Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
File:                     w1k2RMcJGfYIPygZpz89Oeucteg.mft (raw, json)
Hash identifier:          mzQwqkdhxYIu/5CQjyVm+xWtpiHvhzRL/GBJe60oRPE=
Subject key identifier:   79:5A:79:FD:B8:98:9C:0A:D9:E4:76:82:ED:3F:E6:61:10:63:2D:3F
Authority key identifier: C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8
Certificate issuer:       /CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
Certificate serial:       01A18F7921CA54B5FDEB452277182D8FA0D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
Manifest number:          1394
Signing time:             Sat 31 Oct 2026 01:00:42 +0000
Manifest this update:     Sat 31 Oct 2026 01:00:42 +0000
Manifest next update:     Sun 01 Nov 2026 01:00:42 +0000
Files and hashes:         1: w1k2RMcJGfYIPygZpz89Oeucteg.crl (hash: oHYnH+JHpIg4U4ronH7H370sEN50opczSrSv9ht3IBg=)
                          2: x4-mHKJb7bMwY9GE86KAS0BLgKg.roa (hash: ++8zNyvezH+pL+l7TXoCaIybHlTSo3lc/2BXe8F2UWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8f:79:21:ca:54:b5:fd:eb:45:22:77:18:2d:8f:a0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
        Validity
            Not Before: Oct 31 01:00:42 2026 GMT
            Not After : Nov  1 01:00:42 2026 GMT
        Subject: CN=795a79fdb8989c0ad9e47682ed3fe66110632d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:99:fd:a0:5f:bd:11:67:81:c1:5f:19:9b:be:
                    04:8f:ea:ab:3d:3b:3d:33:36:a4:64:71:89:40:4b:
                    3d:72:41:1f:ee:68:f3:4c:ac:4f:bb:28:b4:6d:2d:
                    9b:6a:62:7d:16:ff:c3:80:db:94:9a:ac:e1:f3:5e:
                    e8:b8:6d:fd:f0:43:db:fb:c4:69:02:85:ec:fa:66:
                    be:0c:98:cb:2e:8a:18:ad:89:9e:fb:e2:3d:f0:a2:
                    ae:5f:61:f8:35:5a:2f:6a:4d:81:15:42:23:e0:35:
                    8b:64:01:ba:5f:f7:4c:08:96:80:32:43:bf:d0:0a:
                    37:70:f8:05:8f:54:f8:4f:85:5d:b3:7f:12:5b:03:
                    ae:54:63:4b:4d:e8:d7:13:be:a6:26:1b:31:c8:e5:
                    fb:0a:08:9b:23:30:ae:00:88:ef:38:f7:d9:f7:bb:
                    10:83:1c:bd:ed:1c:cb:1d:5e:f1:9c:0f:42:ef:6f:
                    da:4a:f8:70:98:a4:95:96:38:2b:d1:db:71:dd:54:
                    fb:3d:7c:cf:bb:86:b3:ce:23:21:85:75:dd:12:64:
                    e4:19:37:7a:31:27:a7:64:52:9b:76:19:66:8a:8d:
                    b6:86:23:27:00:b5:13:b5:a3:c5:a8:4c:47:98:d9:
                    0d:84:2b:58:32:25:bf:57:bd:af:68:eb:7e:4e:9d:
                    50:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5A:79:FD:B8:98:9C:0A:D9:E4:76:82:ED:3F:E6:61:10:63:2D:3F
            X509v3 Authority Key Identifier:
                keyid:C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ae:32:95:f6:26:20:2a:18:72:76:99:5d:2b:cd:f1:cf:38:
         21:66:fa:92:6b:a1:ff:73:33:a9:c5:12:32:33:8e:15:67:6e:
         02:1c:f4:22:15:69:cf:c9:85:ac:80:ac:8f:86:75:0a:d9:bd:
         70:41:c2:0f:56:59:37:d1:df:fe:ca:72:b0:e9:8a:db:f3:f8:
         a8:2f:b2:09:2f:71:b2:d0:6d:51:9f:a4:6a:f1:bc:3a:de:db:
         f8:43:99:9f:14:53:af:57:ea:e3:c3:83:91:4c:2f:c4:e6:71:
         8e:e6:e7:51:70:5a:c8:53:1c:9e:f5:76:e2:e2:2e:4d:04:e3:
         0d:ee:64:9d:fb:8a:92:ee:f7:3f:d1:f0:47:20:fd:54:47:b4:
         24:36:3f:3c:63:60:e0:ff:7a:b3:32:1e:df:4b:ad:f3:3f:60:
         ed:d7:e4:af:ff:e9:82:06:58:7f:15:83:41:c2:c9:cd:9b:25:
         05:8f:d6:40:55:04:9d:f2:75:d5:2c:58:61:d0:62:71:ee:12:
         5c:9f:46:5c:fc:90:f9:86:e7:f3:a5:29:37:e1:55:01:3b:7c:
         93:58:1f:63:d1:09:cf:f9:61:4d:16:5e:16:d0:ff:b9:d5:6e:
         78:b5:58:f7:ec:bc:29:af:a2:df:63:1c:98:44:24:d6:61:49:
         7c:5c:34:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:49:11 2026 by rpki-client