Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File:                     RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier:          sIyrwnYc50Bs9a4ZunCwb7OlwEyVP7JznrqM/Zjc1Io=
Subject key identifier:   8B:1B:67:99:3A:10:C4:CB:D8:8B:1E:C3:4A:15:46:0D:86:A9:14:BE
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer:       /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial:       01A18CE60B408F04CBA682BFB17162EB7A86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number:          1A15
Signing time:             Fri 30 Oct 2026 13:00:48 +0000
Manifest this update:     Fri 30 Oct 2026 13:00:48 +0000
Manifest next update:     Sat 31 Oct 2026 13:00:48 +0000
Files and hashes:         1: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: zrJ8C5gFK8OnJNJtVC60Ct1rk5Q8sPEIo49SLdjXGxk=)
                          2: cyldzaN5uMb66fkP-hiffFjw-IE.roa (hash: Gj1kHwBLzSGp/dgWtzh7IJONH/VWApAr2xjaYZ7+1iY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8c:e6:0b:40:8f:04:cb:a6:82:bf:b1:71:62:eb:7a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
        Validity
            Not Before: Oct 30 13:00:48 2026 GMT
            Not After : Oct 31 13:00:48 2026 GMT
        Subject: CN=8b1b67993a10c4cbd88b1ec34a15460d86a914be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:82:11:75:70:52:8b:f1:73:fe:56:a5:ba:
                    df:0e:8d:1d:21:5f:07:fd:6c:87:07:c7:b7:fd:92:
                    0f:ec:82:42:30:50:f7:2c:6a:5f:5c:ff:6d:9a:30:
                    ff:ae:a6:78:b3:be:fb:29:2b:fd:2e:9f:20:99:14:
                    91:32:82:e6:02:73:40:86:fd:69:cd:30:3a:3d:2d:
                    ce:25:84:14:97:68:4b:7e:fe:9a:01:3e:45:eb:04:
                    1f:6b:f2:5a:45:8b:d8:11:3f:2a:ce:4f:8a:ca:39:
                    b0:e4:4b:a6:87:d6:3d:c3:23:38:13:43:a1:8d:ec:
                    a5:11:15:47:e4:2c:b5:cb:14:a6:01:2c:f2:e7:1e:
                    84:19:06:3e:cd:0c:1f:d3:34:48:ad:ad:71:86:6a:
                    57:88:f4:1e:26:7d:55:f3:fe:f6:53:ff:c1:3e:9f:
                    49:0d:44:7c:b8:23:67:b9:95:65:e6:49:a8:e0:f8:
                    f1:c1:7a:9e:5b:fb:5a:5d:cb:28:9c:9a:9f:17:d0:
                    56:a1:93:07:62:05:89:2f:ba:01:c8:7d:5a:6b:1b:
                    de:36:06:f2:28:05:0c:11:79:a3:b9:71:58:40:8e:
                    2a:27:da:4a:d7:14:ce:73:7f:66:f3:8c:72:e0:3f:
                    ae:a6:8f:3b:96:19:a3:b0:b0:57:e8:ff:f7:89:2a:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1B:67:99:3A:10:C4:CB:D8:8B:1E:C3:4A:15:46:0D:86:A9:14:BE
            X509v3 Authority Key Identifier:
                keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fc:02:1a:17:6c:99:5d:93:0e:ee:e8:ab:15:7e:00:75:ba:
         f9:6c:0c:96:0b:99:c5:d9:ad:04:ec:41:97:1f:1c:6c:72:38:
         9e:8b:0e:71:79:ab:17:07:72:97:d2:a1:a3:da:67:18:83:80:
         59:61:48:98:f2:92:c3:4a:26:45:26:55:6b:5d:cf:49:c0:d0:
         2e:fc:ae:09:a9:fa:72:83:9d:18:f5:06:dd:79:95:eb:bd:f9:
         c6:fe:eb:b6:b1:8c:7d:e4:4a:81:93:cf:4f:06:c3:38:cc:3e:
         a1:d5:cd:c1:34:00:7f:3d:fb:64:31:fe:d2:c6:97:fd:a5:93:
         38:43:94:a9:bb:bb:b0:56:f6:45:52:91:72:90:80:a4:a6:8a:
         57:aa:dd:22:07:e9:4f:a9:de:1a:04:9a:f8:61:ad:7a:f6:36:
         98:b1:9b:34:07:d0:1f:b7:52:15:4c:a7:69:90:14:da:a5:05:
         4b:68:52:71:5f:7e:e8:82:18:fe:70:ab:8f:b0:be:d5:df:1c:
         a9:c1:e3:de:a7:10:7c:dc:ce:af:2f:65:00:11:0e:f2:be:8b:
         b0:2c:58:ff:81:52:45:7c:e4:54:63:83:92:02:fa:be:8d:29:
         51:c0:4a:d3:3f:a9:8c:aa:db:d3:bd:a3:33:73:d2:2a:30:b7:
         c8:a1:98:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:03:13 2026 by rpki-client