Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
File:                     bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json)
Hash identifier:          G8I8uGy8/Zw40LNUVSpkzCTcsFSxJ6bP9bWnS9VT1vc=
Subject key identifier:   BE:69:99:F9:AD:E6:EE:05:B1:69:46:06:65:75:8A:5E:F8:85:14:6F
Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
Certificate issuer:       /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Certificate serial:       01A18E9D54F0034745DE66BBB38216CBAC31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
Manifest number:          1299
Signing time:             Fri 30 Oct 2026 21:00:37 +0000
Manifest this update:     Fri 30 Oct 2026 21:00:37 +0000
Manifest next update:     Sat 31 Oct 2026 21:00:37 +0000
Files and hashes:         1: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: +F6fMZLJSZTIcO/wC9atb7jPfjgPoK5S/ix8OhPo7sc=)
                          2: iNHmZBm96p22r1v1NNf0vUA5CNU.roa (hash: W3eGIa/whnFHaDnHwnO2+GYR1xjT6RdNQB1XA+AY4TQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8e:9d:54:f0:03:47:45:de:66:bb:b3:82:16:cb:ac:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
        Validity
            Not Before: Oct 30 21:00:37 2026 GMT
            Not After : Oct 31 21:00:37 2026 GMT
        Subject: CN=be6999f9ade6ee05b169460665758a5ef885146f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:0e:98:82:e8:4e:a8:03:93:3c:8b:a4:d9:
                    54:9e:72:50:02:d1:9a:35:4f:4e:35:ed:7c:77:84:
                    97:c0:ed:03:74:48:38:9b:5b:46:d0:09:8f:94:c3:
                    04:8d:96:42:36:3d:1f:5e:b1:2a:f9:6e:19:07:73:
                    49:b7:67:8c:cc:3c:db:10:f7:ea:33:53:d6:a2:99:
                    55:f1:c1:02:cd:a8:d3:5d:d0:fe:a6:ab:28:64:3a:
                    2f:b7:61:bf:37:0a:f1:28:6e:22:80:e4:2d:7c:38:
                    25:b7:7b:ba:a0:49:08:5e:86:c3:b3:ce:5b:c8:1e:
                    31:07:13:7c:a9:cf:e1:f8:f3:77:54:56:d4:ff:f3:
                    00:e8:e9:27:36:d4:c3:b9:09:59:80:70:41:f4:33:
                    28:e2:ad:05:94:5e:42:ea:10:0f:d8:17:0c:60:b1:
                    40:72:9c:92:80:e2:28:96:b9:73:de:85:87:2a:a3:
                    5f:7c:87:fe:8b:cd:e6:e7:89:75:b8:72:dd:4a:e1:
                    00:ea:be:3f:3c:42:45:b2:53:d4:d8:2e:d8:55:17:
                    3f:ea:06:6c:63:37:ae:45:58:fe:36:9c:c9:5a:e0:
                    bb:f7:58:9f:f4:de:35:76:fb:62:3a:8c:07:1f:f1:
                    26:f6:6c:bc:f5:c4:95:d9:02:15:be:12:25:9c:3e:
                    6b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:69:99:F9:AD:E6:EE:05:B1:69:46:06:65:75:8A:5E:F8:85:14:6F
            X509v3 Authority Key Identifier:
                keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:2a:32:78:8c:3e:44:9a:96:ac:c1:96:38:2c:a8:80:92:55:
         d7:27:18:d3:f1:72:bb:e7:7b:31:8b:6a:ff:53:a8:e9:ff:0e:
         44:ea:3a:0b:40:b1:2a:1f:82:53:0c:38:28:52:2d:71:c9:18:
         52:ab:25:e9:08:43:49:da:f8:93:d4:fb:dc:65:1f:73:0e:25:
         55:bc:8c:00:70:bf:4d:7d:f9:08:04:bb:eb:1e:02:80:79:0a:
         17:09:ef:bf:66:8c:ff:d9:16:3e:2f:80:f2:8d:f9:ef:e5:14:
         33:54:84:5a:a9:98:64:7b:3b:c0:9b:00:1e:e2:74:3c:46:b4:
         99:8d:8e:c1:42:05:ce:1f:72:9d:47:ac:4b:2b:0c:49:bf:49:
         8f:8e:69:e5:50:ef:8a:86:19:d3:f8:aa:5f:d6:b9:f2:73:27:
         ae:3e:57:b8:a5:7f:0d:be:79:8f:a2:37:1d:34:c5:62:f3:ab:
         df:ec:c1:f8:b5:4b:ab:de:db:43:14:33:06:13:c8:ad:8d:29:
         73:3e:4b:89:4c:d7:be:2e:3f:39:c6:2b:6f:b5:f6:22:d1:14:
         4e:c7:de:22:0f:e8:bf:08:c4:17:c5:1f:c8:48:bd:82:0d:4e:
         4b:8e:f0:8d:65:ba:9d:24:f4:a6:f6:ba:2a:d9:9a:17:85:18:
         bd:d8:33:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:21:16 2026 by rpki-client