Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
File:                     F80TGMkZxu8W0kynhGKgt94UugU.mft (raw, json)
Hash identifier:          5D7EyHCjRLkIu47XBIZZsIn38HBtsg13J+sHV1YiQ9U=
Subject key identifier:   81:AD:B5:AF:22:F5:F6:F4:FD:2D:FB:CA:5B:66:42:5B:F4:57:34:C8
Authority key identifier: 17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05
Certificate issuer:       /CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05
Certificate serial:       01A17EBD047A1A18FA396C678D7ABCAA557D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
Manifest number:          0450
Signing time:             Tue 27 Oct 2026 19:01:19 +0000
Manifest this update:     Tue 27 Oct 2026 19:01:19 +0000
Manifest next update:     Wed 28 Oct 2026 19:01:19 +0000
Files and hashes:         1: F80TGMkZxu8W0kynhGKgt94UugU.crl (hash: wsW6j/fXJqm1fK59mmEUC+PQF15aGWHbAm/8fDtTq/4=)
                          2: pf5Zf2vmMKwv3V7bxVEW72mA5Ro.roa (hash: 25kq67NwiLZpvtq/lLKi0cW1juljgXPpgbg4/hkoeJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 19:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:bd:04:7a:1a:18:fa:39:6c:67:8d:7a:bc:aa:55:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05
        Validity
            Not Before: Oct 27 19:01:19 2026 GMT
            Not After : Oct 28 19:01:19 2026 GMT
        Subject: CN=81adb5af22f5f6f4fd2dfbca5b66425bf45734c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:50:82:00:96:20:6a:ad:fc:45:ac:11:de:
                    bc:54:70:db:3e:56:50:76:e1:b5:05:04:d1:e3:db:
                    13:60:26:d5:67:bc:d9:59:00:77:5c:5c:86:5e:0a:
                    3c:ba:d4:c1:65:1a:b7:6e:b8:25:b0:61:89:6a:e9:
                    02:01:47:a1:0c:d4:be:a4:dc:2c:05:05:4c:a0:f0:
                    24:38:ab:b5:0e:54:ce:9d:af:91:4b:f4:49:d5:a5:
                    76:96:a9:c1:fa:94:8b:3c:37:31:01:af:dc:28:da:
                    c7:98:1d:7b:e5:ea:8a:67:d3:c5:da:3f:ce:d3:61:
                    eb:4e:e4:77:d3:cc:b3:53:5f:c5:60:20:2a:da:40:
                    1d:80:a5:6a:85:c6:eb:1c:64:b5:20:c6:65:d5:ff:
                    44:21:24:da:58:c7:f8:b6:37:7e:01:b6:6b:28:c6:
                    7d:bd:1c:ba:f5:a1:87:7d:6a:7d:87:ad:6e:a7:34:
                    b8:73:ef:d5:83:28:58:99:bf:f7:9b:7c:5c:17:a8:
                    e8:09:d2:77:46:5a:5a:d5:e4:c0:0b:bb:71:af:4f:
                    15:ee:b7:8d:c2:b1:49:33:ab:b4:fd:a7:c8:09:39:
                    bf:34:e8:7f:16:4c:44:19:19:da:d9:30:e9:90:bd:
                    a1:f5:de:ec:0b:9d:25:ab:fe:21:70:32:c6:8c:41:
                    5d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AD:B5:AF:22:F5:F6:F4:FD:2D:FB:CA:5B:66:42:5B:F4:57:34:C8
            X509v3 Authority Key Identifier:
                keyid:17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a0:c5:b9:39:b7:a4:f1:06:43:36:8e:2d:bc:fe:52:db:ec:
         13:52:fe:89:33:71:45:b3:5f:65:76:cb:e3:7a:f2:88:07:65:
         6a:28:62:e9:3e:eb:9d:ea:55:12:5d:60:16:91:fa:93:02:82:
         0d:53:50:78:c5:d9:2b:f4:cb:8f:a4:ec:c8:0d:d4:57:db:81:
         23:b2:fc:3d:dc:63:97:f1:b1:bc:66:29:b8:0a:e3:07:6a:e8:
         57:e4:23:d3:f4:b2:e9:56:d0:f8:1f:6e:d2:f0:ff:76:ff:0c:
         09:8a:9a:cd:cd:5e:24:1a:98:39:0e:7f:90:6b:d8:a4:d2:8b:
         16:db:ff:3a:4b:60:a4:6d:c6:8f:19:87:70:b7:77:81:6e:28:
         90:b4:55:51:88:10:23:53:4a:14:82:29:97:4c:c9:bf:81:8a:
         8a:b9:6f:d5:64:11:16:72:bd:9e:47:4d:c9:0a:55:f9:dc:5a:
         74:0d:60:80:6f:ba:6d:4f:98:80:77:66:b1:5f:c2:c0:f4:db:
         2f:1e:63:16:45:3d:9a:72:c1:9c:5c:be:9d:dd:2a:85:1c:5d:
         df:f3:74:bb:54:1e:84:22:54:3d:a1:7e:0b:b7:d4:12:78:30:
         d1:46:45:24:21:22:16:36:57:ed:85:9e:83:3c:9c:6c:62:7d:
         ea:44:0c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:50:03 2026 by rpki-client