Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
File:                     odAxU3OwmwYapZ8SnVkuq_ezqu8.mft (raw, json)
Hash identifier:          jivtIMP3OGuKbyUrZAm60/29Bqiapne6UH0Fe50Z8Ws=
Subject key identifier:   27:74:7F:67:40:12:C3:3F:7A:24:4D:C6:B0:36:E8:03:5C:60:DB:8F
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Certificate issuer:       /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial:       01A10DDEACEBD83BF685CC3FB93297C611CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
Manifest number:          1A9C
Signing time:             Mon 05 Oct 2026 21:00:59 +0000
Manifest this update:     Mon 05 Oct 2026 21:00:59 +0000
Manifest next update:     Tue 06 Oct 2026 21:00:59 +0000
Files and hashes:         1: 2RbqMRULp-QNoJeRuz3DuXb82SY.roa (hash: vkQ1ietSun4egH0TCTbvv8l/0HXrnZiF/HLYLQxFwJA=)
                          2: IQ2oYAGI7FrbtQw-njklceThbc4.roa (hash: 1eifSLs21UBJXwatNLGZliT9NqFPGyep7LbzCHQLsqw=)
                          3: SVczDT9Xfgd978coimjrauYBi54.roa (hash: 2NMvhKAO0Kl3ePDaF0jcCfpcJYKyAuppoiBwwyO6Eiw=)
                          4: odAxU3OwmwYapZ8SnVkuq_ezqu8.crl (hash: bxncYgIoWz60BxpVvA4WazZihzJkjWryyG6O1mfY3SI=)
                          5: shiZOYC90xd1VuoCTl7MNpPZEuA.roa (hash: imVXTSeIhO/2/5DnYBR7yK1z3YTxchN3faFGSGjnVFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 21:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0d:de:ac:eb:d8:3b:f6:85:cc:3f:b9:32:97:c6:11:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
        Validity
            Not Before: Oct  5 21:00:59 2026 GMT
            Not After : Oct  6 21:00:59 2026 GMT
        Subject: CN=27747f674012c33f7a244dc6b036e8035c60db8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:59:24:c4:63:58:5b:28:6c:31:4c:08:fb:
                    14:5c:48:bc:e6:65:71:10:1b:64:67:37:be:63:84:
                    92:13:73:2c:79:f8:60:bf:75:1c:a2:37:8f:4b:09:
                    83:98:17:a0:04:fb:ab:f1:ba:9d:c1:3d:39:13:71:
                    95:49:d9:ec:9e:f7:eb:ec:ee:ef:41:eb:bc:ab:79:
                    59:6d:4b:f0:c2:f2:b3:93:28:04:51:9f:ea:84:59:
                    2c:86:2f:54:84:4d:42:11:86:de:65:54:be:2a:ff:
                    8b:15:19:df:84:39:c3:28:5d:f3:b9:a4:52:43:e0:
                    7e:f9:6a:b1:4e:17:cf:e7:1f:59:9d:e0:11:07:45:
                    17:c7:be:ae:9d:f7:62:a1:39:c7:38:92:33:9e:34:
                    30:7d:ad:7a:10:38:a3:b3:b0:f9:e9:ec:0f:13:6e:
                    2a:22:20:ce:a9:dd:40:a2:28:83:17:0d:22:95:ba:
                    e6:cd:1d:48:2a:21:a6:74:1f:87:da:54:ef:35:37:
                    f0:6d:e1:bf:cc:b8:fc:8a:bd:fb:2c:3a:76:82:8e:
                    ed:0e:8d:52:3f:3c:3e:48:17:94:37:3e:fb:d4:4e:
                    12:9b:9a:93:8f:a6:97:f8:b6:0d:89:69:55:7f:bc:
                    a5:75:87:81:9b:79:74:26:a5:2b:5d:c3:36:d5:a2:
                    67:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:74:7F:67:40:12:C3:3F:7A:24:4D:C6:B0:36:E8:03:5C:60:DB:8F
            X509v3 Authority Key Identifier:
                keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:19:09:6c:0c:4c:03:24:89:55:32:f7:0d:fc:f6:55:3b:1b:
         b0:27:93:7e:1c:f7:24:42:c8:96:a2:83:aa:7a:4f:89:20:20:
         fc:a0:da:78:8a:b1:57:f2:62:82:71:77:02:eb:90:c1:b1:11:
         ee:a3:37:04:1a:95:78:93:29:ac:b3:a3:b4:b5:59:c8:97:22:
         82:d7:de:75:a6:0d:99:67:a3:78:3d:1d:38:b4:e6:07:61:7b:
         f3:a3:2f:41:ab:45:d7:0a:7b:2f:72:f9:d6:41:10:29:33:2a:
         99:0d:2d:8d:1d:ca:bd:65:83:00:e5:fc:7a:0e:da:44:c6:f2:
         f0:37:53:40:dc:54:77:9c:46:6e:4d:af:30:c3:5a:c1:2f:68:
         a2:a7:2c:4c:b8:bb:d8:ad:1c:1e:23:71:2b:5c:49:f1:52:0c:
         10:82:d2:0f:e4:ce:7f:1e:29:cf:51:d0:4a:2c:22:25:68:bc:
         c8:b7:65:02:86:88:01:43:23:aa:0f:37:50:00:2e:4c:4b:48:
         5d:bd:ff:72:8a:d1:0f:11:d7:ee:d8:a9:8d:c2:be:68:90:e9:
         43:47:3f:67:8a:7c:cd:de:1e:65:f7:ba:45:f1:b5:6c:19:11:
         4f:d9:d1:2d:2c:67:3b:9e:ef:59:16:9b:a5:5b:84:ed:c2:c0:
         19:d7:b3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 06:54:13 2026 by rpki-client