Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
File:                     rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json)
Hash identifier:          TdjYhoeHcOeId5j01cF9Dr+IqPZAZkapBy73VJU1W10=
Subject key identifier:   83:14:0A:7E:8C:25:A6:C1:50:8A:9C:86:1A:6A:E3:F0:7B:DC:FE:78
Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
Certificate issuer:       /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Certificate serial:       01A17BBB2DE90BC8DAF7DCEEC051E19BA034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
Manifest number:          0B46
Signing time:             Tue 27 Oct 2026 05:00:26 +0000
Manifest this update:     Tue 27 Oct 2026 05:00:26 +0000
Manifest next update:     Wed 28 Oct 2026 05:00:26 +0000
Files and hashes:         1: PwY0v3FgqPK7UsO8_Ta4MegSFlM.roa (hash: 3aTcfO9vdu7qWCaFGCqBM2AkObZO7u8nWp9PGSX53QM=)
                          2: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: q+l4YyrtLsp7LEDQljmR3UuOizOJQ6EM6sPj8kyIs1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:bb:2d:e9:0b:c8:da:f7:dc:ee:c0:51:e1:9b:a0:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
        Validity
            Not Before: Oct 27 05:00:26 2026 GMT
            Not After : Oct 28 05:00:26 2026 GMT
        Subject: CN=83140a7e8c25a6c1508a9c861a6ae3f07bdcfe78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:b5:05:c3:69:66:a9:79:91:c6:b9:a3:05:
                    fc:63:94:c6:76:4b:94:ff:6f:bf:c0:41:72:6b:fa:
                    5b:62:1f:48:a3:f8:16:75:8c:96:05:92:3d:bd:60:
                    eb:fb:f5:ec:46:d8:fb:04:59:bc:bf:6b:c9:28:76:
                    c3:18:f0:1c:fb:25:0d:9a:5a:7b:25:a9:b8:2a:ef:
                    a2:30:96:aa:ad:6c:ac:76:d2:96:58:78:3e:07:a5:
                    87:f1:ac:68:5a:89:85:fd:b4:56:d3:be:4f:2c:8c:
                    0b:2b:3d:97:5c:e5:6e:15:83:ed:16:b2:aa:e3:af:
                    ac:68:74:18:cb:9f:ed:2d:04:2a:3c:12:1f:08:2c:
                    a9:7e:79:37:fc:04:0e:71:95:45:2a:83:5a:df:d1:
                    59:5d:7a:0a:bd:bc:0e:d1:a5:fc:11:78:5f:80:59:
                    d3:d1:79:42:1d:25:bf:f1:0b:a7:8a:c7:dc:88:31:
                    b4:d8:11:17:64:07:7f:78:36:59:6b:43:1d:72:78:
                    a9:7d:f8:f5:4b:99:a1:94:a4:2e:d1:e2:cc:55:79:
                    0a:fd:68:6e:89:4f:64:52:99:30:f3:aa:8e:42:55:
                    a8:f8:9c:33:5b:f4:f9:63:31:cc:85:47:da:92:3f:
                    d1:c6:b9:fc:b9:d4:a3:4b:18:86:4b:5b:06:13:3c:
                    54:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:14:0A:7E:8C:25:A6:C1:50:8A:9C:86:1A:6A:E3:F0:7B:DC:FE:78
            X509v3 Authority Key Identifier:
                keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b7:81:6a:01:86:54:7b:58:23:8a:9e:f3:f6:8a:a9:18:7b:
         22:6a:3f:de:54:fb:b7:be:e5:3e:ad:e3:94:c3:b4:0d:ea:2c:
         d4:b1:f9:4d:a4:8b:ec:6d:0d:af:29:88:72:d2:3b:36:82:44:
         23:e9:75:28:21:85:f8:6d:ea:3f:f8:a0:2b:e3:55:ee:1c:91:
         9a:f0:5a:8e:11:5d:80:01:3e:f0:e1:a2:f6:38:9a:66:c9:00:
         83:82:bb:c2:98:fa:7f:71:e1:07:f2:c3:36:d0:8b:80:95:73:
         c4:65:99:ca:a3:ed:d6:9d:2a:7f:8f:f4:90:c9:d4:ae:96:46:
         60:f7:fd:43:8a:37:9f:87:40:28:f3:b8:fe:ca:1f:c2:b3:45:
         4c:0e:67:d5:fb:03:32:6e:02:1d:0e:ac:a9:d4:fa:2c:65:04:
         a9:74:d5:13:8e:cf:54:24:79:3a:71:0e:14:99:34:f9:2e:ef:
         9a:3b:2f:17:59:a6:c4:54:13:bd:52:09:cf:a4:59:16:fd:a8:
         66:0b:8e:09:13:b8:54:71:c0:d1:b2:77:82:46:1e:bb:52:62:
         e5:de:e4:20:00:80:a0:b2:84:75:16:14:b8:7e:7c:00:dc:48:
         f3:c8:89:3b:4f:e3:99:b1:fc:5f:43:2a:c6:d4:05:94:3a:92:
         f0:86:07:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:25:04 2026 by rpki-client