Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
File:                     59CqrsABapJr7tz991g1gVW3G-8.mft (raw, json)
Hash identifier:          CCZ/6sMIsjvubMtQEx0o0a5bkdB+C9mQZ6sZJXQV4sI=
Subject key identifier:   17:DB:5D:93:74:F6:93:45:1B:88:7B:FD:22:1B:13:57:8E:E8:4A:2C
Authority key identifier: E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF
Certificate issuer:       /CN=e7d0aaaec0016a926beedcfdf758358155b71bef
Certificate serial:       01A149BCBBA21DC01D89301781847BB151B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
Manifest number:          0D39
Signing time:             Sat 17 Oct 2026 12:01:07 +0000
Manifest this update:     Sat 17 Oct 2026 12:01:07 +0000
Manifest next update:     Sun 18 Oct 2026 12:01:07 +0000
Files and hashes:         1: 59CqrsABapJr7tz991g1gVW3G-8.crl (hash: oLblth/43oUgStnR4W3GHzfgxgPcJ3VebPra9gLAlGw=)
                          2: 9YC1GQJz6SSHljrp3FZeTZ3rhas.roa (hash: fghtvcVlErFCr5VAPk70z2SRbv9sLRMsCYDkFviRnrc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 12:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:49:bc:bb:a2:1d:c0:1d:89:30:17:81:84:7b:b1:51:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d0aaaec0016a926beedcfdf758358155b71bef
        Validity
            Not Before: Oct 17 12:01:07 2026 GMT
            Not After : Oct 18 12:01:07 2026 GMT
        Subject: CN=17db5d9374f693451b887bfd221b13578ee84a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2c:bf:32:69:e3:8e:c0:9e:88:47:0a:23:19:
                    aa:53:b4:33:06:cd:9b:19:ae:47:bf:b4:a8:19:22:
                    eb:0f:c3:a7:e2:0b:36:99:ea:08:84:9a:6c:4e:71:
                    73:23:80:3d:78:06:d7:f7:fa:0d:20:3c:d2:77:4c:
                    e8:09:23:1e:2c:f9:63:42:ee:e1:5b:f9:38:29:f7:
                    bf:94:56:c4:4e:c2:b4:c5:46:bc:a0:59:67:00:69:
                    ef:89:07:67:fa:e6:b7:d1:8a:3f:90:1f:b7:2e:e4:
                    da:eb:9d:b5:53:ec:53:90:9d:17:33:0a:2a:6a:e4:
                    b9:3d:cc:d1:2d:01:6c:6b:61:6a:6d:58:2c:a4:cf:
                    e5:84:0d:a5:2f:df:55:15:7f:26:6f:77:2b:a8:a1:
                    8e:9e:d6:df:79:dc:64:28:a4:54:79:a8:a9:1f:f3:
                    fa:f6:2a:a5:14:24:7e:27:de:b0:de:9d:53:40:b8:
                    b7:6e:cd:1f:ad:73:64:8d:38:cd:cf:06:8c:92:4b:
                    79:5e:b8:18:1c:15:b6:17:1f:16:b1:cf:da:8f:ee:
                    92:8a:4d:70:5b:7d:f7:3b:3a:9c:e9:82:1a:e7:8d:
                    fb:18:de:c5:20:89:28:76:d3:17:4e:4d:86:f5:d8:
                    a3:66:f2:b1:0a:2b:31:3f:81:46:12:62:d1:aa:5f:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DB:5D:93:74:F6:93:45:1B:88:7B:FD:22:1B:13:57:8E:E8:4A:2C
            X509v3 Authority Key Identifier:
                keyid:E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:11:78:68:31:9c:27:e7:c1:37:59:cd:29:14:c0:3a:78:29:
         95:7a:22:bf:65:c3:91:fa:fb:b1:4a:26:6f:f8:bc:32:d4:67:
         1d:73:53:ba:41:7c:ef:3b:d7:62:75:e2:87:39:25:48:9e:f5:
         7c:a5:28:77:2a:15:eb:66:77:a1:3a:17:fc:73:d3:e6:59:27:
         45:a0:f3:9e:07:32:42:a2:76:e3:ec:aa:32:8e:32:e2:92:d7:
         f7:0d:e6:9e:eb:9d:a5:76:5b:f9:25:b7:62:14:6f:45:a7:0e:
         c9:36:c7:0f:c6:af:77:99:8e:74:59:54:29:50:a6:f6:c7:ed:
         45:8d:d0:f8:de:b9:5d:7c:02:3d:82:ae:1c:15:3c:53:e2:83:
         ab:68:71:00:10:79:df:3d:f1:76:5a:3f:1c:f0:da:59:75:29:
         42:73:33:60:58:a5:2f:94:4c:3f:9b:0d:50:46:12:66:c5:66:
         e3:dd:d3:61:e4:1d:c0:ae:ea:d6:41:e8:f5:40:6e:65:60:c7:
         7c:61:67:9f:e4:a9:38:be:6b:8e:a8:c9:3e:51:4d:df:8d:09:
         6b:6b:7c:c5:96:bc:97:af:6b:24:d8:fc:fa:a1:50:08:81:25:
         8a:0d:52:3f:ba:57:05:11:6f:4d:39:ed:c6:96:43:a3:e3:17:
         4d:58:7b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:27:44 2026 by rpki-client