Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
File:                     rWUjcvDl0WnCAPfR0IDoVw_-23E.mft (raw, json)
Hash identifier:          3Of+78wuYq+/Nq0wbwmY/Mi3f3bqrUF3Y5YbCC9IudY=
Subject key identifier:   98:34:B6:B5:80:83:53:16:2C:C3:52:15:A4:1B:2D:BA:08:17:19:25
Authority key identifier: AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
Certificate issuer:       /CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Certificate serial:       01A10813807B185C527C8A8DDECC2E38585E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
Manifest number:          07F4
Signing time:             Sun 04 Oct 2026 18:00:58 +0000
Manifest this update:     Sun 04 Oct 2026 18:00:58 +0000
Manifest next update:     Mon 05 Oct 2026 18:00:58 +0000
Files and hashes:         1: TVDGXyDJKjGf9M2l61hPydz0GW8.roa (hash: GPBRCtJGeJYsInHOu3V8vVubHvszvLhmWvGPlsGdKsk=)
                          2: rWUjcvDl0WnCAPfR0IDoVw_-23E.crl (hash: cUCoHxOo/1hDYnP2pocuWFwuBLtVYVbTTJhvWUVF6sI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 18:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:13:80:7b:18:5c:52:7c:8a:8d:de:cc:2e:38:58:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
        Validity
            Not Before: Oct  4 18:00:58 2026 GMT
            Not After : Oct  5 18:00:58 2026 GMT
        Subject: CN=9834b6b5808353162cc35215a41b2dba08171925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:37:cc:fc:7a:69:71:8a:b3:a7:b1:35:7c:
                    ce:a0:e6:b6:f6:75:b5:78:07:56:27:7c:5f:ba:9b:
                    a3:b5:42:56:94:b6:74:e7:95:05:f4:11:d9:6d:4a:
                    74:5a:53:a2:54:60:69:26:09:ef:24:1f:d7:43:36:
                    47:fa:5c:5a:03:9c:e2:24:c5:1a:2d:70:32:f2:9c:
                    dc:e6:1f:22:74:e4:03:b6:29:1c:bf:c0:e5:1f:e3:
                    72:65:69:ed:22:d3:50:14:e2:c2:54:33:04:3a:3b:
                    97:c0:6e:63:3a:26:fb:97:fc:62:f8:a2:92:c0:88:
                    c4:13:0c:8f:5b:cb:33:da:9e:b0:b2:aa:09:b0:73:
                    55:79:90:99:f3:1b:94:1b:de:d9:eb:45:d0:a5:03:
                    07:e7:b0:64:26:83:96:2e:ac:67:39:2a:9f:05:98:
                    7d:56:41:86:6c:bf:35:fd:e1:1f:c0:47:a4:51:38:
                    9f:e0:bc:a4:e9:ee:1a:20:b2:31:a7:98:9b:4c:78:
                    71:cd:07:c0:a5:5b:80:32:c1:f3:f6:b3:35:02:60:
                    6c:08:0e:07:03:43:7e:22:b3:1d:55:f0:df:12:67:
                    e7:9f:8e:ce:09:67:60:5e:11:9b:d7:87:bc:17:ec:
                    94:48:51:b7:8b:5c:53:4d:46:6e:90:8f:d6:b9:34:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:34:B6:B5:80:83:53:16:2C:C3:52:15:A4:1B:2D:BA:08:17:19:25
            X509v3 Authority Key Identifier:
                keyid:AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:5a:6a:c2:a8:a4:32:4f:e1:20:73:73:51:cd:80:d6:65:65:
         6a:22:7b:bb:f4:6a:37:da:6d:29:cc:f9:22:da:1d:1b:e7:39:
         6b:d4:24:56:56:1c:9a:4a:d3:3f:d8:f3:ee:d7:76:bd:96:cd:
         75:68:99:da:43:02:14:2f:b7:36:13:0d:ca:97:13:5f:2c:de:
         29:76:3b:e0:78:ef:85:e5:b6:b8:cb:93:7a:23:ec:c1:2f:1b:
         2e:b6:34:a4:b4:2b:22:41:86:b6:10:bb:12:9b:fa:1c:cd:99:
         57:d1:a5:83:a8:c4:42:88:0c:68:55:0e:23:42:e8:f6:e7:3b:
         4d:ef:af:b7:d4:51:a7:60:2a:2e:be:7d:d3:3a:f5:64:13:04:
         32:a7:be:45:b8:f5:e6:5a:15:a5:ae:8f:6e:66:47:a2:99:2b:
         a9:b5:c1:b1:f2:00:a8:9d:8b:b3:0e:f6:5b:32:d6:11:db:45:
         6a:b2:bd:41:66:cc:d7:1e:c9:23:4d:27:90:df:3a:c8:9f:78:
         25:0d:9d:54:d9:0e:68:4e:96:21:2e:fe:90:4a:20:32:49:91:
         fd:65:c3:2d:51:aa:6a:31:a1:bd:88:0c:ca:39:00:5f:9f:af:
         02:1d:66:d3:6c:a7:7e:00:74:26:35:c5:83:9b:2f:19:fb:05:
         97:ff:21:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:28:13 2026 by rpki-client