Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File:                     dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier:          i4ZNM50jeG9PVP8M8BR2p+KJqGqNtdiQav62/zPSX2E=
Subject key identifier:   1B:CF:59:C1:AA:43:55:A3:70:59:46:50:D6:45:40:B0:D1:86:D8:43
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer:       /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial:       01A18977D0421B6C0A05D5434E1BE97B27F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number:          0F19
Signing time:             Thu 29 Oct 2026 21:01:33 +0000
Manifest this update:     Thu 29 Oct 2026 21:01:33 +0000
Manifest next update:     Fri 30 Oct 2026 21:01:33 +0000
Files and hashes:         1: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: dvpuRI/AGv9rm/xGBK6vjbmR8C7kwL8C0DPIVjdenv4=)
                          2: tCljQdoQCYAGdZbsiUMFE-XsaJE.roa (hash: 00v6c7Mm0TodzD2o33hMR8x5qaiYr+lOoZwclNiSZ/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:89:77:d0:42:1b:6c:0a:05:d5:43:4e:1b:e9:7b:27:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
        Validity
            Not Before: Oct 29 21:01:33 2026 GMT
            Not After : Oct 30 21:01:33 2026 GMT
        Subject: CN=1bcf59c1aa4355a370594650d64540b0d186d843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:1f:c9:f8:ef:4a:6c:66:9c:73:66:72:68:
                    19:c7:f1:6d:1a:9e:89:91:27:af:a2:89:ed:72:d4:
                    6e:dc:0e:19:6a:34:d0:b5:1f:96:92:3b:59:43:7c:
                    eb:94:4f:e3:13:8a:da:4b:3f:00:9d:ed:b4:b4:7f:
                    88:64:d7:4c:0f:1c:94:5e:05:af:58:f1:0b:38:88:
                    96:f8:44:bc:f8:13:af:9b:78:63:de:5b:46:44:de:
                    27:7b:b0:4b:48:54:35:1b:90:a5:ab:82:4f:26:07:
                    5b:34:c1:dc:67:c7:33:6c:74:00:6a:e8:ed:e2:e0:
                    e8:b7:bd:ed:a8:e6:c9:63:be:94:68:c4:b3:dc:d0:
                    44:00:c8:78:a7:a0:dc:72:10:45:31:0d:16:2c:c2:
                    39:8a:e2:3c:a0:c9:13:71:ad:5e:63:b0:53:68:cd:
                    f5:ba:12:e3:ac:a2:b1:85:6b:81:a2:9d:ce:4f:be:
                    fc:53:eb:40:88:6a:43:9d:c5:69:c9:ef:17:01:2b:
                    ee:e0:b1:63:85:cf:68:04:2f:30:7d:25:b2:04:30:
                    0e:c6:35:f1:7b:19:a1:73:e3:a9:e3:f7:81:f4:f5:
                    82:a9:1f:5f:fa:a1:35:04:b2:35:49:59:e4:c5:4d:
                    4d:75:a2:5e:56:d7:a9:77:91:17:d4:cb:8b:9e:8e:
                    60:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CF:59:C1:AA:43:55:A3:70:59:46:50:D6:45:40:B0:D1:86:D8:43
            X509v3 Authority Key Identifier:
                keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:41:d9:ea:f8:fe:43:8a:31:89:15:fe:b7:90:58:94:72:b9:
         33:58:d9:82:a3:58:91:61:6a:79:ef:39:5a:82:df:47:6b:1f:
         4a:1a:51:20:cc:a6:6f:ad:a0:ec:85:e0:e6:ac:36:ad:6a:88:
         74:00:a7:fe:12:ff:ee:8a:d9:c6:b0:83:9c:35:85:b0:b7:46:
         e4:79:07:fd:7d:7e:33:96:3b:12:ba:11:eb:40:8d:db:58:75:
         b3:ee:a8:79:d1:1e:dd:e3:e7:8a:bb:36:6d:d5:4e:37:2d:81:
         87:a9:59:7d:4b:63:50:d2:ae:df:d5:3b:c5:21:05:71:d0:9e:
         33:c1:dc:59:b8:cb:a7:1e:17:a6:c0:ee:b4:66:6c:c3:15:7a:
         54:92:98:43:77:a6:cf:b8:e7:21:cf:7b:77:e9:25:9b:9e:75:
         7b:95:14:2b:02:b2:71:bc:af:06:22:09:d0:03:42:c3:79:18:
         6e:97:8b:a4:01:1c:0b:99:10:8c:90:8e:6f:20:bb:60:82:f0:
         c2:1c:e3:65:80:c4:85:79:cd:d7:d4:0e:ec:97:01:39:1a:aa:
         b4:8c:ca:28:a1:c9:6f:fe:c3:4a:15:12:a4:55:8c:4d:bc:8a:
         6d:d9:93:b9:d5:5a:89:31:7e:ef:35:50:9d:28:71:22:9d:73:
         e1:92:b7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 01:29:28 2026 by rpki-client