Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
File:                     7jcJhfg_QTMBEcNQzWseHurVJqo.mft (raw, json)
Hash identifier:          pkP7BD1z278T0mOocITP00ZNfB0Nh7K7xnb2B3vddF0=
Subject key identifier:   C6:3A:4A:74:BD:58:76:9F:C8:72:C8:8A:C6:27:33:E1:35:50:A5:DB
Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
Certificate issuer:       /CN=ee370985f83f41330111c350cd6b1e1eead526aa
Certificate serial:       01A133A257AEF336D8F33ED422AE65CA7DA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
Manifest number:          1AAF
Signing time:             Tue 13 Oct 2026 05:00:39 +0000
Manifest this update:     Tue 13 Oct 2026 05:00:39 +0000
Manifest next update:     Wed 14 Oct 2026 05:00:39 +0000
Files and hashes:         1: 1-5LBcBk_EHi1kuCTJ2ydHgVtxw4.asa (hash: lWSAhQP7b58chK1OJI/8aOd6XzjsPK22nX9iEXKUnGA=)
                          2: 7jcJhfg_QTMBEcNQzWseHurVJqo.crl (hash: 4zYwyJz7Gdhr3dlm56ZFmNA/b0tJXiawnxWsWrZbI+o=)
                          3: MhU4CNeO4fgXq9_1vtRyy7zbhQI.roa (hash: 35d8hKQp5xyI2igMbZOkqF53rvhGzfdA1qxc+ja6Q8c=)
                          4: NE6F34chlE5AGGjbfBzSGKkprsw.asa (hash: 0Vz/xLWp4kZquxsYZecsrhHJInzdvDG4CDhO9vYduPQ=)
                          5: j2TcQ7FFpXzz-tgwxe38uLXQdgk.roa (hash: MMiIwVbQ8aiheyhBeB/trgDx55b/UG6AYdCk4oAMvxI=)
                          6: rCtt8sK2GOYKG94Svu_2uR5ddhQ.asa (hash: Q+nYBQ+gQsTBmSCinQLhjNQ/n5eKHzDbFRDbYdwd7Mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:33:a2:57:ae:f3:36:d8:f3:3e:d4:22:ae:65:ca:7d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa
        Validity
            Not Before: Oct 13 05:00:39 2026 GMT
            Not After : Oct 14 05:00:39 2026 GMT
        Subject: CN=c63a4a74bd58769fc872c88ac62733e13550a5db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:c3:9a:79:ba:8f:7b:ca:49:2d:20:7b:1b:
                    a9:72:91:78:f1:ef:01:75:2b:cb:a0:2f:d0:69:bc:
                    a5:05:f6:88:9d:eb:61:e2:db:48:b9:93:52:b4:40:
                    3c:ff:fc:8e:80:cf:ec:58:c4:fb:a7:4f:a5:91:40:
                    c9:0b:5d:9a:c1:63:1a:f7:c5:ca:0a:67:05:b5:ad:
                    32:0a:71:02:e2:76:88:f1:3b:69:ed:11:bf:1d:e2:
                    5e:e3:dd:31:1d:ee:b5:0e:80:7e:a3:85:3e:ab:3b:
                    54:3b:8b:29:8a:4e:2a:07:25:25:22:f4:b5:f6:24:
                    3b:d4:8c:5d:4c:fe:86:ca:12:96:58:71:7e:2e:5a:
                    da:8d:ed:9e:14:6d:87:a7:58:d6:94:49:82:64:61:
                    ac:9c:fc:5a:c5:32:03:1b:09:41:25:39:7a:8e:d5:
                    c7:a9:af:d7:18:74:18:98:41:14:6b:07:64:27:ed:
                    e8:1f:56:c0:ff:bc:ed:03:ed:f2:c3:b9:28:04:19:
                    5a:26:cd:ef:56:80:29:62:7a:b3:ed:ef:40:d8:30:
                    aa:28:ee:e1:7e:1b:47:1e:60:c7:d6:8f:eb:dc:d2:
                    d1:13:62:9a:6e:4a:02:d9:62:a0:e0:27:69:36:bf:
                    32:ea:8a:94:40:85:e7:e6:ee:a3:fd:c5:01:4a:83:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3A:4A:74:BD:58:76:9F:C8:72:C8:8A:C6:27:33:E1:35:50:A5:DB
            X509v3 Authority Key Identifier:
                keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:fe:24:6e:5b:4b:5e:30:29:49:f6:28:09:7a:d9:da:37:12:
         92:26:9e:37:81:a7:cc:09:f7:8a:d0:36:23:b5:79:aa:e2:bc:
         b3:2f:72:80:11:b7:40:00:99:eb:95:b0:75:4d:3d:34:1c:44:
         03:81:25:44:25:1e:75:1e:31:0b:c4:fb:40:9e:f8:9f:c0:7a:
         8e:ee:84:f5:4f:a0:84:b6:f3:69:2a:43:b6:b4:a2:d5:b2:fa:
         bb:b6:1c:60:b0:3a:fd:62:17:8d:bb:ad:c2:30:8b:41:0f:1b:
         8c:51:ab:51:df:70:5a:f7:0b:77:b7:f2:63:30:ff:f8:a5:1b:
         c4:8b:7b:9e:85:4d:c8:85:bd:5f:e9:69:bb:37:66:fe:13:99:
         6f:be:25:92:b3:5b:c5:e2:2e:08:67:07:52:8d:08:b8:90:b2:
         67:0c:12:49:9f:54:b6:2d:ac:c0:13:6f:3c:cc:ee:62:13:32:
         c8:2e:e9:97:de:df:cc:3d:63:34:9d:08:7a:38:b8:b2:7b:a6:
         80:d7:82:1e:4f:a1:7b:5e:e8:62:15:c4:d6:73:db:f6:ca:ee:
         28:f5:10:07:9e:2a:26:5f:a0:ad:11:85:9f:6b:09:1f:40:45:
         7c:3f:4f:8d:66:98:3d:bc:2a:77:cd:18:72:98:73:29:c7:58:
         02:44:24:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:05:06 2026 by rpki-client