Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File:                     dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier:          cX/yQep7byUtgPKsK+oF5GKggx6z76cnFcsohY4ct7k=
Subject key identifier:   57:1A:A2:1F:A4:75:42:89:EE:AA:12:6A:51:BC:65:B1:72:73:59:85
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer:       /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial:       01A11B99C74D831FD97D34C6FE4E9984702E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number:          1854
Signing time:             Thu 08 Oct 2026 13:00:25 +0000
Manifest this update:     Thu 08 Oct 2026 13:00:25 +0000
Manifest next update:     Fri 09 Oct 2026 13:00:25 +0000
Files and hashes:         1: _rWJNNnmk3R1x9pU0oYdGau3c7M.roa (hash: IHOPlEpatbDJApch2mWBilUmuofV8Wjb6ufkWpEothw=)
                          2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: hZWDsDUDu4h73rWYBdXnXtmgbkswXPeDMNII4V8GedE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:99:c7:4d:83:1f:d9:7d:34:c6:fe:4e:99:84:70:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
        Validity
            Not Before: Oct  8 13:00:25 2026 GMT
            Not After : Oct  9 13:00:25 2026 GMT
        Subject: CN=571aa21fa4754289eeaa126a51bc65b172735985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f8:16:03:86:1b:f5:8b:06:fa:18:a5:5f:a7:
                    f9:7d:89:fc:64:24:0a:04:7f:ff:0d:81:11:ff:22:
                    93:1b:2f:b9:33:89:ff:f2:40:3d:c6:27:c9:a2:92:
                    21:e2:e4:30:63:15:9c:f3:9c:d4:be:1e:bb:f1:62:
                    33:78:d4:90:48:33:f2:a5:8b:39:e1:3c:e8:95:5b:
                    48:d5:26:21:b0:db:f3:50:2b:7e:ea:bd:c7:e8:95:
                    4d:12:83:40:15:5c:9a:91:1f:21:94:00:9a:65:0e:
                    6e:6f:95:70:9a:c0:6b:b7:d0:98:7c:23:8a:0b:b0:
                    2a:33:e1:22:3f:4d:e4:55:34:25:97:f7:ae:52:5c:
                    f9:72:0c:50:4e:65:4b:ba:48:0f:31:27:8d:21:0d:
                    c0:db:6b:de:cd:71:74:61:63:58:7e:a5:c4:25:5b:
                    30:f0:b8:e8:c4:be:aa:d5:4f:3d:96:a5:a6:0c:4b:
                    f3:e1:dd:de:aa:fa:2d:1f:67:0c:c2:30:dd:30:83:
                    ea:54:be:a5:00:6a:af:9e:bf:3b:c6:68:76:79:ce:
                    ca:2d:50:c1:e0:12:14:90:bc:58:1d:d9:12:ab:d7:
                    ab:fb:14:c0:45:91:71:cc:e0:07:28:80:28:79:98:
                    b8:50:45:5d:11:e3:82:38:15:2e:9a:bf:ed:ab:0e:
                    20:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1A:A2:1F:A4:75:42:89:EE:AA:12:6A:51:BC:65:B1:72:73:59:85
            X509v3 Authority Key Identifier:
                keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e6:59:ab:22:c3:02:61:56:bd:81:00:f1:f5:5d:1c:b0:55:
         a9:fc:e6:9c:b7:7b:4e:e6:52:4d:48:71:0c:58:34:63:2f:f8:
         2a:26:be:09:7b:fd:55:10:3c:4f:6a:40:db:1a:e5:32:3e:61:
         1b:a4:67:c2:d5:dd:07:06:57:1a:d8:f9:64:54:db:63:63:96:
         73:17:31:3e:90:1a:cd:a9:23:5a:d1:9d:dd:ed:b2:9b:45:00:
         c8:27:b1:89:64:b1:8c:95:8c:07:65:ec:06:b4:22:1c:67:58:
         6a:60:5d:be:6f:20:a5:5a:1c:f4:1c:f1:49:ac:08:a1:0d:d1:
         e4:0b:ca:b3:dd:0a:f9:2d:e9:54:4c:f7:0d:2b:12:94:7e:a9:
         34:4b:f9:1e:43:61:35:67:a6:38:59:36:06:ed:a0:e1:37:e9:
         ef:27:2f:a8:25:b8:72:63:a8:7a:1d:73:bf:17:dd:c2:6d:0f:
         82:83:dd:6a:28:6d:01:65:70:c3:d1:3f:aa:01:15:02:17:43:
         25:2a:44:c4:54:da:bd:ae:79:96:b0:e5:2a:1c:68:cd:9f:e7:
         2b:6e:c4:6c:00:d1:3b:b7:21:b7:2e:17:6a:3b:5e:0f:c3:59:
         7d:3c:3b:b2:dc:40:6a:6a:bd:5e:dc:75:40:1c:9f:ad:cc:dc:
         b9:12:1c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:57:32 2026 by rpki-client