Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
File:                     52m60wYYMt6bfXw3Nzf0NGxsBuY.mft (raw, json)
Hash identifier:          RVQX2/jea13EE01FQixHHJSbWnasOA8bHB3VhwR340s=
Subject key identifier:   2B:C4:DB:59:D6:5B:75:44:FD:F9:50:08:10:40:48:24:96:62:A4:E4
Authority key identifier: E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
Certificate issuer:       /CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Certificate serial:       01A13F70AAF9CB212C0869ACE5A6EF78271D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
Manifest number:          0F4B
Signing time:             Thu 15 Oct 2026 12:01:50 +0000
Manifest this update:     Thu 15 Oct 2026 12:01:50 +0000
Manifest next update:     Fri 16 Oct 2026 12:01:50 +0000
Files and hashes:         1: 52m60wYYMt6bfXw3Nzf0NGxsBuY.crl (hash: EvENKRfn2B8DZpsMRKG2Mj1StAi01NzRcYwerwQH3uI=)
                          2: j0JhEA-c9iMD5136iBFWqIHVdMQ.roa (hash: Zp2pE/2Kh9ONHpYyffNxRWr9NvAgWzlzJEozlIUnxBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:70:aa:f9:cb:21:2c:08:69:ac:e5:a6:ef:78:27:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e769bad3061832de9b7d7c373737f4346c6c06e6
        Validity
            Not Before: Oct 15 12:01:50 2026 GMT
            Not After : Oct 16 12:01:50 2026 GMT
        Subject: CN=2bc4db59d65b7544fdf95008104048249662a4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:ed:d9:2e:9b:a4:4e:b9:97:09:34:a5:f2:
                    3f:66:35:50:f1:c7:bb:cc:8a:66:00:a4:6c:a9:2e:
                    8c:ab:71:23:be:87:bd:05:c9:21:af:b4:4e:19:f6:
                    20:13:57:9f:da:00:0d:b4:c4:20:76:2d:62:22:91:
                    77:13:9f:2b:02:83:e8:65:07:da:1a:41:ac:ae:d7:
                    d9:e6:2e:35:0b:65:fa:bd:d0:f5:0e:9c:e9:e8:0a:
                    2f:2e:29:e4:bf:c5:e0:c8:43:d8:af:a6:8d:c9:fb:
                    f9:96:16:39:c8:31:dc:11:18:2b:e2:7d:8e:52:0e:
                    0c:08:7a:4b:e6:19:aa:13:ce:9a:70:e9:84:3a:f6:
                    26:b1:ca:99:60:93:d6:b3:fe:7f:51:ee:48:09:b2:
                    03:19:65:4d:79:63:b8:b1:f0:cb:b8:df:f7:fa:4a:
                    c6:20:44:0f:58:7c:32:04:c1:20:0c:ba:fa:a3:86:
                    79:1c:63:c6:ee:ae:27:50:77:3f:b0:a3:06:47:91:
                    ec:de:a2:e0:1c:a3:1a:e4:cc:21:14:21:10:cf:4a:
                    16:71:3a:79:02:6c:b9:d6:dd:95:9c:be:59:46:2c:
                    74:80:53:57:f4:28:c5:30:f3:91:10:d1:f7:35:c5:
                    ae:ea:8d:69:ae:7d:08:0a:22:ea:81:49:a9:eb:55:
                    ac:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C4:DB:59:D6:5B:75:44:FD:F9:50:08:10:40:48:24:96:62:A4:E4
            X509v3 Authority Key Identifier:
                keyid:E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0b:a7:15:d9:4c:11:04:4c:9d:67:32:fb:f7:7f:a4:b4:04:
         6b:36:0d:6b:1b:8a:df:2e:ca:51:32:16:0c:0b:61:22:c2:dc:
         7a:51:53:b3:31:db:4a:2c:9d:8f:7d:cb:8a:00:5b:ba:57:08:
         55:62:65:b5:53:8b:7c:bf:ca:bc:7f:06:a5:fc:a6:35:f2:4b:
         14:aa:da:77:dd:06:97:92:71:2c:9e:78:56:3a:16:44:19:1a:
         6e:00:f8:60:b8:d9:0b:83:ba:17:49:85:59:fb:1e:67:14:97:
         4c:e3:3f:22:7f:73:55:da:9c:6f:49:a1:e1:99:5f:fd:43:2a:
         39:0e:f4:5e:73:e0:fa:49:bc:45:28:3a:e2:e2:11:c9:74:f6:
         f9:45:35:e7:e9:3b:90:1d:16:54:5c:96:f1:0d:44:de:ba:17:
         fe:19:90:4e:2a:f6:12:4e:cd:c4:96:8e:62:a1:65:fe:32:63:
         71:25:cd:59:00:82:50:66:ae:4e:37:f8:cb:bb:c5:a0:68:f5:
         d9:31:da:7c:99:0c:d5:e5:df:dc:2c:95:a8:4f:2c:f8:e5:e0:
         69:98:67:c0:f6:ee:df:a5:5c:6c:8c:6e:06:7f:ad:cb:22:fb:
         28:47:25:05:85:5e:0d:ec:b8:d7:36:38:51:4e:8a:eb:15:ff:
         46:7b:ba:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:50:43 2026 by rpki-client