Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File:                     mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier:          AydU23cKyWYegRZoDi5GQt8wfxUQt+gaMTFJOtb1WbE=
Subject key identifier:   EB:13:A6:CC:9F:71:67:48:A0:57:FF:0C:D0:05:8C:EF:F4:F1:3A:02
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer:       /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial:       01A17C2902981DB6F8A4FA82CA558A033941
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number:          052E
Signing time:             Tue 27 Oct 2026 07:00:24 +0000
Manifest this update:     Tue 27 Oct 2026 07:00:24 +0000
Manifest next update:     Wed 28 Oct 2026 07:00:24 +0000
Files and hashes:         1: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: Fv1QV98RKt5ztmmk9O1lIqfFE0H9osokv7vPfWMfpeU=)
                          2: pYJ77Er_zqYbx41sBdo_5Z_kbUw.roa (hash: YnpRc5L4nUM7CR7mnzL6CNBLZnDMNdSR23HD+fN/hSc=)
                          3: zdVWA8x7Os7mCMN0eXBm1ttPtdc.roa (hash: +6pIktdgc4eoF9sOvoW/ifb/Jig+BT9B1Ye47c39Uds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 07:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:29:02:98:1d:b6:f8:a4:fa:82:ca:55:8a:03:39:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
        Validity
            Not Before: Oct 27 07:00:24 2026 GMT
            Not After : Oct 28 07:00:24 2026 GMT
        Subject: CN=eb13a6cc9f716748a057ff0cd0058ceff4f13a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:bb:00:90:b5:6a:76:53:7f:a1:03:91:e9:
                    2b:6b:ca:71:f9:0d:44:62:d8:bb:56:80:03:8f:bd:
                    de:8a:da:7f:77:79:23:b2:23:60:2f:b3:1c:de:92:
                    51:2e:09:b4:f6:3b:8a:d2:45:8b:17:ba:2f:6d:54:
                    27:ed:4e:9a:70:88:b4:1d:8e:2f:d5:6a:37:d2:cf:
                    6c:5c:c3:c0:fa:f1:f1:bf:63:af:a1:24:e9:70:8a:
                    f3:b5:b0:0b:e9:18:0e:c9:03:74:50:5a:0b:6c:67:
                    36:35:d3:12:01:8e:a3:e9:d4:61:6b:c4:da:5d:d2:
                    cd:c0:3e:5d:46:41:c1:be:19:8d:81:fe:5b:fb:5e:
                    36:e3:ba:35:22:0a:4d:b3:65:09:17:96:c0:9a:65:
                    6b:ed:01:ac:b1:a3:23:bb:d5:45:99:0b:e5:ce:82:
                    02:89:ae:8d:28:27:dc:92:51:72:99:36:59:ec:2e:
                    5a:29:e2:d0:f3:d6:b2:40:e4:f5:ca:e7:a2:48:e6:
                    6d:1f:e5:7f:7d:2a:96:7b:c6:50:08:8a:f0:7b:61:
                    f6:4f:53:3a:70:97:e4:f7:67:02:e5:62:0d:d6:f8:
                    7f:de:50:85:aa:5a:6d:ce:64:25:0f:c1:36:3f:35:
                    4b:76:fb:7f:ae:51:81:f8:9f:f6:f6:69:ea:dc:3e:
                    b5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:13:A6:CC:9F:71:67:48:A0:57:FF:0C:D0:05:8C:EF:F4:F1:3A:02
            X509v3 Authority Key Identifier:
                keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:95:67:02:9c:6b:39:f1:26:c5:4d:ca:75:c3:55:e3:a2:af:
         60:f4:d6:3d:08:4a:24:e2:ae:86:cc:6f:27:88:f8:2d:79:54:
         09:c4:8d:c6:4c:da:c6:22:46:7a:29:33:cd:1e:b4:7b:bc:03:
         91:5c:97:38:30:bb:df:41:73:f6:b1:e9:80:56:11:76:a2:42:
         50:f7:ed:d1:8a:2b:ec:40:c6:cf:06:a6:23:ed:e0:0d:99:e2:
         24:c4:34:e0:e8:e8:10:6e:84:f1:bc:ac:0b:51:92:59:c7:64:
         90:b1:38:82:47:95:bc:03:8c:2d:f1:9b:a4:0b:31:da:6c:f8:
         55:65:b9:79:a6:63:f6:99:af:55:d4:e1:4a:6e:e9:9d:e0:ea:
         6c:88:2f:64:5e:c3:25:84:e0:79:a4:d9:34:84:77:4a:ed:01:
         a3:09:c8:b2:74:ed:91:b4:a9:41:ca:bf:cd:5a:2c:86:60:d0:
         93:8d:68:b6:63:86:99:28:39:48:8c:31:8b:4c:ad:66:7b:c7:
         98:57:4a:98:29:47:59:52:17:d8:1d:2d:34:f0:bf:79:fa:78:
         83:e6:88:1e:67:d4:38:54:74:2f:7f:e0:75:63:b6:f8:40:86:
         b1:9c:d5:af:59:21:37:1c:40:84:19:e8:5d:5c:00:8a:67:a8:
         24:ef:23:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:33:57 2026 by rpki-client