Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File:                     rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier:          Q7wq0WoCygZpPnHuFx2p+bm8AzslnENMcVlqgdZGxQ0=
Subject key identifier:   40:E3:E5:F5:DC:15:21:14:DC:DF:F4:29:55:93:6D:CD:12:61:D9:85
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer:       /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial:       01A18F0BA70755317A71C154EE62DC270C47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number:          1AD7
Signing time:             Fri 30 Oct 2026 23:01:07 +0000
Manifest this update:     Fri 30 Oct 2026 23:01:07 +0000
Manifest next update:     Sat 31 Oct 2026 23:01:07 +0000
Files and hashes:         1: 1DSUQ0jxs6dG0EoFqfG91mFQyMw.roa (hash: iINHWWjQ7Nsnh6T5r2HUf93qqcUOuSqMNkps61w8OX0=)
                          2: BdsuDRm80ULk9aLfJ7zh20INiU8.roa (hash: 0BqcT0T81e3M/0LPrL5e9ii3yguHiKnmLWj00gesJkU=)
                          3: KLak6E7XOaljYL7i0cSZlIlCEqg.roa (hash: mJGksFMnjfzfVrg/g8a4mJkgqFzUtmtGPX7OdhiTIDg=)
                          4: VSskXdqgKe7CaDWuoatQnI_9KiE.roa (hash: ZdbXSqyDrBgEKdzaBPZgWnFmAfBPFOOQn34nK2NZEnk=)
                          5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: dfwv/NR60SlN66zo8y6YW3y+t0XXIP7/ia3iOi/L3UI=)
                          6: vPgoZptW0KavIK_Hg1kzkfOF1WE.roa (hash: j7J2y1HSuKj72l6kVGUrAtD78gxcoUd5XdyBbZEybuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8f:0b:a7:07:55:31:7a:71:c1:54:ee:62:dc:27:0c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
        Validity
            Not Before: Oct 30 23:01:07 2026 GMT
            Not After : Oct 31 23:01:07 2026 GMT
        Subject: CN=40e3e5f5dc152114dcdff42955936dcd1261d985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:0b:c3:fb:87:30:22:88:97:4c:3b:36:53:
                    96:11:5e:85:b3:a1:fd:70:18:3f:bc:d8:33:af:5f:
                    11:d4:f0:46:b6:1b:15:30:c9:e8:1a:d8:10:52:8c:
                    e4:4d:ab:60:1e:c7:51:8b:9f:91:bb:1a:5c:e1:ac:
                    5a:c7:ca:02:f5:d6:e2:e1:e9:d6:e5:bc:10:7f:87:
                    d2:fc:96:14:ec:31:54:61:07:61:4f:94:fb:da:d7:
                    50:9e:f3:13:b7:27:3b:d1:5b:b7:8a:4f:1b:3c:be:
                    64:65:90:d7:01:db:ac:57:5a:d5:70:79:1d:f8:24:
                    d9:4d:30:3f:ed:fb:67:1c:3f:a6:db:06:91:06:da:
                    24:e9:7c:00:79:7c:17:01:4e:b5:5a:06:73:0e:2e:
                    93:5c:21:3f:c2:7c:98:5d:a8:7a:42:a4:19:63:88:
                    75:80:de:18:15:c1:3a:ca:94:8c:d1:a3:55:1b:90:
                    f7:9d:c1:ff:80:3a:c1:27:de:14:cb:fe:d8:06:76:
                    d8:76:04:ed:26:69:6e:92:aa:b1:5f:6c:05:c2:69:
                    74:6e:b8:e3:2e:18:de:f5:42:1c:9e:db:0b:55:85:
                    0c:ad:f0:c6:f3:97:d9:ff:97:91:d5:f9:fc:81:e9:
                    6f:56:38:91:52:5c:58:92:1b:81:74:29:df:6d:03:
                    98:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E3:E5:F5:DC:15:21:14:DC:DF:F4:29:55:93:6D:CD:12:61:D9:85
            X509v3 Authority Key Identifier:
                keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:86:f3:29:c9:61:c5:98:ea:6d:94:7f:7a:e3:0f:92:fe:15:
         91:2c:58:7c:f6:c7:a4:65:ef:62:b7:99:41:8f:98:ca:e9:95:
         d7:ce:6b:a3:88:a3:11:af:3c:a7:f9:87:38:29:ba:ed:97:13:
         66:77:59:0c:6b:71:fa:34:e8:96:8a:84:85:c5:63:d1:91:0d:
         e9:df:8e:71:1b:01:1d:0f:ad:5f:9a:f8:8d:1c:ac:25:74:ed:
         9d:4a:3f:98:ac:64:2d:76:a4:46:39:d7:ff:1e:39:95:9b:5b:
         d5:6a:87:e0:8e:64:15:b5:27:5e:58:69:dd:ba:ac:20:f4:aa:
         53:e4:a7:0d:a7:1d:ab:fe:2d:f7:0b:aa:54:54:d9:11:da:72:
         50:7c:5c:f1:37:ec:59:24:65:5a:71:62:5d:83:13:24:d1:79:
         c2:5b:f9:d3:a5:fd:b1:bf:56:c4:d5:a6:11:9f:90:e9:a1:5d:
         d9:98:c6:59:80:3c:1c:f3:e0:3e:de:15:b4:dd:c7:3c:d3:75:
         ff:0c:75:f4:f9:31:46:90:e9:fb:10:44:11:57:10:6b:32:66:
         38:cd:3a:1c:97:4a:98:cc:63:a5:a0:35:9e:9b:5d:6c:f6:c6:
         5a:b3:c6:8a:a9:ff:8f:45:f1:0f:c0:76:44:03:79:4e:f8:ec:
         5d:87:05:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:43:43 2026 by rpki-client