Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
File:                     au27xW2vhfo_OHxgUtxy1dchO_c.mft (raw, json)
Hash identifier:          TWKCiPvz55sfp1z2Kj0ckMcJNeOdU4IkJMcxJrYC+1c=
Subject key identifier:   C0:46:F5:BF:F9:8A:84:DA:CF:F6:E5:04:FA:2F:4B:68:41:FB:14:58
Authority key identifier: 6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
Certificate issuer:       /CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
Certificate serial:       01A11FAE352CDD9DF62ECCA14CD9F0955AAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
Manifest number:          050F
Signing time:             Fri 09 Oct 2026 08:01:12 +0000
Manifest this update:     Fri 09 Oct 2026 08:01:12 +0000
Manifest next update:     Sat 10 Oct 2026 08:01:12 +0000
Files and hashes:         1: Vd4ynB66sCEtEXPuV_O3x4PgW4A.roa (hash: 4UTBj4Zh6vSwwX6L/YeCbJsNnwD0s0UfjFqN/ZdD3NU=)
                          2: au27xW2vhfo_OHxgUtxy1dchO_c.crl (hash: sqw5e7PoN5kCMKn4c3iHkijbjNcQ3xzKPiS++TU9CYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1f:ae:35:2c:dd:9d:f6:2e:cc:a1:4c:d9:f0:95:5a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
        Validity
            Not Before: Oct  9 08:01:12 2026 GMT
            Not After : Oct 10 08:01:12 2026 GMT
        Subject: CN=c046f5bff98a84dacff6e504fa2f4b6841fb1458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:7d:37:fe:a2:5b:41:b4:0a:3a:70:3e:a6:
                    f5:a3:9a:83:54:af:9e:d0:34:93:d9:0b:a2:05:95:
                    bd:74:f3:1f:c7:4c:a5:22:45:b3:2c:2d:69:b2:02:
                    f4:2f:5e:67:7e:fe:12:e9:fe:1e:34:28:7f:cf:64:
                    67:c4:a8:77:ba:60:9f:5d:14:5f:30:7b:83:74:4f:
                    d9:ce:38:37:52:2b:c3:9c:ff:2c:50:50:d8:50:5a:
                    3d:df:67:52:dd:45:75:e0:c5:96:c9:ab:4b:aa:6a:
                    76:03:c3:0e:b4:81:4d:d8:ac:e8:da:fb:ec:82:6d:
                    d0:0f:b9:30:1c:1d:ac:4b:75:b2:2b:bc:fc:e3:4b:
                    86:fd:28:68:d6:e5:1a:60:b2:39:31:8a:17:50:b3:
                    d1:d9:1d:14:b2:e3:7a:5b:8d:6a:f6:fa:15:3a:35:
                    cd:cb:57:69:9b:16:3f:11:7a:f4:14:81:6d:c7:fc:
                    ba:a3:53:5e:dd:54:5f:a6:9b:af:45:86:96:4b:28:
                    92:46:3a:9a:ae:d5:0e:c9:4e:c2:34:7a:a8:64:f4:
                    0d:74:7a:5f:47:49:ae:1c:99:05:ce:be:73:8b:1f:
                    07:61:ec:3f:87:64:70:63:68:3e:b1:2a:67:df:ce:
                    fd:83:45:66:ba:bf:be:7a:5d:89:d1:f2:fe:46:d7:
                    74:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:46:F5:BF:F9:8A:84:DA:CF:F6:E5:04:FA:2F:4B:68:41:FB:14:58
            X509v3 Authority Key Identifier:
                keyid:6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c4:98:50:06:84:1f:ab:c8:c5:2c:09:22:d6:b9:ff:67:4b:
         fc:34:4c:cf:88:36:f7:c5:29:ac:26:a9:b8:56:f1:3b:37:15:
         49:27:19:1a:e8:ca:af:40:f6:1e:e4:9c:62:26:f5:ba:7f:c5:
         fc:14:64:26:d5:89:aa:3b:ff:18:cc:06:65:33:56:ad:0a:dd:
         92:d9:08:3c:06:ed:e7:40:f3:1d:0d:f8:f4:ea:64:55:65:85:
         5e:31:0d:5f:cb:d3:ad:50:cc:fa:0b:6b:0c:de:25:0f:4f:e4:
         b5:0a:30:a0:30:bd:50:ae:2c:5a:06:f0:a4:d1:2d:db:9e:fc:
         15:b3:ec:4b:d0:6e:bc:35:37:d0:2c:76:d1:6d:74:48:49:f1:
         8e:9d:f6:b3:eb:41:6a:fb:c1:14:5a:31:07:bf:ee:2c:26:a7:
         b4:4f:4c:52:5c:8e:22:df:3e:5b:b6:0a:2b:ae:b7:ee:d5:d3:
         70:93:10:31:11:81:13:79:43:4b:14:69:d8:03:d2:31:95:72:
         18:33:cd:7a:c1:b9:9d:72:6c:40:0c:eb:6c:e6:5b:f4:f8:aa:
         6f:0d:5f:6e:f7:bc:22:0d:fe:f6:fc:04:b3:f1:0b:53:a0:8c:
         9b:fa:fb:fa:4d:0b:fe:15:ac:41:be:e4:72:f5:0b:a4:92:ea:
         48:9d:93:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:57:39 2026 by rpki-client