Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File:                     L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier:          khycBJw3RT864XutGRkneEt7adXTlpDQL7UBWjVZkJc=
Subject key identifier:   D8:26:D7:7E:F2:67:FA:A3:AD:B4:1B:E1:36:CB:33:59:F3:98:44:B6
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer:       /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial:       01A106261DA199302A5F4B144AED55A834F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number:          1294
Signing time:             Sun 04 Oct 2026 09:02:03 +0000
Manifest this update:     Sun 04 Oct 2026 09:02:03 +0000
Manifest next update:     Mon 05 Oct 2026 09:02:03 +0000
Files and hashes:         1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: 9Uh8jWcVBKOLsEti9txgq3NTFJhrOmYxK3PfzThdJTQ=)
                          2: VWTOJ2jbvR1Qd3_jcYIVkSaTtaM.roa (hash: 4yjY0Y/5nyei1ONwFqlQ/gYOuf/J9WjX6PHuI2NreOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 09:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:26:1d:a1:99:30:2a:5f:4b:14:4a:ed:55:a8:34:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
        Validity
            Not Before: Oct  4 09:02:03 2026 GMT
            Not After : Oct  5 09:02:03 2026 GMT
        Subject: CN=d826d77ef267faa3adb41be136cb3359f39844b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:10:e8:2e:97:36:5b:5f:d5:3d:e0:b2:75:18:
                    ed:75:e6:ce:a1:94:f3:e2:20:ea:a8:48:ab:99:b6:
                    cb:57:36:8d:d6:cd:a2:b9:db:89:3b:8d:36:af:47:
                    8d:d3:7a:e6:a7:24:c0:dd:e8:3d:2f:09:10:98:87:
                    f6:ca:04:1a:26:1f:1a:95:95:15:fd:e7:6e:fe:52:
                    05:9e:91:9c:87:72:6a:25:eb:1a:62:85:53:9f:24:
                    22:9a:1d:6f:ae:ab:a5:86:a1:09:fa:e7:40:05:bb:
                    97:49:0e:9b:4f:c6:b8:cb:82:81:7a:a5:72:e9:0b:
                    03:20:8b:68:39:f0:62:89:04:00:aa:7a:06:2c:8d:
                    8d:71:6b:05:06:82:0c:a8:b7:e4:cd:1b:5a:6e:0f:
                    fd:5e:72:fa:ee:62:c2:6d:6f:78:3e:e9:2e:36:d2:
                    22:e2:5f:c8:fa:ad:0a:51:3f:ff:93:64:5d:e1:54:
                    5f:87:f2:34:f2:ee:ce:07:56:6a:4b:6e:cc:8c:49:
                    f0:b1:15:95:ea:ef:f0:6e:79:ae:a2:15:99:c9:40:
                    17:96:75:ad:d9:36:c1:12:0f:31:30:72:2d:2b:66:
                    1e:35:73:10:4c:15:47:89:b6:51:3e:ad:02:89:1a:
                    07:54:8a:20:25:5c:12:7e:b6:14:5f:36:de:f8:5e:
                    24:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:26:D7:7E:F2:67:FA:A3:AD:B4:1B:E1:36:CB:33:59:F3:98:44:B6
            X509v3 Authority Key Identifier:
                keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:6a:69:18:ac:67:84:5d:67:1d:00:e4:45:c9:57:e4:78:d0:
         9e:6d:97:2d:7e:8a:43:c2:f8:a6:29:35:21:e4:b3:fd:a1:c2:
         85:71:02:b7:c3:a7:21:a1:e3:fc:2c:11:74:6b:2a:58:d2:91:
         fa:92:64:8c:81:6a:d5:20:53:6b:d5:73:67:a4:30:93:cf:94:
         d9:7e:eb:07:f9:a0:83:10:c5:5a:49:81:44:a0:8e:a4:0d:19:
         bb:11:25:fa:a8:9d:97:54:f7:1f:fa:6b:de:df:0f:33:52:30:
         bd:c9:ec:fc:12:58:85:90:9a:d0:b1:0d:a3:97:1f:48:9f:11:
         0b:0e:f3:41:a8:73:08:33:e5:a0:ed:37:5a:68:54:7c:44:01:
         73:7d:6b:25:88:b9:14:7e:da:d5:3e:dd:e8:4c:4b:d9:83:05:
         e4:50:04:50:fe:78:b3:57:bf:32:8b:96:60:35:66:55:b6:7d:
         a3:15:ac:14:36:d6:95:fb:d3:c5:76:4d:11:34:3c:f8:f6:b8:
         25:47:69:b5:4f:28:56:e1:a7:1c:e9:84:3f:c9:9e:95:3f:48:
         06:6c:55:e5:10:dc:3c:c7:df:ce:fc:cc:0f:5d:0c:dc:03:bf:
         07:9f:76:92:7e:de:7a:ca:39:7c:60:2f:92:38:36:9e:53:aa:
         89:89:6c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:01:37 2026 by rpki-client