Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
File:                     ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft (raw, json)
Hash identifier:          hORjoF5j0X4uXSYAjLWH0K2UbANPMNjFJuD5jxITMuM=
Subject key identifier:   69:A8:4A:E7:71:17:8F:2B:EA:10:92:83:EC:2C:CC:61:5A:56:59:FB
Authority key identifier: 8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB
Certificate issuer:       /CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
Certificate serial:       01A14195DADB41FDC8BC5000D61CCCDE0A5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
Manifest number:          1AA6
Signing time:             Thu 15 Oct 2026 22:01:42 +0000
Manifest this update:     Thu 15 Oct 2026 22:01:42 +0000
Manifest next update:     Fri 16 Oct 2026 22:01:42 +0000
Files and hashes:         1: Isf0X2VA5k71HKCeTyJN9hXCDdw.roa (hash: moujoYkwbdpd8nceyk8u6dwvR2yVCkwxf/DT9Cg/itk=)
                          2: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl (hash: zUxYauKeLSP2zXLt4qSGXGDA+rruQEQwoaNXAq6FA/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 22:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:41:95:da:db:41:fd:c8:bc:50:00:d6:1c:cc:de:0a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
        Validity
            Not Before: Oct 15 22:01:42 2026 GMT
            Not After : Oct 16 22:01:42 2026 GMT
        Subject: CN=69a84ae771178f2bea109283ec2ccc615a5659fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:97:8e:a5:2e:e6:5b:31:96:fa:c8:35:a6:
                    7a:4c:19:93:19:a8:8f:be:48:42:37:4a:da:66:3b:
                    d2:89:eb:81:bd:66:43:10:c7:44:36:02:d5:98:b8:
                    d6:a6:df:e4:8b:26:11:02:1e:55:12:b7:69:12:da:
                    11:af:9e:ab:af:c8:8b:25:ec:b0:9c:a1:79:f3:82:
                    0f:a5:6e:2e:e9:cd:79:25:ee:19:3f:2d:d8:88:96:
                    98:86:bc:ad:d8:e0:00:c7:85:ec:46:22:59:aa:a9:
                    f8:36:71:6a:f0:9b:c5:2c:3b:fc:3d:62:03:46:39:
                    1e:e6:77:79:99:fd:32:42:f3:3e:58:8e:0f:bb:99:
                    6f:7a:f2:21:31:4d:63:2c:28:8c:7a:1d:80:bf:ec:
                    dc:1b:3d:03:d0:69:7a:7c:a8:58:b7:0f:83:95:04:
                    ad:3e:4f:38:76:d1:db:f7:e7:0c:57:4b:16:6a:97:
                    e6:53:65:a0:87:24:fc:42:c5:49:ee:2d:16:f8:dd:
                    d2:db:fe:6f:b4:fa:9c:76:b0:ad:de:a8:a4:a9:66:
                    d5:9d:8c:81:58:bc:4e:64:52:2c:a8:53:67:ae:1a:
                    ed:e4:fa:8d:8d:52:25:89:87:70:b8:bc:d4:7f:ab:
                    83:e6:96:ab:55:3b:f7:c5:f9:3f:be:72:46:2d:30:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A8:4A:E7:71:17:8F:2B:EA:10:92:83:EC:2C:CC:61:5A:56:59:FB
            X509v3 Authority Key Identifier:
                keyid:8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ab:78:c7:63:dc:80:9a:21:17:ea:65:d1:2c:19:df:63:e3:
         cd:6b:b5:4d:3a:39:c2:01:44:21:5a:d6:54:1b:e3:fd:8d:d6:
         9b:16:e3:c0:3e:1d:3f:9b:49:81:0a:db:c8:20:17:b9:4a:45:
         5f:6d:48:d4:64:8e:0a:a3:89:d6:0d:5a:9a:1e:95:8c:1e:8b:
         3d:ce:91:a5:bd:57:70:d6:01:d6:c5:6b:c4:c0:33:4d:73:41:
         b1:b1:72:58:8e:f9:03:39:bc:d7:30:b6:3b:e8:ca:4d:a4:5f:
         ea:39:91:46:17:54:e9:2e:7d:1a:a1:7f:88:ee:5d:12:d4:92:
         03:72:77:54:10:3f:f1:67:90:67:35:e7:04:b2:49:f6:7f:85:
         88:ad:52:bf:2b:0c:3c:13:d0:28:eb:62:38:eb:a3:7a:ae:fa:
         2b:1f:31:7a:3c:c7:2d:92:c5:b2:b4:a0:57:44:62:dd:0b:79:
         1a:bb:9a:89:a6:04:2b:5c:10:46:08:05:62:7d:28:31:95:75:
         16:1b:58:a6:53:c2:42:fa:8e:f9:03:d4:53:09:7e:85:7f:5a:
         29:4a:88:2c:55:52:63:29:c5:20:10:87:c8:b1:f2:d8:83:b4:
         41:c1:ac:e1:f2:fa:c2:c8:b8:17:05:0d:1a:78:18:a0:9a:c1:
         c3:0f:6a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 06:53:09 2026 by rpki-client