5:b3:38:54:6b:b1:
         5f:55:d3:53:fb:cc:b5:53:07:02:7b:32:bc:3c:2b:03:5f:ae:
         72:a5:92:f8:d8:a4:6d:23:26:ff:1c:9a:ac:26:96:36:68:1e:
         57:26:cc:9c:ac:ba:d4:43:06:15:56:88:ec:c7:11:57:1d:7c:
         af:97:5e:fe:22:37:28:00:c5:d9:c6:cb:54:3f:ab:1f:15:5b:
         4d:69:ff:01:58:23:94:39:bd:5c:f2:57:0a:d8:6c:ad:9a:b3:
         7e:80:38:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:53:05 2026 by rpki-client