Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
File:                     Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft (raw, json)
Hash identifier:          55yHKJrU0JkcMexcknjnL6R+sTbKcuXKBHHCaQPugbk=
Subject key identifier:   D1:01:07:52:5B:E2:7F:79:CF:69:8D:F7:08:91:A2:52:31:97:DF:3F
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Certificate issuer:       /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial:       01A19D6C1B3557197029987EEB286538DE91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
Manifest number:          0EA0
Signing time:             Mon 02 Nov 2026 18:01:09 +0000
Manifest this update:     Mon 02 Nov 2026 18:01:09 +0000
Manifest next update:     Tue 03 Nov 2026 18:01:09 +0000
Files and hashes:         1: HJtkjvlBva8uqcL0XUNpqigQG9s.roa (hash: WkXmQkgs5y2TV+m/F6AQDR1j74heyCTTdW3y6tsfBHk=)
                          2: OUHZPu_PJYtOLDLbLVCMk8yoe-k.roa (hash: Ma69Row9f6EcaHWc23EqgBUIT2c3X7xAnz9i9hXJ3nQ=)
                          3: Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl (hash: 2qJLMRExzAoS4ApukDGznkCck/+PbTb0h6uGLmSdUxA=)
                          4: kz2wF3XWQ2RN8sHvIuIFZYtVNIQ.roa (hash: mNiLwNy9yFADV0O6uoYz7QI7buc164Ngl+VExm6ZaD8=)
                          5: xprcFFAPJjG3UElyOhAJ6E9gXpA.roa (hash: o5pGWYnDSMF3mxP8sdDWWibluTFKuj51TiZS9rC+X/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Nov 2026 18:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:9d:6c:1b:35:57:19:70:29:98:7e:eb:28:65:38:de:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
        Validity
            Not Before: Nov  2 18:01:09 2026 GMT
            Not After : Nov  3 18:01:09 2026 GMT
        Subject: CN=d10107525be27f79cf698df70891a2523197df3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:ca:a1:85:c0:6c:e6:b1:44:64:c4:72:3e:
                    e7:7f:da:8c:d5:6a:4b:71:82:90:07:87:e5:e7:4f:
                    e2:13:18:29:bd:8c:b8:66:59:37:31:30:1f:73:e9:
                    88:1f:00:3d:24:6b:ab:dd:94:56:5c:a9:89:b4:56:
                    b0:a1:09:e1:03:65:a4:02:18:0c:65:67:42:55:59:
                    5b:d6:7b:45:e6:db:22:c3:6f:ab:11:18:2e:d7:b9:
                    a0:09:0f:3a:bc:54:9c:a7:63:d0:7d:a9:c0:39:72:
                    f1:d1:a7:40:5f:7d:46:16:47:ed:39:ef:e3:e1:03:
                    0b:16:f3:f9:25:fc:0a:b3:54:11:1f:39:ab:83:52:
                    87:1e:a3:7c:3c:f8:ea:7e:6d:94:e2:1b:41:72:36:
                    e3:69:4c:c3:44:e2:8c:05:a8:94:32:2b:e2:ca:c4:
                    71:f9:3a:12:00:6e:9e:4d:55:c6:2f:d6:c1:09:5f:
                    66:63:8a:e2:5e:3f:78:44:45:b4:80:f3:c1:05:c6:
                    68:58:5c:e9:e0:f0:f5:b5:26:cb:4a:dc:26:66:46:
                    5a:42:42:f9:ba:63:f9:d4:67:46:b2:60:62:32:f0:
                    e0:a1:33:1b:dc:1a:43:eb:f7:44:90:15:b3:29:a8:
                    dd:9d:4b:0c:e2:3e:fb:18:fa:ce:09:93:e8:d8:46:
                    ef:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:01:07:52:5B:E2:7F:79:CF:69:8D:F7:08:91:A2:52:31:97:DF:3F
            X509v3 Authority Key Identifier:
                keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f1:62:49:48:0c:34:4b:43:18:47:a9:12:23:4b:d1:a9:1d:
         0e:a3:1a:28:d3:6a:c1:6f:ec:5a:f2:2d:b3:6f:2d:1f:e2:0b:
         44:a0:3b:e1:77:98:90:0c:2d:7a:74:c3:2a:4e:40:82:7b:d7:
         6c:79:94:74:98:50:4a:26:1b:4c:31:c5:58:8f:00:c6:eb:a7:
         8a:1e:b3:2f:d2:35:4c:05:2a:5e:4c:05:10:34:fa:5c:70:9b:
         50:d8:c2:9d:d7:df:ae:da:c1:26:4f:6a:dc:7a:de:12:ef:38:
         10:15:d1:03:3c:df:16:54:1c:5e:2f:0e:45:ff:ab:8f:a0:a5:
         61:ac:a6:f0:e4:36:ab:3d:ce:0d:2e:8c:c7:00:c7:d4:47:5a:
         b5:2d:78:dd:fb:6c:d9:82:f9:cf:f2:04:1b:f7:f8:33:c4:07:
         8d:17:e0:34:8b:e2:00:1d:01:f5:5c:85:f9:22:c8:89:73:80:
         a8:5e:e4:25:e1:e3:09:e0:64:7d:c8:27:3b:f9:19:bb:92:24:
         e1:e6:88:2c:46:44:3f:b7:e3:64:81:11:79:24:41:a3:49:41:
         db:c2:82:62:71:1d:7f:e3:e6:ce:7b:8b:84:fc:95:4b:e0:7f:
         3d:40:d4:77:d6:77:a2:31:46:94:ae:19:c2:7d:0c:78:a8:b6:
         27:ba:33:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 02:11:05 2026 by rpki-client