Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
File:                     Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json)
Hash identifier:          bmw9GkiMdqSeJLddtFqAf8yUBo7zCNiKGZm26lJj5wA=
Subject key identifier:   EA:BF:90:4D:D9:7A:45:CD:44:B4:09:87:5D:1C:EB:D5:15:52:46:04
Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
Certificate issuer:       /CN=15fdb088e98e4e6415d944142212448369005b48
Certificate serial:       01A14C86575165A07FE11E6F05F85B3A4696
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
Manifest number:          05BE
Signing time:             Sun 18 Oct 2026 01:00:34 +0000
Manifest this update:     Sun 18 Oct 2026 01:00:34 +0000
Manifest next update:     Mon 19 Oct 2026 01:00:34 +0000
Files and hashes:         1: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: FfyZwojYywdpQvC5GWFdXcqJ1PTn24dHyO/r3oITDmc=)
                          2: UWFOafME42L6O6C8tCsylQ1qM5Y.roa (hash: kTp8dPuulE0KVt0WY/U+hGiw2jKgDTK8kmDYSbikY3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4c:86:57:51:65:a0:7f:e1:1e:6f:05:f8:5b:3a:46:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15fdb088e98e4e6415d944142212448369005b48
        Validity
            Not Before: Oct 18 01:00:34 2026 GMT
            Not After : Oct 19 01:00:34 2026 GMT
        Subject: CN=eabf904dd97a45cd44b409875d1cebd515524604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:00:90:cd:74:86:6a:58:ef:69:1a:bf:47:
                    60:82:10:46:ec:41:40:98:f8:b4:4f:ae:74:06:cd:
                    a8:de:69:05:1f:db:eb:54:58:0e:54:5c:70:2b:3c:
                    31:87:b9:67:61:e0:d1:f1:e2:20:80:13:99:fb:f2:
                    60:4a:ee:72:df:dd:d3:da:f5:39:7b:f7:d1:d9:99:
                    5e:f8:de:14:8b:22:4c:4e:cb:c9:99:5e:42:98:35:
                    a7:2a:70:8d:e7:a7:73:e1:ae:1b:e4:a4:3c:de:91:
                    0d:a9:c4:06:7e:4f:1f:31:9b:ee:be:89:74:4e:d3:
                    a8:24:4e:a9:c8:ee:f1:c3:b2:d5:ea:dc:cb:91:b7:
                    9a:4c:23:1d:4c:3a:42:1c:e7:82:e1:c9:58:d3:ac:
                    3f:71:7b:c1:30:29:d1:f5:86:90:85:ae:58:24:22:
                    54:61:c1:3b:4f:05:00:96:13:5a:8f:ac:ce:ea:72:
                    3f:9c:a3:56:b8:b9:5a:a6:43:f9:c8:8e:3b:b8:5a:
                    7f:00:56:35:44:0b:b3:0a:7a:91:30:da:2d:fa:d5:
                    cd:3f:d8:d6:50:88:c7:aa:0c:ce:68:99:43:43:a1:
                    cd:44:21:ba:bc:22:36:19:aa:5f:68:3b:fe:48:83:
                    70:96:9e:5e:ce:1f:0b:d2:72:9f:d5:76:63:97:dc:
                    f6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BF:90:4D:D9:7A:45:CD:44:B4:09:87:5D:1C:EB:D5:15:52:46:04
            X509v3 Authority Key Identifier:
                keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:84:97:6b:2c:03:12:7c:b1:91:09:df:6e:c9:92:02:a3:2d:
         c1:28:b7:d9:43:4f:bb:e5:0d:5d:87:21:ac:bc:6c:39:ce:70:
         e9:d7:d6:3b:8d:bf:06:fb:4d:cd:ae:0a:5e:04:e5:12:da:b0:
         ff:60:a9:0f:00:0b:de:3b:f5:1f:80:b4:2c:34:86:16:df:2d:
         bc:78:f6:65:64:30:34:47:bb:3d:01:78:d1:66:58:d7:4e:85:
         e6:f2:e4:3a:94:8e:41:3a:b8:6a:e0:7d:ab:92:d1:99:b8:0b:
         2c:e5:24:7a:40:05:8d:32:00:53:96:79:6e:1b:80:ae:48:72:
         a9:52:58:82:b4:50:bb:29:d1:8f:e9:e1:f6:9f:b5:38:e7:40:
         5b:65:13:a7:6a:6d:4c:8e:3f:08:68:68:a2:ae:d9:cc:d0:f1:
         a6:6a:30:00:b3:00:d8:a1:39:c6:b4:93:35:34:2d:ba:6a:df:
         73:33:c4:59:e3:40:61:28:21:f7:e3:53:8a:6f:87:f7:98:7a:
         d1:0f:96:a5:5d:45:c8:6f:da:0d:c3:22:06:67:55:0d:47:6d:
         91:c5:f7:73:88:31:d5:98:b1:ca:ab:dd:45:1d:93:b1:8d:2a:
         e2:82:ba:21:44:55:fb:d3:03:e8:de:7a:ed:55:62:c4:af:a5:
         b9:90:61:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:17:23 2026 by rpki-client