Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
File:                     k1AwYeGuUD7GPZcLMIdd2T_6u98.mft (raw, json)
Hash identifier:          WPHeWLJw5unbyD6IGHaEWg1e6VBQqv8wvX+WeYYsuIs=
Subject key identifier:   C2:62:FD:10:8B:BE:3A:54:28:D8:52:8B:96:C7:50:91:15:4B:9D:02
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Certificate issuer:       /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial:       01A0FF109AAB87A5D25739C12905A74A487D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
Manifest number:          17B1
Signing time:             Sat 03 Oct 2026 00:01:13 +0000
Manifest this update:     Sat 03 Oct 2026 00:01:13 +0000
Manifest next update:     Sun 04 Oct 2026 00:01:13 +0000
Files and hashes:         1: KwoH9rX0fG1WK7HpMnqPB23ssB4.roa (hash: sjYd4LRAPn0dfzC2/zot0w98zlOUul3pMhPUiDIGgp8=)
                          2: QE7PLDiHb0x2muKYuWtBYtxL0Ts.roa (hash: YpAKtMU8tI8U8IsGd+RqIJCWCNQwjIwLB/IARRYcudc=)
                          3: k1AwYeGuUD7GPZcLMIdd2T_6u98.crl (hash: 62ufRryZRnpgxE74hn2BqP+cU5bFG5MSmaYsbXwL6nI=)
                          4: oi0HFw6JtNN08QaNsA8THU8Vbms.roa (hash: zHlUEhPLG1p2ScID/nk2LlCxjRARDuLVIC4jlOT5y58=)
                          5: sFgFPnQJtYAI4EUbnjw6_T-C6b8.roa (hash: ruPE7+aitW/C9n9h5OlbX5hnSAYFeh1OYL3ysBGOgGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 00:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ff:10:9a:ab:87:a5:d2:57:39:c1:29:05:a7:4a:48:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
        Validity
            Not Before: Oct  3 00:01:13 2026 GMT
            Not After : Oct  4 00:01:13 2026 GMT
        Subject: CN=c262fd108bbe3a5428d8528b96c75091154b9d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:20:8c:06:2e:85:76:71:a4:d0:b3:10:65:
                    ec:48:35:40:1e:b5:6c:2d:41:31:8c:79:ed:ce:32:
                    f1:6d:ac:34:12:d7:16:93:8d:24:b5:11:df:4f:ad:
                    c2:7a:f3:5b:19:46:57:c5:a0:62:52:53:f5:a4:5a:
                    eb:95:e6:95:75:54:f8:0e:e6:a7:87:24:3b:4c:4a:
                    a8:4e:55:35:1a:b3:7e:e4:1d:d1:51:2c:11:fd:85:
                    7c:42:40:0d:b3:a7:cc:d2:6b:68:f4:10:2b:56:33:
                    a1:c1:32:39:85:69:12:0b:7f:93:8a:5b:cf:cc:d9:
                    a7:22:cc:bc:2d:a1:0a:53:44:3e:88:78:15:c7:e0:
                    c6:02:a6:94:01:b0:ee:c6:4d:06:b1:ba:4d:56:22:
                    f9:0d:b4:5e:ae:43:8e:20:4e:f1:be:22:7a:13:dc:
                    01:3b:fb:4a:4f:96:cb:b2:69:b5:0a:76:97:6b:f3:
                    a4:57:01:cc:4b:fc:c1:71:0d:32:e8:23:08:4f:b9:
                    bc:76:9f:fc:a7:c9:ec:5d:f3:79:b9:4b:a3:06:53:
                    f5:8a:50:b1:d9:29:d1:be:42:11:73:a1:8a:a6:bd:
                    fd:42:88:c5:2e:76:af:18:78:c4:30:9f:35:24:0c:
                    df:87:3d:20:ab:fc:ad:4e:f6:2c:15:77:96:d5:66:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:62:FD:10:8B:BE:3A:54:28:D8:52:8B:96:C7:50:91:15:4B:9D:02
            X509v3 Authority Key Identifier:
                keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0f:73:ea:81:41:da:9c:92:1c:f7:b9:b4:88:71:5a:59:a9:
         fc:bf:1c:c8:78:ab:57:d4:0d:98:f6:38:a4:21:24:24:bd:df:
         10:9e:f8:63:f8:1d:4d:b7:05:89:f3:fc:53:67:d7:be:41:f2:
         a7:cf:33:21:b1:02:c1:54:42:11:e7:3f:c5:2d:2a:21:8b:e4:
         95:01:f6:72:31:f6:d3:24:03:7f:e5:77:7d:cd:94:e5:65:f1:
         6e:bf:a3:86:e4:65:02:56:f1:df:dd:d6:b6:a7:e5:bd:cc:d5:
         43:1f:8a:da:ff:d3:76:11:5b:75:7b:43:60:59:b9:5a:64:a0:
         0f:8f:d5:b7:59:ba:4e:c4:68:b0:59:80:82:c4:de:a7:7f:c7:
         17:c4:41:75:43:b9:6d:9b:0e:25:11:47:01:66:7a:92:92:06:
         f3:cb:e5:6c:f8:21:89:b7:57:49:95:60:f8:9b:97:c8:9d:c9:
         25:9a:22:1e:90:26:1e:86:71:88:da:11:2e:e0:09:ec:18:db:
         8c:2d:93:8d:35:4f:fc:28:df:37:f7:52:ca:9d:97:5a:e3:2a:
         c0:3d:5b:18:f8:0b:e1:1c:4d:3e:02:ea:bf:3f:7e:2f:b9:09:
         cf:a3:e9:5c:62:81:59:9f:2d:34:bf:b0:05:22:bf:db:86:45:
         8c:3f:6f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:07:44 2026 by rpki-client