Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File:                     JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier:          n5RZX19LXP5DNarpAMlHN4G7JIz2aTZmcTcqbws7kVg=
Subject key identifier:   58:0C:8C:BE:33:1D:D4:93:5D:1D:59:EA:BF:41:58:34:EA:BE:92:C4
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer:       /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial:       01A18D1D231B213D63BF8B04F55B22B52040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number:          12F8
Signing time:             Fri 30 Oct 2026 14:00:59 +0000
Manifest this update:     Fri 30 Oct 2026 14:00:59 +0000
Manifest next update:     Sat 31 Oct 2026 14:00:59 +0000
Files and hashes:         1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: gV3FrogtX56efvp5nWA67PSkVrQr4bVeG5QKr8eI5HM=)
                          2: lLxgfqurH_Hgps0nmWFaFien01Q.roa (hash: N0SnJ14VpoDgSTsYIgjlp8sX8VgDL1JD7jVAinD1cAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8d:1d:23:1b:21:3d:63:bf:8b:04:f5:5b:22:b5:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
        Validity
            Not Before: Oct 30 14:00:59 2026 GMT
            Not After : Oct 31 14:00:59 2026 GMT
        Subject: CN=580c8cbe331dd4935d1d59eabf415834eabe92c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:dd:d1:89:4b:79:3a:fe:fa:20:ac:8b:8e:
                    69:e4:56:d0:a1:62:39:4f:05:31:7c:98:ab:23:d7:
                    04:e4:40:8a:12:77:95:e8:41:a6:73:b4:7c:b8:3e:
                    01:22:81:7c:3c:8f:fa:73:13:54:e3:02:09:85:0a:
                    3f:4e:5f:24:cb:a8:74:a0:04:04:e9:7b:ea:69:fd:
                    0c:07:c2:f6:11:82:b2:f3:b4:e9:f4:61:89:f2:a3:
                    fe:0d:97:15:23:73:5d:aa:94:66:67:8e:2d:2a:2f:
                    98:f6:7d:cf:ec:6c:ca:e1:5d:88:c3:5d:f3:c0:85:
                    83:cb:37:de:19:ea:4e:98:15:af:3b:f6:b2:be:65:
                    42:0c:3f:79:40:da:8b:23:28:fc:45:6e:54:9f:de:
                    69:05:97:7c:cd:6b:30:93:cb:aa:ac:06:e0:8e:5e:
                    e5:07:ca:9c:61:40:87:23:09:be:3a:02:e2:6c:a7:
                    cc:61:0b:a4:e8:2b:ff:a7:07:73:25:24:fb:ab:8d:
                    f8:5c:fe:8e:8b:64:5e:72:24:e8:0f:79:ce:7f:90:
                    90:15:12:cf:a3:49:9d:98:58:f6:db:0b:03:ca:d8:
                    5b:e5:69:c5:be:f0:88:ed:39:b5:ef:f5:32:6c:3e:
                    08:6a:81:94:36:14:52:b5:a0:b3:8c:88:7b:db:29:
                    97:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0C:8C:BE:33:1D:D4:93:5D:1D:59:EA:BF:41:58:34:EA:BE:92:C4
            X509v3 Authority Key Identifier:
                keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:22:7f:56:68:49:ce:6d:d4:73:0c:a1:52:bf:10:ed:10:b9:
         fe:94:81:f9:ca:9d:51:f4:55:97:f5:8b:fe:f9:be:03:d7:0d:
         61:0f:65:bb:5e:36:86:bc:3b:b5:c3:07:50:df:93:2a:bb:94:
         c8:96:51:d9:68:e5:51:8e:de:68:3b:3d:10:b1:68:c3:61:05:
         1c:e0:57:08:ed:b0:14:3a:72:1d:c2:51:fa:86:68:2b:59:f9:
         fa:83:8f:8a:05:77:73:f3:3f:e0:14:52:61:be:13:76:f8:0b:
         34:c1:94:50:7e:f1:b9:12:72:14:ed:1c:5a:90:07:32:49:f0:
         fe:65:c7:f7:4d:c4:9c:4d:ec:78:ab:3c:dc:c2:ac:3d:f4:dd:
         19:a1:99:3f:07:b6:31:aa:de:15:de:81:5d:d9:41:ca:47:27:
         40:83:26:c6:4e:e3:da:db:e6:c3:b9:e1:3d:37:9f:23:a4:e5:
         38:54:a5:82:41:ec:f0:9f:cc:ea:01:57:c0:6c:d5:40:6b:d3:
         41:74:06:21:dc:ab:05:79:69:27:e6:66:b0:8a:25:13:17:cf:
         b9:32:82:21:5a:52:00:ee:29:40:ce:83:ac:6c:25:87:76:b0:
         56:86:b5:ce:c7:8f:3e:69:67:f2:6e:da:10:ce:d0:32:9e:3b:
         6b:7a:ea:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:24:55 2026 by rpki-client