Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File:                     licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier:          Ui/qmxEjJzZ9wRBjpARv8BVUHb/mwdul8oy2hHX6MNw=
Subject key identifier:   86:69:F9:6C:C7:50:D8:32:BA:37:8E:E1:85:83:E2:1E:04:2B:3A:B8
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer:       /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial:       01A17EF4280EEB5DF94FC2A6EB0D5F34354C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number:          0F7C
Signing time:             Tue 27 Oct 2026 20:01:32 +0000
Manifest this update:     Tue 27 Oct 2026 20:01:32 +0000
Manifest next update:     Wed 28 Oct 2026 20:01:32 +0000
Files and hashes:         1: KUOqjCxyAKEhTbAupzFiFaYvtyw.roa (hash: os3TCsMwZbVNQhnConL+JRAfWiuBh8Xi7SXGh1W8p5c=)
                          2: aZ8AkYbZDzLWgutOqU36IbLeq9I.roa (hash: cnNNZQp5lYYOI91A8raXO1cOrkw9J8G5tTC55Sx7Npk=)
                          3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: vxwxAVpWuBeqYAWPWSVBdRxLrGz/lKhuxFR3Kfyp7xI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:f4:28:0e:eb:5d:f9:4f:c2:a6:eb:0d:5f:34:35:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
        Validity
            Not Before: Oct 27 20:01:32 2026 GMT
            Not After : Oct 28 20:01:32 2026 GMT
        Subject: CN=8669f96cc750d832ba378ee18583e21e042b3ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:95:e0:af:94:ea:27:a0:59:03:f5:b7:ef:5f:
                    cd:d7:46:b3:2a:74:6a:0d:d2:84:24:ac:b2:c6:ec:
                    ec:69:2f:d8:52:9e:be:a0:0d:11:81:db:9c:b3:35:
                    79:d6:6b:55:06:7c:d2:b2:8d:10:6c:03:2a:ce:e9:
                    04:a4:5f:54:be:c3:58:a6:34:ca:72:4e:58:b8:a6:
                    5c:3f:7c:1e:91:18:2f:ac:7e:83:98:21:0e:07:3c:
                    e6:53:48:27:d4:c8:d7:24:10:5b:2b:5b:87:ee:60:
                    6b:5b:8a:09:1f:21:8e:aa:cd:b5:7b:4f:c6:3e:cb:
                    19:82:92:59:89:53:e9:d8:fe:56:c0:dd:e1:0e:e4:
                    24:15:e3:8e:11:f2:84:be:0c:9d:50:f5:1d:5e:e8:
                    40:43:38:07:1d:71:31:fe:57:36:27:20:ac:6d:13:
                    9e:37:fc:4e:85:9b:6b:74:07:da:f6:39:9e:de:8d:
                    5d:a3:33:ee:55:a1:80:8c:16:bb:0b:d4:57:b0:87:
                    4f:eb:26:da:3d:c8:f0:88:3f:5e:5e:3f:ac:92:39:
                    02:6c:5a:97:78:21:cd:fd:ec:ad:c1:02:95:8f:1a:
                    71:8a:68:90:ad:92:8f:4d:ad:f6:40:8a:e8:57:0d:
                    33:37:dc:c0:b5:5d:a5:80:c0:ef:98:a1:72:42:34:
                    3f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:69:F9:6C:C7:50:D8:32:BA:37:8E:E1:85:83:E2:1E:04:2B:3A:B8
            X509v3 Authority Key Identifier:
                keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:9a:27:e2:11:3e:fd:ea:8d:e1:d6:dd:12:c7:43:d0:82:19:
         3d:b5:24:82:26:53:f1:a3:19:db:82:89:59:ed:11:2b:7a:0a:
         a6:dc:5e:6e:d3:ae:18:cd:a1:ff:32:11:29:25:dd:01:80:61:
         f0:e3:31:0b:83:de:85:93:ea:0b:8d:77:68:fc:1d:5a:e3:1f:
         d8:e9:d4:c9:36:50:1c:28:9a:cc:ba:57:d7:b3:c8:4f:d4:0a:
         cb:0b:b9:60:91:87:ea:9a:08:73:96:93:44:de:bf:26:5d:52:
         cf:e0:a3:91:5a:a9:88:68:f2:93:9f:37:2e:bd:c7:9f:0b:2b:
         41:09:65:be:00:f9:e7:ad:2b:0a:be:ad:f3:6c:65:4b:c1:1e:
         16:56:e4:80:2a:79:c7:52:b4:20:52:d4:a8:06:0f:96:69:8a:
         a3:af:5c:71:21:54:3a:0b:06:c4:60:4f:1a:3e:57:7e:10:6b:
         69:dd:8b:04:2f:46:be:04:ee:3f:b5:71:f0:61:41:4e:2d:af:
         0b:66:8d:1f:6e:8b:58:e3:1d:ab:ef:ad:dc:a5:31:3a:7e:de:
         43:43:c9:b2:97:f4:bf:ec:a9:3f:6b:48:44:be:d8:a8:f6:f4:
         0f:39:71:44:37:21:2d:6e:5d:4b:2a:16:55:14:a8:3d:08:cd:
         d0:ba:cf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:00:50 2026 by rpki-client