Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
File:                     Mjq1upi-9dDZvQzqAxof4Td3pIY.mft (raw, json)
Hash identifier:          TyBrZot1IWgiHo+QQcHzgNESKdXmbjeNNe0lgOKQtXw=
Subject key identifier:   06:0A:E6:51:CB:D5:3E:54:14:62:2A:ED:04:37:81:DC:89:C1:87:3D
Authority key identifier: 32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
Certificate issuer:       /CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Certificate serial:       01A17C294B25E7FEDF6A47B7C4DAF59ECF69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
Manifest number:          1ACD
Signing time:             Tue 27 Oct 2026 07:00:43 +0000
Manifest this update:     Tue 27 Oct 2026 07:00:43 +0000
Manifest next update:     Wed 28 Oct 2026 07:00:43 +0000
Files and hashes:         1: 4OfU2rfqwcmQHVMCgT7CW5y9Esc.roa (hash: 6c2di21UkdxCdq2ON9gqALGB3nBwbFRZkNvS0qOjJOA=)
                          2: JEARuQCJYCxHv8HfFe-lBL03uK0.roa (hash: 9gO9GtcUyz8FCoLJvfirYDrRc/ywQ/+q2nFc+c77mQw=)
                          3: Mjq1upi-9dDZvQzqAxof4Td3pIY.crl (hash: rwEixn6A49i4Tye/sZxhBTpEyAK2B53iPQMG3yHNB88=)
                          4: hqUy8qtpbSzgGsth7bhGSC_Ob5o.roa (hash: y0DH54HnscuJTZ0/mvHb9xk81GdngOIoXJepxEnN/Is=)
                          5: z8XoAnZ03V47t1hOY-uk-3tN8U0.roa (hash: UcF6sy8hP78bQQegH3qIsA5LxH0dzQkKTfxUjWedo7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:29:4b:25:e7:fe:df:6a:47:b7:c4:da:f5:9e:cf:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
        Validity
            Not Before: Oct 27 07:00:43 2026 GMT
            Not After : Oct 28 07:00:43 2026 GMT
        Subject: CN=060ae651cbd53e5414622aed043781dc89c1873d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:2d:dd:aa:a9:9a:73:28:bc:15:19:af:dd:
                    8f:cc:bd:b0:98:02:96:bc:7f:66:5c:bd:c6:94:64:
                    9e:ee:a3:4d:33:33:23:d2:16:bb:82:88:ca:25:3d:
                    36:37:d7:4c:f3:3b:85:ac:28:39:a2:39:d3:22:5c:
                    cd:f9:f6:dd:6b:6f:21:37:2a:fc:9c:52:6e:16:6d:
                    88:f5:66:ef:ab:71:be:6b:ed:79:27:22:36:fe:e7:
                    71:b2:53:6b:51:86:7d:d4:89:42:a0:9d:05:85:99:
                    53:b0:4a:4b:1b:a6:6d:98:0c:3a:5e:82:00:fb:31:
                    c1:af:24:41:78:58:bd:29:00:b6:69:e6:25:15:42:
                    40:01:19:fd:02:75:d6:73:95:fa:a6:fb:5b:3a:0a:
                    e8:b7:5a:3b:14:ff:6b:3d:31:db:e6:a9:94:0d:82:
                    c1:5b:c5:3c:3a:4a:a5:81:3c:e0:71:c3:00:91:b0:
                    5b:14:18:34:c9:ae:c3:51:15:06:65:6e:07:a2:92:
                    62:78:64:43:91:1e:ae:2e:bb:98:00:a8:bb:61:0e:
                    39:e4:0c:c8:d7:b4:5e:ed:c9:84:e4:00:c4:08:ef:
                    d3:48:89:36:d4:61:e4:ea:58:f7:41:85:30:13:1e:
                    47:67:c3:84:d5:f0:5c:d3:99:aa:8b:0c:cf:25:79:
                    e3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0A:E6:51:CB:D5:3E:54:14:62:2A:ED:04:37:81:DC:89:C1:87:3D
            X509v3 Authority Key Identifier:
                keyid:32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:cf:00:a8:9f:1c:b3:dd:eb:9e:52:b1:11:bb:fe:f0:f4:e5:
         44:81:75:63:7d:e5:85:4d:d4:01:97:b3:87:60:c8:ae:07:8c:
         07:43:f0:a7:e5:df:58:ec:ef:83:87:3c:68:3b:74:98:fc:92:
         83:fc:63:22:3c:aa:f5:90:94:29:1a:0e:1a:a3:39:17:5e:d5:
         27:49:ca:e1:49:f3:03:00:69:23:01:b6:fa:64:5d:37:ff:64:
         b2:61:70:b9:d8:4e:91:39:dc:a8:b6:13:ce:56:e2:b7:f8:97:
         ed:27:74:c7:05:48:59:a8:a6:d0:68:39:59:25:14:ad:04:81:
         9c:7d:bc:7c:09:57:25:ab:8d:e0:80:52:28:a2:82:e5:ab:bb:
         7a:ef:61:83:d3:5c:cc:4c:56:c6:55:f3:19:96:8f:92:87:f8:
         40:b2:5d:0a:ef:11:14:af:58:79:ae:48:9c:6b:96:6f:e2:aa:
         8c:ca:a5:4f:de:cd:58:ed:d3:0c:1a:bd:ed:cd:cc:c8:e2:b9:
         d3:b8:c5:fb:df:1e:a4:50:b2:a9:91:0d:c2:3e:5a:da:d8:0c:
         fa:b6:d3:7f:f9:31:a8:92:50:6b:37:65:12:ce:80:8b:3c:e2:
         95:ff:06:b2:85:c1:dc:01:52:60:19:c5:31:0f:f0:81:45:ee:
         56:9c:dd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:43:03 2026 by rpki-client