Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
File:                     71hLUR2WpK5sljABl_hPlqOvwkY.mft (raw, json)
Hash identifier:          DGvlof6XOnn2gAhHlZAdw/mf6LAB+RkwqqAnWN6WmNU=
Subject key identifier:   35:C3:09:A0:40:D9:45:FF:F1:D3:6A:EC:DC:84:4F:DB:F9:79:BF:4F
Authority key identifier: EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46
Certificate issuer:       /CN=ef584b511d96a4ae6c96300197f84f96a3afc246
Certificate serial:       01A148058102142EFAD51C459D3E7A495468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
Manifest number:          118A
Signing time:             Sat 17 Oct 2026 04:01:22 +0000
Manifest this update:     Sat 17 Oct 2026 04:01:22 +0000
Manifest next update:     Sun 18 Oct 2026 04:01:22 +0000
Files and hashes:         1: 71hLUR2WpK5sljABl_hPlqOvwkY.crl (hash: 5WQ58gYdLCCNjDRs85mkj8qoCYOdkoeSA6eHyT2P7CY=)
                          2: VyE6DesxM1H-hav0gDjcdVAVU4s.roa (hash: fCSRySt/k47Xd3pTSkERi1iNanOCOBE7CKIzsNuCBZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:05:81:02:14:2e:fa:d5:1c:45:9d:3e:7a:49:54:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef584b511d96a4ae6c96300197f84f96a3afc246
        Validity
            Not Before: Oct 17 04:01:22 2026 GMT
            Not After : Oct 18 04:01:22 2026 GMT
        Subject: CN=35c309a040d945fff1d36aecdc844fdbf979bf4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a8:ea:78:82:f5:4e:07:a1:37:cf:98:54:43:
                    5f:0f:72:65:36:28:42:3d:b2:2e:15:80:16:e0:53:
                    e2:73:ae:1a:f0:9d:36:04:10:31:c4:90:1f:1d:90:
                    1d:f4:78:05:1a:58:bc:e6:53:bf:9a:4a:9f:c5:52:
                    04:56:54:57:23:3c:8c:95:d6:1e:59:b2:0a:73:98:
                    0e:6c:83:df:70:d1:43:74:83:64:1e:1a:67:da:0d:
                    26:a1:23:07:6e:62:b0:e8:18:71:c3:ac:1b:f6:af:
                    23:c6:28:fe:22:f2:6c:6e:be:e1:76:b3:0e:67:ec:
                    69:0c:fc:21:60:0c:45:bc:da:41:97:4c:bd:c3:38:
                    a6:e6:88:0c:3d:7b:2c:f6:66:b9:4c:72:31:af:51:
                    8b:8d:81:9a:d3:aa:6d:2f:b7:53:6f:bb:7d:f9:70:
                    2f:7b:6e:5e:86:97:33:57:e5:4d:80:bb:7b:66:21:
                    b0:aa:d8:24:19:f7:42:70:56:69:06:11:59:60:cc:
                    8e:08:6a:74:f2:7e:11:0c:3a:27:75:9c:54:62:eb:
                    a0:d4:69:a2:93:8c:00:d3:03:c9:54:7a:65:df:f7:
                    0b:43:b5:da:c0:81:46:f5:8d:0d:ee:ae:83:6a:b8:
                    d1:f6:df:d7:ce:a1:d2:14:e1:37:dd:7f:a4:4a:fa:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C3:09:A0:40:D9:45:FF:F1:D3:6A:EC:DC:84:4F:DB:F9:79:BF:4F
            X509v3 Authority Key Identifier:
                keyid:EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d9:f0:f9:8f:08:bb:46:64:07:20:a7:56:9a:b4:fd:c3:fc:
         e6:87:ec:ad:28:ac:90:b3:97:0d:8a:3a:e3:d1:b9:ee:52:b5:
         c3:86:74:55:86:55:6a:90:ae:43:81:fa:ab:a6:0d:ef:df:14:
         b4:8c:4e:33:df:ac:32:b5:6b:46:6d:2c:4f:0f:41:f4:d3:a2:
         04:c4:96:91:97:e4:55:76:0b:97:06:28:2f:e6:ea:de:39:ba:
         c5:01:43:dd:6e:20:8e:d2:1a:ff:8a:89:98:3d:9b:dc:f7:7a:
         2a:6f:b9:0b:c0:87:78:74:96:7c:8e:9e:d4:7b:27:0e:3a:aa:
         89:fe:1e:ac:79:02:b5:81:94:c1:82:d5:27:cc:ad:a8:3f:b5:
         56:9b:0d:ae:94:38:04:f0:44:e2:92:2e:bb:78:d9:42:a8:82:
         03:66:eb:b0:ab:84:49:e3:cc:74:1d:d1:3a:14:ff:51:25:95:
         5e:77:2c:6a:1e:c8:66:a8:84:b2:42:aa:e6:10:1c:fd:f4:ae:
         b8:e2:3d:7f:12:9b:77:c0:8f:0e:b9:f0:a1:4f:a0:0b:a6:b4:
         ba:80:0d:f6:03:6b:f2:bd:70:cb:1a:53:d3:ab:5b:c6:c5:74:
         fc:e2:0b:32:13:d5:99:6a:84:9f:f0:03:e4:1f:9e:3a:5f:1f:
         95:80:27:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:53:09 2026 by rpki-client