Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
File:                     ioludoVA84eh3U_52qS4W6SKkG8.mft (raw, json)
Hash identifier:          yBBIE0gpaLRYWINQyR2yG/0xn4UoArC2xfgrVQ88wUI=
Subject key identifier:   A7:C6:45:81:2C:77:6D:17:61:57:A7:57:10:AD:A8:21:F6:3A:35:B9
Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
Certificate issuer:       /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Certificate serial:       01A17CCEE036353DDA90CC5B89603FBE5143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
Manifest number:          1408
Signing time:             Tue 27 Oct 2026 10:01:34 +0000
Manifest this update:     Tue 27 Oct 2026 10:01:34 +0000
Manifest next update:     Wed 28 Oct 2026 10:01:34 +0000
Files and hashes:         1: ioludoVA84eh3U_52qS4W6SKkG8.crl (hash: 0HwK5Wy4fDL92GiKWLWy2YKv+4v96sqXDysr3WN/jwk=)
                          2: pl9mzp_8YMyJw55sEo1vdEjuXI8.roa (hash: gvQ9YBNcPAS5X5E1J1OqXa8f8Nq/+m7113n6v9qADuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 10:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:ce:e0:36:35:3d:da:90:cc:5b:89:60:3f:be:51:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
        Validity
            Not Before: Oct 27 10:01:34 2026 GMT
            Not After : Oct 28 10:01:34 2026 GMT
        Subject: CN=a7c645812c776d176157a75710ada821f63a35b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:75:15:87:d0:7a:77:08:43:81:8a:8b:d0:1a:
                    ef:f4:68:eb:df:1b:4c:74:48:a1:7f:ca:49:e8:3c:
                    5f:44:f5:d6:57:67:dc:54:36:c8:66:48:d4:a3:2a:
                    f7:f5:ea:ac:a6:1a:0e:05:59:09:80:e0:62:e9:75:
                    69:33:2b:f1:f7:de:ab:17:52:2e:f2:e4:18:62:34:
                    6b:cf:50:73:bd:b6:b8:ca:a1:42:c0:aa:d6:6c:8c:
                    c9:6d:e3:d7:ee:35:05:6b:c9:93:2d:cd:b0:d1:64:
                    70:7f:d1:e0:11:8b:1e:d6:27:84:1a:53:18:49:7e:
                    94:80:87:2e:e0:b1:fd:da:6b:db:c5:c8:41:5f:7f:
                    ec:6d:68:66:c2:41:c4:76:61:d0:bf:f3:f0:20:e4:
                    49:fa:63:ad:64:07:22:88:a3:81:5a:1a:ee:0d:3e:
                    51:8a:2c:56:cc:35:b4:ef:b2:07:2c:53:bd:b6:36:
                    ed:d2:08:71:f3:9a:66:f9:f6:4b:9f:8d:7d:a7:42:
                    e4:11:48:7e:a7:fc:48:b6:f6:22:9f:7d:8d:6d:32:
                    8b:37:0e:eb:6d:c0:0f:34:96:25:a9:45:b4:b6:d5:
                    06:1c:33:ea:55:f0:7b:9c:58:e5:36:ce:70:4c:f6:
                    62:18:87:61:3f:4c:53:b0:c2:4b:ed:67:ef:c5:d4:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C6:45:81:2C:77:6D:17:61:57:A7:57:10:AD:A8:21:F6:3A:35:B9
            X509v3 Authority Key Identifier:
                keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:43:3e:2b:92:2e:29:1c:ac:79:2b:aa:83:0e:63:23:b1:17:
         1f:6a:b6:c7:c1:3f:a5:f2:e6:97:36:34:dd:0a:ad:82:94:e6:
         a3:76:86:24:48:ae:cf:26:3d:bc:20:86:7d:32:a4:81:30:8c:
         6f:0b:06:78:66:b8:06:a5:66:09:0a:c5:4d:c5:e0:f6:f3:fc:
         f6:34:86:8d:e5:77:87:1c:15:4b:f9:f9:98:df:76:5c:fb:14:
         2c:f9:77:d4:20:20:10:c8:ae:44:e9:5e:ea:33:bd:02:dd:d4:
         fa:81:50:65:f3:7a:5d:46:ea:68:89:38:b9:62:13:3e:40:12:
         21:b2:96:ce:fb:36:e3:ea:3f:b0:d8:6e:77:85:83:30:dc:c5:
         13:f1:49:dc:a8:bd:60:c4:fb:7b:6f:28:8d:a6:2d:64:0c:2b:
         61:85:7e:33:ea:86:7e:4b:07:96:6e:7c:65:79:ab:42:d6:76:
         4e:5f:df:9c:8d:1a:f4:9f:72:22:74:88:26:38:44:a1:91:9c:
         8d:9c:c8:68:c5:0d:43:63:4a:a4:12:6f:da:2f:03:40:cc:08:
         3d:63:7d:74:ea:78:9d:77:a5:49:c6:ee:4c:b7:41:18:c4:c2:
         df:da:66:ec:36:11:2c:20:7e:e4:d6:b6:a9:ce:51:f8:bb:71:
         53:10:73:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:36:58 2026 by rpki-client