Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File:                     jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier:          qs+viEKMctclJELoMhI7EYFIEWbPlHzXrSzXju1oFKY=
Subject key identifier:   7A:53:44:E6:23:1D:4B:86:9C:01:FF:76:81:2D:64:DD:2F:72:B3:8E
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer:       /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial:       01A18BD2D29DD13DB94CDC0E34E09A1AAD3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number:          0F75
Signing time:             Fri 30 Oct 2026 08:00:11 +0000
Manifest this update:     Fri 30 Oct 2026 08:00:11 +0000
Manifest next update:     Sat 31 Oct 2026 08:00:11 +0000
Files and hashes:         1: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: b+Xae3APwAAU6etrBEwr2Igmu3VAumzYWdNd4FwoVTo=)
                          2: ybGK7D59nhsrV5zcx9pDpZj5zRw.roa (hash: lUVMObnC7ci77KqYjQKC6vaADGXMIPOZVK0KWxLUoCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8b:d2:d2:9d:d1:3d:b9:4c:dc:0e:34:e0:9a:1a:ad:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
        Validity
            Not Before: Oct 30 08:00:11 2026 GMT
            Not After : Oct 31 08:00:11 2026 GMT
        Subject: CN=7a5344e6231d4b869c01ff76812d64dd2f72b38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:14:98:2e:ee:81:bf:e7:24:2d:03:cf:4f:97:
                    83:0e:d2:b5:a3:fb:60:8e:5c:50:2a:90:4d:70:58:
                    2e:c1:8b:d7:c7:ee:f0:bb:72:79:3f:53:97:47:b4:
                    02:d5:d0:86:ac:ce:3c:9e:59:63:4b:49:d1:0c:9b:
                    a0:a7:79:a1:7c:cf:d6:6e:e3:ca:28:1d:a2:09:b6:
                    97:7b:d6:04:dc:1e:d3:ae:ca:a0:c4:88:0b:62:73:
                    a5:23:6d:ef:30:88:d7:5a:ad:15:76:43:b8:af:16:
                    12:3f:b3:45:5b:0c:85:a1:2f:1c:6e:0e:97:86:93:
                    a1:94:be:80:5c:98:4a:c4:9f:53:09:2a:5f:9f:a3:
                    cc:60:52:b6:af:79:18:ee:fa:c4:d1:62:5b:57:d6:
                    81:ca:24:01:ca:67:5a:00:24:09:d9:d5:5e:ab:7e:
                    4a:fd:9a:1e:32:cd:19:15:73:50:b2:47:00:2b:c0:
                    d2:e0:e0:18:98:83:02:83:bc:ed:9a:28:36:2e:58:
                    e6:98:68:3b:27:c3:61:0e:6f:ff:d0:34:4c:6a:c6:
                    79:84:fb:6a:85:91:14:90:e7:df:47:1b:15:11:a1:
                    9d:86:36:17:2b:79:5c:06:03:a5:6f:84:e6:42:6a:
                    72:18:ba:bc:95:d3:49:10:f3:62:30:1a:24:8b:ac:
                    7f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:53:44:E6:23:1D:4B:86:9C:01:FF:76:81:2D:64:DD:2F:72:B3:8E
            X509v3 Authority Key Identifier:
                keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f0:f4:52:b2:8b:08:98:71:d1:d3:db:c0:2d:a4:43:bc:c3:
         bc:ec:c8:7e:cc:92:03:f5:2e:ee:97:ca:35:dc:51:16:f8:1d:
         ca:36:cc:24:7b:01:96:b3:73:f1:78:61:17:c9:d2:5c:bf:70:
         3f:09:62:a1:0a:4e:b2:ef:37:a4:d7:f3:ec:e6:60:89:4e:e9:
         bf:79:c9:84:fe:ac:12:81:53:cf:e8:8c:b3:9a:b1:9c:e6:78:
         7c:9d:47:5c:fa:2f:ad:51:85:2a:c0:a4:7f:ad:5f:64:cb:f6:
         0a:30:4b:b5:a4:db:db:91:ff:d1:d6:6b:e4:06:eb:82:5f:6c:
         59:42:6e:4e:09:16:23:d2:a2:12:df:c5:68:9f:de:b6:1a:9f:
         2f:58:cb:ba:4f:f9:f7:c1:8a:53:a4:3e:03:28:61:bb:8c:4d:
         89:06:25:60:dc:3f:df:ed:33:99:97:a3:e2:05:eb:7d:c0:ee:
         84:b8:1f:7f:e0:64:35:fe:2a:39:7d:48:63:d2:73:3b:80:11:
         f9:45:77:82:14:3d:04:cb:a9:3a:66:7d:bc:e7:ad:7e:5f:cf:
         2e:fc:98:1b:e6:f9:a1:95:f5:7a:75:f9:4b:9b:2c:14:4e:2a:
         07:97:c1:66:ec:08:b2:a9:f8:94:f6:00:83:53:8c:a4:92:4b:
         a1:9b:e9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:03:47 2026 by rpki-client