Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
File:                     xMO8BapSq5610YT1CInx_wyQzng.mft (raw, json)
Hash identifier:          IOIU3NxoVtxHmWB1cgzvD92fTnF5LqNYO4xP1mGimj8=
Subject key identifier:   21:98:66:55:32:7C:19:C1:37:38:B3:EE:C3:C8:60:8C:C7:7C:31:AB
Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
Certificate issuer:       /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Certificate serial:       01A1803D65A59C17A990E06F71BA00C8AD4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
Manifest number:          112E
Signing time:             Wed 28 Oct 2026 02:01:09 +0000
Manifest this update:     Wed 28 Oct 2026 02:01:09 +0000
Manifest next update:     Thu 29 Oct 2026 02:01:09 +0000
Files and hashes:         1: xMO8BapSq5610YT1CInx_wyQzng.crl (hash: 3uQWK+4cld2DSwDDPahbUhDwT9Gkui5Q0rPSWD3GZb0=)
                          2: yxsa1Z6d8htC29Yz_UYSQs9RaQE.roa (hash: 1Pk1kRtrAEAz3ywzHSpPnm1BjrrJ1MrQ7aRONAMDNSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:3d:65:a5:9c:17:a9:90:e0:6f:71:ba:00:c8:ad:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
        Validity
            Not Before: Oct 28 02:01:09 2026 GMT
            Not After : Oct 29 02:01:09 2026 GMT
        Subject: CN=21986655327c19c13738b3eec3c8608cc77c31ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:46:9d:a9:51:27:a5:24:22:a1:e4:8e:85:
                    0c:fc:87:99:46:9d:f6:22:76:1b:c9:d9:76:99:86:
                    5e:05:1c:59:21:95:24:af:c7:b5:9c:cf:8a:47:9a:
                    c6:1a:9a:55:1b:3e:33:69:44:41:c4:fd:50:57:30:
                    3a:49:7a:aa:32:d5:b3:04:39:4a:4d:db:a0:79:a4:
                    46:86:53:ab:a4:b3:08:91:08:30:3b:0a:9f:6f:a0:
                    27:c9:16:bb:f6:c3:07:ea:e8:87:37:57:f1:5e:cd:
                    c6:48:df:61:a2:49:3f:e8:82:7b:24:b6:d4:34:c4:
                    c6:22:dd:34:38:da:ba:f2:86:c0:6b:51:9e:a6:db:
                    cc:46:20:7a:24:67:1a:62:a1:76:33:a9:c9:4f:0a:
                    9d:2d:3c:76:d5:bf:65:86:a2:0f:3c:79:d3:a5:2e:
                    9f:d0:e5:e7:75:5f:2c:77:a9:e9:5d:13:4d:b2:12:
                    28:ab:80:47:41:f8:bb:0c:39:d5:f9:8a:84:9a:41:
                    e9:5d:31:4e:df:0c:ef:0f:35:16:bb:87:2d:d6:93:
                    f4:d1:6a:dc:ae:a4:c7:f5:ee:94:ca:ba:03:26:9a:
                    38:94:90:0d:c4:7e:7b:1d:be:0d:3c:5e:cb:46:da:
                    fa:62:83:f0:6a:72:15:c0:44:0f:07:5b:38:63:1b:
                    82:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:98:66:55:32:7C:19:C1:37:38:B3:EE:C3:C8:60:8C:C7:7C:31:AB
            X509v3 Authority Key Identifier:
                keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1c:25:60:8e:76:44:73:6d:09:64:ee:98:85:40:a7:4f:58:
         53:3d:dd:b3:76:a9:62:a9:bc:4e:b9:9b:1d:95:10:b9:e9:6c:
         7f:c4:d5:f3:fe:1c:ff:42:c5:5f:97:e4:55:8f:35:f3:a6:cc:
         98:98:a0:ed:44:84:cb:5c:e6:9a:74:77:1e:f3:95:67:37:d7:
         d9:d5:3c:70:70:c6:62:b2:e1:39:93:09:f4:48:a1:05:38:8f:
         6a:77:33:c6:e0:f5:f2:40:87:72:ae:b3:37:a5:08:42:2a:23:
         7c:b1:5c:5e:3a:a5:79:94:4c:c8:45:f3:95:54:e5:43:41:5d:
         fd:24:2c:7c:f7:d9:c8:69:ba:e4:30:4c:e6:13:3c:af:f5:d4:
         c9:7f:7a:12:ee:ef:c9:49:b1:d4:0d:b8:cd:34:fa:98:68:75:
         62:8b:3a:3a:38:03:1c:ff:d3:a1:b5:b4:60:3e:e0:24:f5:a3:
         b3:a5:f2:c9:ab:44:3d:2e:81:1f:b4:36:27:e4:66:ef:c9:53:
         77:79:b9:f3:4a:16:63:c7:df:40:a4:88:6b:15:15:e6:d1:68:
         78:19:ca:3d:bd:82:c9:4a:d6:57:85:21:31:e5:18:a5:b1:fe:
         2b:4c:f1:ba:f4:be:b7:36:b0:a8:29:cf:09:66:b0:ef:f2:9d:
         65:fa:2b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:23:44 2026 by rpki-client