Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
File:                     RjUoxUCm1XfC0cwabuoXEks5I4Y.mft (raw, json)
Hash identifier:          F/PRuTjwIz552dFx0KoQ1W1xvjV35M+askyAYSMP6a0=
Subject key identifier:   B5:D4:F0:71:87:D3:9E:CF:62:0D:6F:70:63:B5:B3:04:4D:B7:58:3C
Authority key identifier: 46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Certificate issuer:       /CN=463528c540a6d577c2d1cc1a6eea17124b392386
Certificate serial:       01A192434736F11E17BD28D40AD06B1EAC79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
Manifest number:          1AD4
Signing time:             Sat 31 Oct 2026 14:00:44 +0000
Manifest this update:     Sat 31 Oct 2026 14:00:44 +0000
Manifest next update:     Sun 01 Nov 2026 14:00:44 +0000
Files and hashes:         1: RjUoxUCm1XfC0cwabuoXEks5I4Y.crl (hash: ux1Au97n8+m9ukpB0x/8HBw4nNvqoYtqAiqqY7njZC4=)
                          2: sq_j1691pyhvkH9BoIr0BcNKCxI.roa (hash: i+UMV8SIsi3sQ/GKmfxv9CROSQ0ya0P5Ih29wcl+1k0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 11:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:92:43:47:36:f1:1e:17:bd:28:d4:0a:d0:6b:1e:ac:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463528c540a6d577c2d1cc1a6eea17124b392386
        Validity
            Not Before: Oct 31 14:00:44 2026 GMT
            Not After : Nov  1 14:00:44 2026 GMT
        Subject: CN=b5d4f07187d39ecf620d6f7063b5b3044db7583c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:1a:f9:49:83:a5:3a:e5:7b:84:94:3b:7f:
                    12:d8:31:32:b6:24:63:05:84:ff:9d:bb:ab:74:3e:
                    ea:35:ae:e3:97:14:82:4d:f5:ca:ce:e7:80:fe:6d:
                    6b:0c:63:39:1f:e6:97:42:83:31:39:ee:43:36:69:
                    d8:bc:d1:fa:5f:86:46:eb:d2:04:d1:a5:54:43:20:
                    9a:9d:ea:e4:9c:de:bf:10:7b:31:f5:a3:ce:9d:1f:
                    02:4b:74:12:8d:9a:59:9c:d8:ad:fa:aa:99:d4:e9:
                    3d:cc:93:f5:85:a4:ac:de:10:fe:ed:c1:ea:66:cc:
                    31:25:08:00:49:e1:c8:f0:15:10:35:a9:e1:35:9e:
                    60:fe:8b:b1:f2:89:e1:28:e4:e2:13:3c:69:25:f2:
                    cf:69:44:50:fe:8c:8a:af:cc:74:20:27:52:72:37:
                    a2:50:b1:2e:7f:0e:9c:1b:c8:ba:96:f3:37:70:50:
                    58:76:05:b6:bc:39:ac:e6:52:14:a8:53:9e:01:59:
                    96:82:38:37:9d:47:74:c6:f1:d2:76:d5:99:cc:71:
                    e3:a8:4c:bc:f3:2e:16:88:69:91:e5:b7:8e:1e:f2:
                    f5:95:cd:f9:b9:91:39:3f:d6:5d:89:fc:af:39:6d:
                    5f:71:90:5d:cf:6d:eb:cb:75:cf:40:0a:be:c8:8d:
                    e3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D4:F0:71:87:D3:9E:CF:62:0D:6F:70:63:B5:B3:04:4D:B7:58:3C
            X509v3 Authority Key Identifier:
                keyid:46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:df:56:e7:3d:d3:c6:27:cf:2e:6d:10:bf:ef:54:16:90:2f:
         78:93:63:cb:c3:8a:27:26:55:6b:2f:56:3f:1c:ae:8f:1c:7a:
         ba:22:c0:74:8b:22:51:df:f5:34:ee:c8:57:73:d3:a9:24:a2:
         b5:9f:a5:63:97:14:f4:0c:90:af:8c:14:e7:c6:f2:d2:7c:bc:
         0f:cc:13:74:2e:e6:ad:4b:9f:ff:37:46:7a:c1:f2:30:86:f6:
         68:a5:6b:91:9d:65:2e:80:c7:32:03:2d:8a:01:8d:c1:5d:ca:
         2a:41:e7:af:d4:78:a3:3c:c6:e2:4e:98:08:56:cc:90:59:90:
         57:ab:c0:2f:7b:2b:64:d3:bc:a4:5e:c4:b1:ed:ff:f8:fe:9c:
         7a:15:8f:5e:14:d8:12:a2:61:09:76:6b:e4:ce:36:58:59:8f:
         a4:6d:c2:8e:c0:2d:ec:be:4c:c5:e7:d4:96:06:60:97:0c:10:
         e8:db:73:4d:4b:9b:53:26:25:c2:26:ec:21:66:eb:07:0b:be:
         bd:49:c1:92:6f:54:2b:f7:49:e7:97:a8:f0:1f:57:52:c7:c0:
         6a:e8:9f:a6:82:28:30:4a:22:61:d8:94:7b:99:a3:b3:f2:97:
         d7:04:fc:cd:29:56:2b:8a:cf:4e:94:05:b5:91:6b:e2:64:e8:
         e7:4b:92:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 20:41:48 2026 by rpki-client