Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
File:                     i4GUQccJMDSp1GVqL202qyQDP-Q.mft (raw, json)
Hash identifier:          xOJL0a90yI8TAut1XJ8jghlRAQl+VwWeKJHjAfHLraA=
Subject key identifier:   18:A5:E5:A8:FE:8F:7D:A6:47:2F:FF:08:71:C6:9B:FF:46:1C:6B:A8
Authority key identifier: 8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
Certificate issuer:       /CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Certificate serial:       01A19A337BD2A8930ADF65CBB136AF865C8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
Manifest number:          054A
Signing time:             Mon 02 Nov 2026 03:00:27 +0000
Manifest this update:     Mon 02 Nov 2026 03:00:27 +0000
Manifest next update:     Tue 03 Nov 2026 03:00:27 +0000
Files and hashes:         1: WYq_SwOSBS5C2flPsPwqJm7TWQ0.roa (hash: 6TuNzzukIi+p4GfJ3ZlekfC6HWDwvlGuM10xKCq4iF4=)
                          2: i4GUQccJMDSp1GVqL202qyQDP-Q.crl (hash: vW6N8zxEFUM4cRPn6/rwkvQmxpJ4jcf+mHszZ0MQgKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:9a:33:7b:d2:a8:93:0a:df:65:cb:b1:36:af:86:5c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
        Validity
            Not Before: Nov  2 03:00:27 2026 GMT
            Not After : Nov  3 03:00:27 2026 GMT
        Subject: CN=18a5e5a8fe8f7da6472fff0871c69bff461c6ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:08:ff:16:a6:79:02:ac:d0:26:e6:9d:7c:
                    63:66:8c:c7:87:c5:a0:69:ad:20:6c:cb:44:9a:3c:
                    34:ae:bd:a9:fc:c9:fb:80:88:27:12:4f:b4:bb:b6:
                    a6:79:c3:ce:ff:4b:26:65:07:f7:4c:b1:48:7b:ec:
                    e6:09:76:e6:9d:37:17:29:3a:9a:fe:ec:87:67:63:
                    34:fe:8c:ae:88:9d:38:64:4b:cc:5e:47:40:ed:6c:
                    04:91:72:95:94:98:03:37:38:e0:bd:ee:03:09:db:
                    73:bf:f7:df:f2:8a:b1:ad:c3:f4:75:18:fa:b8:8e:
                    47:25:10:c1:20:ad:b4:28:6a:9a:12:28:2b:05:53:
                    e7:4d:a3:8b:ef:a6:9c:77:8b:77:c8:32:dc:a2:d5:
                    6c:92:a8:aa:18:7d:c5:26:ff:35:79:b4:d9:6e:f4:
                    f8:1e:3f:fe:aa:b5:88:2c:7a:d0:36:64:8f:cb:5f:
                    8a:75:c6:78:2a:ac:15:19:b8:8a:be:9d:23:52:dc:
                    16:5d:43:da:e6:5b:49:ea:48:d4:38:6e:98:66:d9:
                    37:e6:c0:49:11:de:e2:40:57:4a:3d:f3:cc:c4:9d:
                    1d:9b:80:7c:e5:b6:fe:dc:7e:ca:5e:52:a6:83:30:
                    ad:9b:1d:eb:a4:35:b0:8f:c8:e8:ce:78:4b:2a:cb:
                    69:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A5:E5:A8:FE:8F:7D:A6:47:2F:FF:08:71:C6:9B:FF:46:1C:6B:A8
            X509v3 Authority Key Identifier:
                keyid:8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:60:75:0f:53:41:d0:ca:17:05:0b:79:35:0d:83:73:21:1d:
         72:dc:00:6e:5e:d1:a8:42:f0:30:46:62:27:5a:32:fe:9c:e8:
         9c:06:ac:0c:37:9a:3e:28:0e:53:cc:3f:87:2e:bb:7f:69:38:
         a4:ff:c8:84:bd:0c:c8:7e:b3:42:11:bb:cd:b0:10:6f:28:92:
         d8:fb:dd:2f:4b:79:58:c4:ec:e8:fd:5e:a3:a8:a1:5b:0c:f8:
         c0:fd:6e:95:10:8c:60:9d:ff:05:fa:2c:00:62:39:65:73:a6:
         95:ca:de:70:f8:3f:22:d2:59:c2:72:d9:55:1d:68:9e:e7:47:
         97:92:56:83:49:09:6a:8f:90:91:33:28:2e:88:f8:07:27:82:
         fb:6e:f1:f9:ea:01:19:d2:c8:a0:ed:2a:ed:53:15:ac:70:b0:
         b6:51:40:5e:d3:11:73:68:70:46:af:0d:5d:1b:41:af:fd:52:
         28:28:73:85:95:ee:a8:d1:39:0e:aa:7a:12:b8:43:8c:da:20:
         f8:48:2a:0d:2d:8e:9a:e4:42:da:28:62:fe:93:7b:a0:b0:91:
         8b:75:10:c2:3b:ed:3c:ed:41:56:a9:e2:72:01:75:67:d5:0e:
         60:69:2e:58:40:50:05:57:57:e4:e4:5f:88:cf:77:2c:92:b3:
         10:7c:c6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:27:55 2026 by rpki-client