Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
File:                     8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft (raw, json)
Hash identifier:          KpOSOXtAH/JNRBh98eZnwwuNyjHBoquvRQsVh58qYhA=
Subject key identifier:   81:C5:DF:56:D4:3E:BC:EC:74:78:FF:2C:D1:DE:79:D5:FC:6A:49:31
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Certificate issuer:       /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial:       01A182999F72F8CE31DDD00AB2B127C448FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
Manifest number:          02B6
Signing time:             Wed 28 Oct 2026 13:01:08 +0000
Manifest this update:     Wed 28 Oct 2026 13:01:08 +0000
Manifest next update:     Thu 29 Oct 2026 13:01:08 +0000
Files and hashes:         1: 0PwBP1m5V8tHPFCHGGYOau0rRTc.roa (hash: M0W/FLJbKezFVRY+boZRSGO4f4RhltYple/V23X0j4c=)
                          2: 1vK1T7KdFH0hBpOuHuKe8W_luZE.roa (hash: qhZOYXpVTc+RHC0IfCFs2RzEIVYZAgoD6YvTFLHwFmE=)
                          3: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl (hash: 6xM/5x3KqL7LI6NDceJGBdXmFDSOogjhDJNnpOQl6kQ=)
                          4: JcePCXWu8_9ZZzjxfVygKM8dWzw.roa (hash: 0S4YgLpuoSBRqOUxV6YpZdqEiuMF4cz82gQj2otpNQw=)
                          5: Md-o3lGIoXUo9ynVTwQnDQUNyzM.roa (hash: AWCf1DkAv4fQq3K+BQw40VyMuDn4MGmNjixx31UPhmA=)
                          6: Nd6V0QCloRDIZfwDcQtVL1w6Z0A.roa (hash: TIjs2IbFM1v00nTvmxBW2uHZechx9jNZhQSCyvBAeP8=)
                          7: O9sJ-_TKMq6bS7__E1UX2XB1imA.roa (hash: +Z6Yn/3PglFToHJ9MMw/pkkVUwEYwsRd5WZO7o88I9I=)
                          8: QEGryiURhVI85Y_iwFPpO1kjb3E.roa (hash: f7QZn8PJdOvgT/DCDoEpmb1SfJG64+IFdudonB3DpJU=)
                          9: S64PRp6HfgfeBA5dqF_nm378oSE.roa (hash: KH+IlbpUNkPXeoQclXeI5i/KLaVnfhqbd5izf4u4qTc=)
                          10: SHnHAD4XActufnWbDbBuCezR5sk.roa (hash: nenlz/3VAG7POjOi6mcs6RNeMaF2/86fDvCTf+cSRc4=)
                          11: Sq_qOTsf7wVB0vwgreS3nB_jIPk.roa (hash: OK/CHpHTM2yPPc6litBPMbap80Y0eTVdGYncN8WvmXg=)
                          12: WFIitC1iC4SxaD-gROSFjGsIGEA.roa (hash: tUjrSM/VRqbKLANp+j7DdS1R8QyDACe7TIIRQbZyYRc=)
                          13: XZAVpeao-MzWMM0T1IBuo6mJOhw.roa (hash: 4OhzlwI1uDhgkruwa46Ix7LBdf/mbvESkAg3CQYlmdQ=)
                          14: bGTHKMCwmJVzyHYU3KNYDg0jpi4.roa (hash: t9eEDkdFYwdSvb8hr3A4ec+b83VLHsVFWQATSd2+69k=)
                          15: bIX0tHr0jNswqPbh1gH8l-5GqA8.roa (hash: 5BjYOxvY1gubdV0c42SuZfXnljPiDdTy3UNiDoGVdu4=)
                          16: bTLlcnL0Fm_nCJarfemQWZlQvug.asa (hash: +U6OavydfvrqqdI9vdtdZM6LAnVLXxOVl7v9NGcpnyo=)
                          17: ea-J5bW7cK-quuNuRi6CFgFcSLY.roa (hash: qIqvWSMcazfocJrExCZsZTdbNeOv46Qe1fgtgnWNwqY=)
                          18: fYhnGLcy2_Ou27KADH18mycTzz4.roa (hash: sP66OdJ/+I0oQxB3kcnMaYSOI2OOAjekthsNq69mxkE=)
