Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
File:                     cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json)
Hash identifier:          l6vVvJ7b+Z94uTJ8Lj8l934oVRTKmlDJLzSdPqivzO4=
Subject key identifier:   70:F1:11:DD:6B:C8:48:13:9E:A6:9C:61:4A:82:8D:7E:73:6E:C6:14
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Certificate issuer:       /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial:       01A1852CF2B19152DB4682C3F01B3C19A735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
Manifest number:          0932
Signing time:             Thu 29 Oct 2026 01:01:17 +0000
Manifest this update:     Thu 29 Oct 2026 01:01:17 +0000
Manifest next update:     Fri 30 Oct 2026 01:01:17 +0000
Files and hashes:         1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: Yoq21f6LA+8uLMvEPb9+Wpl3RgibyulRdBpqcD2xFH8=)
                          2: utX8EvzxjtNKF1hFOEPAnrUCzm8.roa (hash: klBKnxuMcoS0m9Xk0/1QlfvOXmiMTMvpWtNw0ziiP1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:85:2c:f2:b1:91:52:db:46:82:c3:f0:1b:3c:19:a7:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
        Validity
            Not Before: Oct 29 01:01:17 2026 GMT
            Not After : Oct 30 01:01:17 2026 GMT
        Subject: CN=70f111dd6bc848139ea69c614a828d7e736ec614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5c:25:14:bc:d3:84:9d:39:9e:a7:43:6b:4e:
                    76:db:0d:7c:3b:9a:5a:59:99:16:31:5f:80:6f:31:
                    69:24:3d:fd:f0:3b:43:1a:75:7b:f3:f2:fd:a6:e9:
                    42:3e:ee:f0:19:3a:dd:97:d7:d2:d5:45:8d:16:31:
                    1f:2c:b0:87:56:82:4d:03:fc:4e:87:d4:be:3a:58:
                    f2:66:2a:8a:a7:52:b3:9c:c6:dd:7f:1f:82:24:6d:
                    3d:0d:b9:86:dc:5e:b4:f8:c1:20:4e:39:c8:b6:c9:
                    09:c7:f6:6a:ac:d4:d6:66:be:28:85:0a:20:8c:de:
                    c4:9e:09:9a:2f:9e:99:80:49:98:16:31:b8:40:8e:
                    fe:2c:a0:9b:a9:f5:89:8f:53:75:3a:11:65:0e:b6:
                    ac:03:35:cb:50:fe:6f:e0:b6:36:59:87:cb:94:2e:
                    5e:7f:cc:6e:ac:b3:2c:41:83:76:0a:71:17:da:8e:
                    5e:48:7b:e0:96:48:1f:b0:58:0e:c9:55:52:9e:b0:
                    9c:8d:4c:1c:67:e4:e4:34:1f:2c:a3:33:5c:59:81:
                    5f:e1:56:96:0e:3a:bb:82:d1:f4:44:cb:ca:44:7a:
                    ed:40:b4:e7:f1:f2:9c:0e:ae:c9:26:ed:85:2c:53:
                    18:15:2d:2e:5f:0f:53:33:2f:2d:ba:1d:cb:41:9d:
                    54:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F1:11:DD:6B:C8:48:13:9E:A6:9C:61:4A:82:8D:7E:73:6E:C6:14
            X509v3 Authority Key Identifier:
                keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:2c:b5:9f:9f:39:7e:73:7f:0d:fb:bf:4a:c0:e1:06:08:f5:
         b2:12:0c:cd:2f:97:ab:32:02:a7:c8:77:4a:e6:10:0e:f3:1a:
         72:80:c5:ab:b6:fa:5b:dd:90:91:f5:51:e0:e2:75:a9:4b:f1:
         a7:6d:7c:fe:da:48:69:56:b5:89:5e:92:e4:f7:0b:ee:ec:47:
         9d:6f:7d:e4:24:30:6d:46:82:0e:ee:b2:04:54:3e:37:c5:a1:
         e1:21:04:68:47:d3:75:2f:e5:9c:fa:fc:04:7c:c2:5f:7f:17:
         fd:39:57:44:ec:3f:d4:e5:62:ce:d2:3e:d9:d9:9f:0d:95:7f:
         e9:d8:51:e1:6b:bf:98:1b:98:14:33:73:6c:6a:55:7c:2f:19:
         68:14:9a:26:be:b2:67:25:5c:e6:db:ed:35:de:e9:10:3a:e3:
         56:aa:7b:9c:88:ba:0d:3d:e9:82:a2:7a:86:4e:93:ad:b3:b0:
         3f:aa:30:c5:a7:6d:c1:f3:e0:e7:fd:11:0c:4c:64:ba:32:0b:
         b6:aa:94:81:86:f0:54:a4:a5:8c:ef:aa:07:ba:9f:58:f2:97:
         07:a2:64:85:5f:53:0a:cb:e4:ee:82:1d:17:84:fb:52:58:8e:
         1f:ec:c6:28:a2:aa:d4:e5:8a:13:5f:b7:2f:d3:3f:08:1e:58:
         7f:6e:89:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:48:38 2026 by rpki-client