Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
File:                     c0-mGwhlEDj6-B6_El7IRbGWGIM.mft (raw, json)
Hash identifier:          7Q6aAnl9ZIf+fB29f6xACE9s2oqdvhlDDIqEdzwVB4w=
Subject key identifier:   A4:3F:85:1F:1C:44:5B:E3:8F:68:BC:9C:F8:03:F6:FA:62:E4:07:C8
Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
Certificate issuer:       /CN=734fa61b08651038faf81ebf125ec845b1961883
Certificate serial:       01A17EBCEB400504E858B6CD90C086509222
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
Manifest number:          0BD5
Signing time:             Tue 27 Oct 2026 19:01:12 +0000
Manifest this update:     Tue 27 Oct 2026 19:01:12 +0000
Manifest next update:     Wed 28 Oct 2026 19:01:12 +0000
Files and hashes:         1: c0-mGwhlEDj6-B6_El7IRbGWGIM.crl (hash: U/QMUejyKbv0yxCEIfuOg6KlU/qM6PEG8bAwg14CfAE=)
                          2: ibsoqErDKT3266b2vH5vf8KZDA0.roa (hash: UrhNuNL7GgbO0jHlNAEUHP2GLPJjzZnieCjHTk+nkGg=)
                          3: pZwVWQ0lcHojahu0_rV2N3zpQcw.roa (hash: J+F2E6hLoP7AmyOiwDWr5K7X8LPnv6yqpXFURrTE1yw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:bc:eb:40:05:04:e8:58:b6:cd:90:c0:86:50:92:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883
        Validity
            Not Before: Oct 27 19:01:12 2026 GMT
            Not After : Oct 28 19:01:12 2026 GMT
        Subject: CN=a43f851f1c445be38f68bc9cf803f6fa62e407c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f0:0c:0f:12:00:c0:ca:89:e0:e6:ea:1b:8c:
                    aa:ca:fb:e6:a0:43:2a:43:dd:77:86:ac:1e:5d:85:
                    aa:48:75:86:65:80:12:8f:b8:f3:33:66:43:5b:e8:
                    d1:95:f4:b7:60:3b:97:7b:ff:82:8c:73:48:9a:88:
                    0d:a2:0b:9a:b9:ad:17:73:d2:58:22:0c:66:6d:8e:
                    14:55:48:ee:1c:50:6c:ef:ad:47:2d:c5:5a:0c:6c:
                    b6:91:33:5b:34:d0:60:16:85:a6:df:a1:da:de:1f:
                    5c:de:fa:c7:09:44:49:c6:ca:92:b2:7b:a9:ab:e4:
                    1f:b3:89:2a:69:c7:9e:10:5e:68:11:d2:9f:84:7d:
                    d5:76:bd:7d:41:9e:91:ba:7d:a5:e6:7c:aa:53:95:
                    30:6b:d1:a7:e0:f2:89:64:99:3a:81:e1:9f:a6:4b:
                    46:ff:58:61:92:bf:66:8f:17:e7:36:c3:13:b1:30:
                    bf:f5:e7:10:b6:6c:6b:80:a4:d5:72:33:73:3a:06:
                    e2:df:ae:50:cb:40:07:0e:49:7b:62:aa:d5:11:cb:
                    90:8c:51:9b:00:c0:5c:1e:b8:e1:c6:60:8a:45:c9:
                    a6:9e:bb:51:64:3a:ca:61:95:77:4a:2a:2b:0b:93:
                    69:1a:77:5a:fe:3d:ff:89:47:5d:11:81:2c:17:52:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3F:85:1F:1C:44:5B:E3:8F:68:BC:9C:F8:03:F6:FA:62:E4:07:C8
            X509v3 Authority Key Identifier:
                keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:6a:69:28:2a:37:bb:4f:fe:31:9f:ab:55:27:dc:04:e4:
         6f:be:4d:1a:9f:13:ee:95:ad:40:a7:5b:7e:dd:ba:74:9c:c9:
         af:be:f9:42:8b:67:7e:69:a6:b5:07:20:d9:08:81:37:4e:6b:
         df:be:0f:0a:92:d7:a8:34:d1:d5:56:52:c0:2c:d5:91:f0:d0:
         7f:c0:ee:ca:af:be:70:78:0f:f7:63:a3:db:9e:ab:63:f2:e6:
         62:e5:93:e3:5a:71:b9:10:ac:82:91:bf:df:88:94:53:1e:a5:
         bc:34:6f:b0:d1:38:08:63:4b:19:a8:eb:b3:95:c7:b4:d7:a3:
         ad:bf:6d:85:71:8f:9a:98:3b:ea:bb:50:1a:3a:57:8f:f0:12:
         b6:95:3c:d9:d8:4a:41:2e:48:48:ce:8f:6d:8b:08:5f:c2:e9:
         41:cf:50:2c:d4:94:51:70:0b:3b:ad:5c:6e:e5:41:d1:af:64:
         4f:ed:0c:1d:3b:35:a5:33:37:7d:5d:0d:69:72:8b:79:d9:46:
         ae:66:3b:93:30:a9:9a:80:ff:4f:ee:2b:d1:3e:46:94:1b:fa:
         fe:d3:c4:11:43:e4:bf:20:1a:8b:42:d2:50:f1:45:b0:5d:74:
         e6:06:c0:ef:96:52:f7:76:be:69:d6:a0:a6:d3:6f:c7:7b:be:
         fe:6e:17:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:03:48 2026 by rpki-client