Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
File:                     tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft (raw, json)
Hash identifier:          QHbzOx0Y+lQZ/S35ICUjtvLz2RRddOvy1qtgaXXSc8g=
Subject key identifier:   3A:EE:88:0A:DD:D8:90:FE:E6:32:82:65:C3:9E:F0:74:AB:7A:44:F6
Authority key identifier: B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
Certificate issuer:       /CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Certificate serial:       01A103C90F6EE1DAA5A6C7DD2C7162ACD53A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
Manifest number:          162F
Signing time:             Sat 03 Oct 2026 22:01:10 +0000
Manifest this update:     Sat 03 Oct 2026 22:01:10 +0000
Manifest next update:     Sun 04 Oct 2026 22:01:10 +0000
Files and hashes:         1: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl (hash: IwdqdbnZ+uMIrzQX51f0HrUg3MKEVsogO+jLMaiGW8s=)
                          2: xqMEiaPGgAlIQo3TzS_5VB2M2OQ.roa (hash: Y2eUYtTDjf9bWENJZhOD8HXOBzywjtXZMecCETD0P0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:c9:0f:6e:e1:da:a5:a6:c7:dd:2c:71:62:ac:d5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
        Validity
            Not Before: Oct  3 22:01:10 2026 GMT
            Not After : Oct  4 22:01:10 2026 GMT
        Subject: CN=3aee880addd890fee6328265c39ef074ab7a44f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:93:05:36:88:ad:91:1e:a2:55:55:f7:9e:
                    af:ab:ae:8b:ed:33:fb:81:c6:8e:db:99:73:64:e6:
                    5b:74:e9:58:69:65:6d:aa:08:81:8d:5c:65:c3:ae:
                    54:f0:88:9b:12:be:81:da:9c:1a:db:86:07:88:ae:
                    c2:ff:a1:1c:35:76:64:56:c5:c0:7e:fb:fe:23:21:
                    c1:19:b7:9f:82:48:49:d4:ed:9e:ea:2c:08:5c:50:
                    ae:32:81:6e:86:78:20:0f:e3:b5:78:52:bb:3d:90:
                    cd:5f:36:87:21:5d:0d:28:10:9a:8d:0e:bc:81:26:
                    ae:57:f5:c6:56:48:b3:76:43:68:e3:91:89:c3:5f:
                    5d:5a:df:30:e0:2f:34:0b:67:a8:a4:fe:2c:ea:02:
                    19:5c:92:6f:7c:5c:8d:0f:1a:b5:07:a6:25:42:2d:
                    cb:db:96:4c:32:d4:3d:ae:ac:84:1a:02:2b:be:f3:
                    fc:4b:d9:34:58:d2:75:7d:6f:86:71:aa:e2:16:28:
                    21:cd:7e:b6:5e:13:9f:f1:4f:f1:41:ea:89:29:7a:
                    32:5f:5c:67:63:60:f8:35:5a:7c:14:d3:49:5e:6e:
                    78:61:30:9e:93:68:86:4c:68:05:32:3d:52:ff:ea:
                    66:57:2f:db:7f:32:3f:c5:65:8d:48:7e:94:db:8d:
                    43:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EE:88:0A:DD:D8:90:FE:E6:32:82:65:C3:9E:F0:74:AB:7A:44:F6
            X509v3 Authority Key Identifier:
                keyid:B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f8:d8:b8:f0:2b:2e:3b:d5:e3:2d:ec:48:b1:00:3b:c1:4a:
         35:43:5f:e5:ab:19:a7:fc:4a:b1:a7:1a:88:7e:76:ba:78:90:
         23:e2:9f:ee:fb:fb:72:61:15:22:d0:d7:f0:27:0a:04:b3:29:
         53:a2:5d:90:9b:39:d7:b4:b7:e8:3d:49:3b:d1:f3:83:97:42:
         ec:04:2b:5a:63:89:b4:ea:9a:9b:9d:67:d6:d4:82:78:ed:f5:
         46:10:52:22:43:c1:6f:0b:27:3e:b9:34:ce:dc:f0:0b:1d:5e:
         64:b7:c1:02:52:f3:4d:59:ef:27:82:fc:ad:3d:95:bb:3b:f9:
         ad:c2:bf:8e:02:2a:4c:78:0c:44:a9:8b:62:b3:10:bc:e2:2e:
         32:62:c2:8f:dd:e0:95:cb:0d:70:7f:ef:95:7b:a1:48:86:ed:
         97:d0:01:1a:d6:d2:7f:d1:ea:ca:fa:ad:42:9a:65:f1:5f:69:
         4b:c6:bf:3f:64:2f:35:09:d1:cd:df:02:ab:7e:f7:69:ad:ae:
         7c:2b:9e:13:ae:b4:3c:3c:0c:ee:ac:95:3f:60:85:6c:b8:c2:
         76:a1:42:99:d0:6f:c2:0e:2e:ba:6a:10:d9:13:1a:f7:a3:3a:
         11:e4:1b:c6:2a:3a:c9:61:2e:06:30:aa:46:82:e9:e8:e5:2d:
         b0:73:59:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:19:47 2026 by rpki-client