                          19: vSXSp5A3lM38ZHU363V73iY2sOY.roa (hash: OEc0FstKUDyge4yjj89lJISWQxLtMasQvdcX8uQFwbM=)
                          20: znznPgmiVfClQspsE4FxbLwuLGk.roa (hash: P3S6+AOoBSM1R2KGeRW8cymJyc/ckeqjjTGRQ6mN/pQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:82:99:9f:72:f8:ce:31:dd:d0:0a:b2:b1:27:c4:48:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
        Validity
            Not Before: Oct 28 13:01:08 2026 GMT
            Not After : Oct 29 13:01:08 2026 GMT
        Subject: CN=81c5df56d43ebcec7478ff2cd1de79d5fc6a4931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ec:cd:64:60:b2:59:33:75:bc:ef:0e:fe:c4:
                    86:37:69:3d:a2:87:d1:88:77:33:31:dc:cc:17:36:
                    81:90:de:45:ab:23:3d:68:d8:96:85:51:c4:bf:ec:
                    37:85:ad:6e:f7:21:e7:1a:c2:22:2a:db:b1:46:f8:
                    d6:c1:69:03:e4:20:f9:18:db:4f:1c:83:83:d8:c9:
                    7c:8e:b7:78:de:81:10:61:06:23:27:8e:8e:e8:9f:
                    97:93:95:d0:f3:30:64:08:92:2d:58:6e:90:ac:3d:
                    ee:68:54:df:37:ff:11:ee:2b:52:98:2e:a6:7f:95:
                    4f:77:b2:c7:4c:5f:f1:6a:16:7e:88:2d:19:b0:41:
                    5e:e3:95:a7:53:07:70:39:a0:cc:97:e5:84:b7:e5:
                    14:b8:82:ea:a6:8f:aa:82:ba:2c:00:91:87:f8:75:
                    86:08:94:16:09:24:91:cb:e4:12:62:a6:84:5c:ec:
                    83:ef:7e:fd:d2:17:a1:cf:b6:3b:71:34:17:50:61:
                    f0:e8:10:28:ac:7a:03:7b:fb:6a:93:f6:36:f2:63:
                    17:2d:0c:a7:2d:b3:37:0e:bb:2c:1e:d3:f6:4d:ec:
                    2f:8d:9f:ab:c6:6c:9b:0d:7b:65:ae:2e:c8:9c:4e:
                    d9:e3:8a:5a:8d:7b:bc:65:f7:4d:98:bf:9f:38:d2:
                    cc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C5:DF:56:D4:3E:BC:EC:74:78:FF:2C:D1:DE:79:D5:FC:6A:49:31
            X509v3 Authority Key Identifier:
                keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:3f:f4:1c:02:6c:dc:cf:90:fd:c5:8b:06:d9:c1:65:b8:cc:
         0d:bd:76:82:67:3f:61:77:01:da:22:c3:81:fd:f0:6c:06:94:
         1a:6a:89:51:64:b7:65:48:6a:e9:7f:fb:4b:46:80:cf:1e:c3:
         07:9a:bd:70:56:ff:9c:79:d3:a7:13:2e:15:c2:3e:e8:65:0c:
         ea:98:f2:73:7c:ca:b4:39:fb:cf:2e:9e:98:4a:8a:9c:b5:37:
         17:a7:55:81:a2:31:37:01:f2:e1:3c:6d:46:b9:4b:be:60:27:
         30:6a:d2:c2:75:81:64:76:53:63:e7:d6:ab:e3:15:59:93:d9:
         02:aa:15:12:92:97:79:1e:07:ee:86:aa:a2:30:03:84:5f:ad:
         9e:f7:6e:28:21:53:94:bc:0c:0e:a7:db:95:70:c6:76:41:ba:
         ad:07:b6:af:6d:66:cb:54:ef:64:a4:5b:0d:39:72:55:86:d6:
         4a:d9:f0:9d:07:6d:8a:d8:6a:e2:96:84:a5:8b:4b:dd:3d:c1:
         f4:03:9e:55:6b:36:9f:d2:fb:39:b5:8e:b2:c8:7c:8f:2a:ed:
         6e:a0:92:4c:f8:c4:2b:d9:39:9c:b8:0b:d1:62:c0:cf:6e:1f:
         78:53:c6:ae:d5:de:1b:60:79:11:0c:c5:1f:79:14:0e:18:93:
         42:f0:ed:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:47:58 2026 by rpki-client