Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
File:                     Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft (raw, json)
Hash identifier:          dKNU7tZMREE8xFCN0OJLbECaw3fV3CKmdUFmHHKkdjM=
Subject key identifier:   5E:CB:E9:51:1A:C6:47:81:80:CE:99:B9:50:78:B9:26:3E:C6:21:8A
Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
Certificate issuer:       /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Certificate serial:       01A18BD323DE7F894448CCA48FFF2DC83B07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
Manifest number:          1ACF
Signing time:             Fri 30 Oct 2026 08:00:32 +0000
Manifest this update:     Fri 30 Oct 2026 08:00:32 +0000
Manifest next update:     Sat 31 Oct 2026 08:00:32 +0000
Files and hashes:         1: 7lREXn6K5l-DbJ8mjZvq6RJ1uEk.roa (hash: 3nD474BFUX8wCCyCzrtNJIx6J0yUBUFRCHlh3/kVZac=)
                          2: Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl (hash: r8CY7gxNVwUi3bVrIDdk9rTrdjh2E7/vzkZlgPZXJTE=)
                          3: XqVaeCjaPtQW5nTcWKYaszB243o.roa (hash: 0c77i33BA9sh6hWoaqI47xWtW3Ms9jVeqGWtj/letD0=)
                          4: kEJSnxenHfD3MGsQVg0rWMsU-r4.roa (hash: CKWwPe7aGHyQIJbjGScWajSnRgDC3Bc7VORq9esiMd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8b:d3:23:de:7f:89:44:48:cc:a4:8f:ff:2d:c8:3b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
        Validity
            Not Before: Oct 30 08:00:32 2026 GMT
            Not After : Oct 31 08:00:32 2026 GMT
        Subject: CN=5ecbe9511ac6478180ce99b95078b9263ec6218a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:ce:d6:49:2b:82:76:6d:46:8f:ba:1e:e4:
                    cb:e6:e8:05:62:2c:c1:4c:a9:5a:f1:91:84:86:78:
                    37:cb:67:31:2b:aa:0b:93:9d:ca:b8:97:f3:ba:89:
                    93:9d:92:47:9c:76:dc:39:81:c5:bd:ea:2c:3f:22:
                    cd:1b:01:dc:8d:28:a7:24:18:58:60:a9:9a:55:a0:
                    3f:f3:dc:bf:cd:01:25:a8:28:b8:86:2c:17:86:85:
                    8f:0f:a2:c3:76:1c:d9:35:64:fc:73:d3:55:2a:c5:
                    64:06:a0:f4:20:d0:93:ee:26:ab:0c:c5:14:f2:e8:
                    54:3b:b2:62:68:a5:54:99:44:37:b6:f2:4d:28:a2:
                    fb:d5:84:4e:9e:8c:3a:dd:75:25:49:08:94:2b:40:
                    c8:3c:80:28:79:23:d3:45:10:32:f2:6a:10:52:95:
                    2d:6e:ca:4c:35:91:81:9f:fa:15:04:a6:4f:3b:7d:
                    4e:ed:da:e2:e2:6d:f8:0c:85:da:80:8a:ff:5b:22:
                    ac:74:21:85:a6:9a:d0:cf:9e:ad:a4:9f:31:7b:e4:
                    f6:0a:8b:d0:ce:96:e6:73:3f:4c:a9:06:0e:79:8e:
                    bd:14:aa:ca:fb:73:a2:6e:5f:f9:d9:72:fa:1c:93:
                    11:91:9d:b9:17:8c:90:89:7b:8a:26:ce:b4:1f:26:
                    2d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CB:E9:51:1A:C6:47:81:80:CE:99:B9:50:78:B9:26:3E:C6:21:8A
            X509v3 Authority Key Identifier:
                keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:10:6a:b3:28:ef:b2:12:6c:52:e0:69:2d:7a:0f:29:01:33:
         be:b0:f4:b6:22:ba:a2:e8:68:7c:ff:78:e6:34:ff:3a:0f:7b:
         fa:3f:ea:25:0f:0b:70:9d:bc:fa:95:47:f2:9f:fe:96:cd:55:
         49:f1:26:89:88:5e:05:8b:e0:07:85:1a:d7:f3:c2:8b:68:d8:
         42:20:e5:df:77:61:82:2b:4e:5f:ca:5d:76:d1:38:fa:8a:5a:
         6f:c6:bf:a1:35:67:30:c8:0d:9c:46:5a:e2:d4:6b:12:bf:46:
         bb:b6:d8:d4:61:ab:67:f9:35:5a:b8:4e:af:42:d5:ec:13:c4:
         69:18:6c:d7:61:72:27:66:a5:cd:7c:08:02:07:47:c4:06:86:
         7b:5e:31:38:cf:35:9d:48:20:89:43:02:bd:2e:12:fc:82:f2:
         78:82:75:51:bd:b6:45:6a:0d:bd:b1:01:e4:79:6f:97:87:1c:
         b1:b2:a9:bd:dd:3a:bb:90:5c:de:ee:36:ea:87:9f:2f:08:53:
         a1:aa:fd:ee:89:e4:d9:88:96:1b:bb:8d:ba:72:e3:cc:50:85:
         15:55:10:0a:4e:4d:f1:4d:22:66:38:19:1c:f3:b5:26:4a:19:
         e1:ec:e9:f3:75:88:f8:9a:0e:53:75:ac:fd:61:5c:6e:65:87:
         37:25:99:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:59:18 2026 by rpki-client