Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
File:                     ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft (raw, json)
Hash identifier:          4n/DpVieN5ErRLezXd30GqsXQO57LpUpadW2JBPsN3Q=
Subject key identifier:   3B:34:A6:1D:F3:09:71:07:A2:44:9D:72:8F:6E:15:81:79:B7:11:53
Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
Certificate issuer:       /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Certificate serial:       01A12A31CD7FA47D3008742129C014F4EF05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
Manifest number:          1A9C
Signing time:             Sun 11 Oct 2026 09:01:09 +0000
Manifest this update:     Sun 11 Oct 2026 09:01:09 +0000
Manifest next update:     Mon 12 Oct 2026 09:01:09 +0000
Files and hashes:         1: Nd1TnNt00oK2xr_oilTTzqexc7Q.roa (hash: +kz057WFCQ3qfR3EIzjNvOnka8S56ej02u7lcwgzBvw=)
                          2: c-WMvw8Hz1uOUsuliQon0TlsTqo.roa (hash: VW+Dwh3fsEdxsXfuUs2W4EklP+G82KCr77puJxgKF3Q=)
                          3: fV79Senro57id6bOwy-8bI2dt7Y.roa (hash: MG+KbDbsLbpSzwp3gHCs1H8iXzaKkDKDQI00IvNa3Wg=)
                          4: ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl (hash: Le4c70wrj0pABb/VsqHRU2TeO0ammVEA9guasbQmP6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 09:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:31:cd:7f:a4:7d:30:08:74:21:29:c0:14:f4:ef:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
        Validity
            Not Before: Oct 11 09:01:09 2026 GMT
            Not After : Oct 12 09:01:09 2026 GMT
        Subject: CN=3b34a61df3097107a2449d728f6e158179b71153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b1:c5:13:f0:6e:98:08:13:c6:64:08:0f:e7:
                    1d:6d:98:2c:72:47:7a:7f:d3:71:a7:09:f3:fc:82:
                    c1:d1:db:78:ca:68:1f:35:1f:c9:9d:20:0d:70:29:
                    dc:de:4c:d2:80:81:a5:0f:48:01:f4:f4:d3:40:65:
                    04:0f:f9:65:e8:68:51:51:21:33:6f:d8:52:42:f9:
                    49:8a:f0:76:47:d4:56:2c:d6:f5:a4:43:0e:80:7f:
                    8d:f3:59:32:0d:77:ba:64:89:63:50:ff:63:2f:bc:
                    db:c2:df:0f:31:8f:64:03:f7:cf:1e:5a:37:3a:5e:
                    27:b8:07:ee:c8:40:36:a3:b7:90:89:77:4d:bd:0f:
                    68:9f:22:b6:a3:1e:dd:c7:38:dc:39:05:bc:74:85:
                    2e:14:bb:fe:76:f5:07:31:3e:de:f9:66:d9:9b:0f:
                    e4:a3:bb:49:3a:99:0e:f5:df:7a:0e:46:d1:9a:61:
                    60:38:31:29:a3:83:43:4e:08:40:38:71:77:4f:6d:
                    56:7a:e8:9f:b0:18:b8:e6:91:51:eb:78:f5:59:a6:
                    0e:09:2a:75:ef:28:2c:a3:e3:90:76:38:84:3a:29:
                    2e:3c:67:98:92:19:0a:18:72:ce:fd:22:3e:93:a8:
                    35:03:ce:13:db:0a:99:16:3d:c0:31:e4:e7:58:c7:
                    d8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:34:A6:1D:F3:09:71:07:A2:44:9D:72:8F:6E:15:81:79:B7:11:53
            X509v3 Authority Key Identifier:
                keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d1:ae:3c:9a:c8:d1:05:3b:28:db:c6:17:c8:d1:da:60:d8:
         5a:ff:f7:db:31:17:4f:e5:96:94:ab:03:68:b7:ff:17:7d:dd:
         ac:46:1f:37:ce:e9:f3:31:fc:80:81:b1:54:87:bd:46:7d:19:
         e4:66:a5:a3:a2:e1:04:d5:cc:2e:ca:6a:e3:84:40:78:30:54:
         9e:cb:66:df:eb:70:b0:c2:52:19:83:1a:27:72:54:0e:3c:7e:
         02:89:2c:29:a7:a7:7e:ee:de:85:bb:e3:41:20:06:17:15:98:
         ad:cb:0e:29:7a:e7:4d:1f:93:8c:8d:75:67:36:7e:e1:f6:0d:
         ab:2b:f8:19:42:8c:be:ff:24:77:45:fa:bf:5e:f5:ec:10:2f:
         b4:fd:68:51:98:35:a3:41:bd:70:9a:39:c9:9f:db:2c:a2:70:
         09:c9:ce:68:d8:ae:73:0b:f2:e3:25:89:3a:0e:92:de:94:ab:
         fd:8c:e1:fd:48:3a:7a:60:43:53:eb:4a:1c:5d:77:ea:6b:26:
         4d:17:df:87:c8:de:5a:0a:47:dc:10:07:97:d4:c3:7e:74:6b:
         59:f0:6b:d1:8b:18:63:33:7c:f7:bd:bf:61:8a:de:4a:3e:9c:
         b7:a7:8e:65:f9:b6:02:fd:22:9d:ec:e6:83:ee:25:a1:50:79:
         fd:64:56:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:59:39 2026 by rpki-client