Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File:                     tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier:          hUjfLCTSjPnvJ3Swx8AmdZm4z60rbbTy15q5weyP/38=
Subject key identifier:   53:73:64:FF:CF:BD:EB:61:6E:82:70:5F:35:E7:D4:71:7D:6D:4E:C5
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer:       /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial:       01A17F2A735B897D191EB08CB64077382988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number:          0798
Signing time:             Tue 27 Oct 2026 21:00:50 +0000
Manifest this update:     Tue 27 Oct 2026 21:00:50 +0000
Manifest next update:     Wed 28 Oct 2026 21:00:50 +0000
Files and hashes:         1: 2bWalxPeCQJ8hBsQRSAPBex2fq0.roa (hash: cNxILQXB6Mynw64tQNRAKKJy7J8sm0Mm5cAcElFdefE=)
                          2: EJ3x2IdwfHH3UH5syh_4ZfSWYxA.roa (hash: MlUbpIDVvfA4UHQUJSKo2vmPPZS7Hen8jUTVtn35kQ8=)
                          3: HV5FOEiZp7NQ8X1h7iy1X9p--3k.roa (hash: EOzdMc3GskmF40wiE+yrzgPDbCivBZJb96Tu2M3IGvc=)
                          4: kpqcS9iGD3Rpk_iaEfzT0Q1dgkM.roa (hash: tIu+noXL+FL6T6WamJRVDXq32TLBt1UuchPxTpkYd9s=)
                          5: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: tU+5OdW6F8pQ3s8/UYJ3JxTGtcSCAXvQJjJaTU0rXZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:2a:73:5b:89:7d:19:1e:b0:8c:b6:40:77:38:29:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
        Validity
            Not Before: Oct 27 21:00:50 2026 GMT
            Not After : Oct 28 21:00:50 2026 GMT
        Subject: CN=537364ffcfbdeb616e82705f35e7d4717d6d4ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:62:5f:63:b3:37:90:7e:59:44:a5:d3:e2:
                    f2:00:0a:06:71:03:e3:9c:d0:ad:d2:7b:aa:f4:4d:
                    bd:b8:0f:b0:c2:47:20:72:1f:29:db:ae:43:65:de:
                    00:1a:c7:b9:c8:1c:58:76:bf:71:b7:dc:b0:a2:4e:
                    82:7a:e1:81:7c:c4:0b:77:8a:8e:80:9a:4a:f2:e5:
                    04:43:98:b8:40:1d:8a:d2:dd:68:15:12:15:43:82:
                    1a:4a:dd:bc:92:86:84:ff:98:05:01:79:b3:64:e8:
                    08:0a:8a:33:4e:a4:33:7f:11:55:c4:54:30:60:44:
                    c4:b1:35:a3:65:bd:14:e5:89:24:f8:92:8a:64:4c:
                    85:99:0e:f1:5d:33:0c:db:c1:c5:bb:5b:93:65:47:
                    1e:2d:c9:e8:bd:a6:8e:50:71:e3:01:1f:11:d9:0d:
                    ac:7e:98:80:30:09:d5:48:c4:e0:3d:e5:5d:ab:77:
                    9d:5d:2e:61:01:df:a8:50:88:99:1e:da:1b:2c:ee:
                    12:46:4e:50:af:f0:53:5b:e8:e4:88:7a:08:43:4c:
                    59:05:28:2b:51:be:32:c8:ad:b1:7f:f3:2b:af:39:
                    8f:02:0c:16:1f:b5:af:9d:36:2c:00:c5:c2:98:00:
                    99:f8:68:76:b7:aa:9a:05:37:12:87:e5:e1:2e:0b:
                    74:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:73:64:FF:CF:BD:EB:61:6E:82:70:5F:35:E7:D4:71:7D:6D:4E:C5
            X509v3 Authority Key Identifier:
                keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:cc:57:e5:66:dd:60:9d:e1:38:53:d3:8d:8e:5d:35:5a:d6:
         30:4b:7c:48:ea:bb:93:9e:3f:c1:33:d2:97:72:a5:60:7c:ad:
         ef:80:6c:22:e7:ab:bd:97:f5:60:f4:f3:ba:5e:6b:15:c2:96:
         dc:24:4f:c9:7b:61:be:a9:f5:0a:54:66:f8:8e:39:28:66:ac:
         51:79:b8:e0:35:a7:d9:35:fe:30:b2:6c:61:d9:db:ec:ed:15:
         eb:c8:8b:9d:e1:bf:d5:61:63:bd:80:b5:79:e5:0a:d4:d6:01:
         16:2f:f4:31:da:6a:45:80:83:03:8d:8a:0d:e0:c5:4f:16:ac:
         e6:5e:7e:a7:5a:fe:a8:2d:18:93:c1:88:a7:e7:79:99:f4:ad:
         19:99:92:2a:e6:29:61:83:1b:97:6c:5b:24:4d:2b:ce:2e:71:
         95:26:5d:53:2d:65:e2:f8:4c:db:ca:bd:41:ba:ab:bb:72:67:
         fb:e8:ec:28:df:ab:96:9f:9c:8e:39:31:1b:53:a9:3b:81:b7:
         d1:60:df:25:5d:30:fe:e7:b0:f8:96:a1:03:4b:94:60:ca:90:
         52:00:3b:cf:76:3b:8d:78:69:d4:ec:55:33:80:aa:00:0b:46:
         85:8f:4c:e1:f5:51:cd:2b:70:65:be:9b:dc:19:bb:f3:ab:46:
         47:31:f1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:29:19 2026 by rpki-client