Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
File:                     jYBF-d8IxTBX6d-ft7eldRA__0o.mft (raw, json)
Hash identifier:          +blvPPT48k9T7k4MZ/QvObmrGwK+r+0FckMMSYPmJvY=
Subject key identifier:   A7:99:1A:63:43:82:01:AE:4D:9C:85:8F:15:FF:54:78:B5:F8:C0:9B
Authority key identifier: 8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
Certificate issuer:       /CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
Certificate serial:       01A197336FCF2E2AFED957EA4315875EE58C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
Manifest number:          05D1
Signing time:             Sun 01 Nov 2026 13:01:32 +0000
Manifest this update:     Sun 01 Nov 2026 13:01:32 +0000
Manifest next update:     Mon 02 Nov 2026 13:01:32 +0000
Files and hashes:         1: 0wmiIEGgBNaM0SH3E3jDJzi9lvA.roa (hash: 5FuZkazkiJGDrvBOsL3FrqVNzaE9M0HyAMUTf9d4FZQ=)
                          2: jYBF-d8IxTBX6d-ft7eldRA__0o.crl (hash: mD6EdmNPiMZlsu6MiJfzVVfBQfM+wYqCyQUl/RMEkdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Nov 2026 13:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:97:33:6f:cf:2e:2a:fe:d9:57:ea:43:15:87:5e:e5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
        Validity
            Not Before: Nov  1 13:01:32 2026 GMT
            Not After : Nov  2 13:01:32 2026 GMT
        Subject: CN=a7991a63438201ae4d9c858f15ff5478b5f8c09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:cb:82:3e:e5:9a:d5:85:ed:bc:49:ca:2e:
                    58:57:88:7d:db:1a:41:72:2a:a9:2c:90:48:fc:96:
                    48:6a:de:0b:a7:ae:89:9b:a5:d8:60:bc:b2:41:3a:
                    c0:13:32:83:ce:22:bb:ca:8c:35:d7:bb:b5:dd:5c:
                    af:7f:87:12:f9:dd:46:f9:82:e3:ed:20:33:d2:9e:
                    e9:48:55:51:bc:c8:79:27:1d:f6:81:02:38:b9:a0:
                    5a:86:bc:69:65:83:81:6b:f9:cd:1d:30:4d:9f:fd:
                    cc:36:c8:01:68:db:3f:f8:e5:a4:04:71:d6:2c:14:
                    be:d8:a4:0b:9c:43:f4:56:e1:e5:f5:9d:6c:13:a3:
                    59:7c:e8:21:23:19:47:8d:34:a7:1b:82:a8:73:40:
                    8c:20:38:31:1d:1c:ef:9f:4b:3b:76:2c:cb:20:73:
                    9e:3f:31:17:49:9b:13:9c:1c:b5:62:60:22:83:07:
                    4a:6a:16:46:87:b7:c2:99:9b:de:54:69:c3:18:8c:
                    0d:eb:f2:a3:4a:4f:8c:4a:e2:40:cb:dc:19:79:54:
                    07:18:42:6a:bc:98:55:09:94:8c:ae:c2:52:25:12:
                    cb:54:57:fe:16:13:11:4b:08:a2:24:26:7b:0c:7e:
                    48:72:04:28:30:29:ae:28:e7:48:34:e7:f7:9c:a7:
                    3d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:99:1A:63:43:82:01:AE:4D:9C:85:8F:15:FF:54:78:B5:F8:C0:9B
            X509v3 Authority Key Identifier:
                keyid:8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:97:4a:b4:4b:5e:a4:dc:2d:3d:14:c7:57:ec:0e:ee:2d:f0:
         66:da:89:aa:7e:05:4c:bd:1e:f6:a5:eb:95:43:8a:ab:d7:f9:
         72:44:28:72:34:a2:52:ec:92:bf:df:00:a4:0c:2c:f2:0a:ab:
         96:7c:12:fc:57:be:f7:ad:7f:a9:84:77:4a:6d:50:f3:cf:29:
         c0:2b:cd:a1:dc:3f:ec:6e:4e:e6:51:f6:17:f6:85:df:8f:cc:
         6c:15:8d:94:76:d4:59:19:2c:36:8f:4b:f6:b1:fe:a6:a3:69:
         c9:0a:7b:ff:50:06:7c:a6:87:9b:db:61:54:a1:b3:84:79:11:
         11:23:81:a9:93:0b:4e:c7:6d:46:8d:47:f6:6f:1d:3c:92:a0:
         9a:83:f7:a3:de:cb:52:bf:04:ec:2d:41:9c:7d:d4:b9:32:84:
         7f:3d:d5:68:22:20:16:7e:08:1c:91:ab:01:5a:86:90:c8:79:
         6b:8c:70:9e:ad:c0:28:bd:77:67:1f:c6:c4:38:35:1c:0b:63:
         f6:c7:ec:2c:83:fa:ef:09:8e:5e:44:83:d7:8b:b4:86:86:17:
         30:e5:f2:f6:c2:cc:bb:6c:1c:07:5b:12:0e:32:e0:73:78:6a:
         78:65:46:a1:92:d8:94:29:72:f8:0a:4b:5a:74:57:02:48:52:
         1b:9d:c2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 18:38:52 2026 by rpki-client