Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
File:                     1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft (raw, json)
Hash identifier:          RaJTmLBKtAtUF2RkCz8CS9TpV7jBnqYV5mSK+C+JKw0=
Subject key identifier:   AC:B1:A1:2F:62:0D:9C:1F:B3:AA:0F:A1:C3:C3:63:F6:31:43:0A:7B
Authority key identifier: FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
Certificate issuer:       /CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Certificate serial:       01A17E17D4F0032201A77C2BF4AD46321C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
Manifest number:          1AC8
Signing time:             Tue 27 Oct 2026 16:00:53 +0000
Manifest this update:     Tue 27 Oct 2026 16:00:53 +0000
Manifest next update:     Wed 28 Oct 2026 16:00:53 +0000
Files and hashes:         1: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl (hash: emlEPjn9IDEwNLGTBv31bBTtCUkROc1nPuNTbzHd0O8=)
                          2: ASJCxMwgFICdhd2ryix0TW1woMo.roa (hash: eB2/RH4etmts4ZGHiKx5FyzcKrdqSgyRln6WwxKw+Ac=)
                          3: PKDBX_5rlrKVrUIFrHV2ZsSxOyY.roa (hash: BQOkCEhu+u6OghGz5UOaFPhVuOtvrXbTcbi4yCOPXRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:17:d4:f0:03:22:01:a7:7c:2b:f4:ad:46:32:1c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
        Validity
            Not Before: Oct 27 16:00:53 2026 GMT
            Not After : Oct 28 16:00:53 2026 GMT
        Subject: CN=acb1a12f620d9c1fb3aa0fa1c3c363f631430a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:77:19:b1:d6:37:1c:a8:e2:a5:bd:76:87:d2:
                    25:bd:ab:e0:d7:c6:f4:c9:98:b4:e8:51:e5:e6:1b:
                    87:f7:ce:02:dd:93:54:14:b9:38:d2:7a:43:15:54:
                    54:f3:bf:24:b6:1a:e2:dc:ca:25:9d:71:8d:3f:8e:
                    78:af:88:13:c9:48:6b:88:6e:0f:25:4b:70:d6:6a:
                    1f:21:54:25:cb:3f:b2:d0:a4:fa:a1:d5:d7:93:42:
                    07:40:fd:63:03:e1:9c:21:ed:92:4f:ad:b5:22:df:
                    4d:1d:32:20:78:8f:42:79:91:78:c2:c9:ef:34:fc:
                    e8:89:99:42:10:99:03:ba:b5:b2:16:43:ad:54:6b:
                    7e:0d:1c:0d:90:a7:dc:73:60:f6:fa:92:11:b0:ac:
                    fa:44:a9:6b:d4:82:14:1e:5a:2a:34:0e:1e:ac:ca:
                    49:ba:bb:5c:91:ed:e1:0b:4e:39:13:96:5f:0e:4d:
                    13:da:60:6e:25:3d:7a:7e:30:f5:1b:c0:e5:05:c7:
                    19:37:e3:7b:05:75:13:e9:e0:62:1b:31:24:f8:7a:
                    07:90:29:6e:6b:9b:9f:23:71:58:3d:4c:7c:a6:97:
                    09:c3:a9:4e:de:57:e1:22:d4:3a:29:9e:7e:cc:ad:
                    4e:86:1e:86:2a:fb:0d:2a:e5:ff:29:47:61:71:48:
                    90:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B1:A1:2F:62:0D:9C:1F:B3:AA:0F:A1:C3:C3:63:F6:31:43:0A:7B
            X509v3 Authority Key Identifier:
                keyid:FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:36:fb:53:6b:fd:34:1b:2b:8c:b2:85:11:1a:aa:54:bf:81:
         2b:ff:18:6b:9b:52:15:58:8f:eb:b2:bf:c6:44:27:ae:03:41:
         4e:94:4a:ff:40:11:73:9a:29:e2:89:69:ae:e3:59:2b:a9:83:
         e1:cd:a9:a3:12:2c:71:f3:9b:a5:9b:18:1f:57:95:5b:48:71:
         cd:c7:10:7e:99:c0:02:42:6a:d8:99:41:b1:84:7f:38:a5:5f:
         47:b4:c8:83:05:fb:09:66:17:f8:14:67:a0:eb:b5:b7:0e:05:
         13:3f:a9:60:b5:6e:76:12:09:cd:2b:c0:14:69:a8:59:02:87:
         a8:75:54:c0:b1:71:e7:6e:99:a2:19:38:61:01:da:06:e0:76:
         bb:0e:89:20:3e:e4:61:8d:2b:c7:57:7f:e6:ff:3c:e4:59:d2:
         b4:04:f0:29:22:4f:77:7e:fc:7e:3b:41:1b:53:5e:e2:f1:a9:
         ce:f8:26:18:32:5a:bc:5b:9d:7a:97:b0:14:a7:c8:8b:95:ff:
         57:04:7d:67:71:50:a9:26:93:3f:73:f3:a3:02:3f:a6:17:08:
         72:b1:1f:c7:8a:de:b7:62:5d:58:e6:d5:5f:3b:e5:ca:e3:c5:
         b3:49:93:65:d1:38:d8:23:01:ce:7f:1c:eb:97:94:9c:98:3d:
         a9:f7:6e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:47:29 2026 by rpki-client