Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
File:                     tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft (raw, json)
Hash identifier:          wEFDqHbI7wZ/W9AN6zPkXCDDF4kJmDtl4L4MYMbG2Lw=
Subject key identifier:   83:0E:D1:D2:C2:88:BC:83:38:28:AD:81:C0:DA:7F:4C:87:4C:C4:45
Authority key identifier: B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
Certificate issuer:       /CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Certificate serial:       01A18977DD3CDCD36B6CCAEDAE4729406285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
Manifest number:          10B8
Signing time:             Thu 29 Oct 2026 21:01:36 +0000
Manifest this update:     Thu 29 Oct 2026 21:01:36 +0000
Manifest next update:     Fri 30 Oct 2026 21:01:36 +0000
Files and hashes:         1: 5DPQKVh7BOyXWi6HVipGuI-DbKI.roa (hash: 7niXhQfcaYijhdxK0OqWBqiveT28StizLbsME/eXTCM=)
                          2: tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl (hash: 0M6OLtAAGzGtP5zvibLNKYCnspPWnA/3w0PNOWqdQbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 21:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:89:77:dd:3c:dc:d3:6b:6c:ca:ed:ae:47:29:40:62:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
        Validity
            Not Before: Oct 29 21:01:36 2026 GMT
            Not After : Oct 30 21:01:36 2026 GMT
        Subject: CN=830ed1d2c288bc833828ad81c0da7f4c874cc445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d9:e2:3b:b8:6e:f0:6c:4a:35:77:b0:54:84:
                    4f:91:86:32:96:92:4d:9a:eb:2b:f6:6f:ac:7e:58:
                    94:4d:83:1e:2a:6a:12:12:2c:c0:18:9a:cd:4c:25:
                    e7:82:3b:4e:fa:ed:f0:b3:c3:13:ac:cd:e1:85:cb:
                    56:6c:84:8c:0b:c0:68:9f:76:3f:d1:5e:cf:12:29:
                    d0:28:ff:a4:04:df:56:3e:ca:d4:17:5d:24:92:d2:
                    73:59:27:bc:db:b5:fd:93:78:3a:20:66:85:de:0c:
                    95:58:bd:9f:a2:13:2f:0f:97:ef:8d:37:91:00:88:
                    3d:c4:5f:1c:18:17:60:67:08:5b:fb:dd:40:1f:f8:
                    d3:a2:f3:0b:c2:27:f2:2c:7a:01:b0:47:a0:d4:96:
                    18:8f:c5:43:e8:68:8a:37:1e:a2:d8:f3:c2:5f:6d:
                    cb:0f:34:54:80:3d:3d:f9:a4:dc:f2:d5:aa:8c:7b:
                    de:37:e9:70:32:0e:b2:8b:9d:09:3f:3e:db:5a:0f:
                    b6:4f:0e:ce:52:f6:15:44:3c:ee:c1:8c:c8:57:83:
                    e7:cf:43:e9:65:b1:c9:8e:71:d0:06:64:ed:41:92:
                    aa:2e:68:df:87:65:49:36:32:36:32:ca:9c:c0:f8:
                    14:35:c1:0b:b7:1a:00:98:f0:1c:ec:54:11:a3:55:
                    be:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0E:D1:D2:C2:88:BC:83:38:28:AD:81:C0:DA:7F:4C:87:4C:C4:45
            X509v3 Authority Key Identifier:
                keyid:B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a5:56:30:72:50:34:b2:66:3a:0f:2b:99:4d:e5:0a:66:69:
         bb:e1:4f:7b:f8:8b:dc:88:12:18:45:9d:98:c4:f0:01:95:6f:
         15:71:8b:04:0f:24:8c:7c:11:0f:c6:8e:13:fd:22:42:df:93:
         e5:65:d7:65:6f:17:d5:ac:e0:f3:40:1b:08:f5:cb:e5:6f:00:
         49:36:35:a8:be:df:88:0f:47:2e:b8:c4:89:45:ad:ce:aa:25:
         38:05:4a:fd:3e:37:e0:55:92:47:5e:a8:b5:e3:aa:72:27:e8:
         cb:97:fa:39:da:fc:c0:11:2b:a3:6d:af:f7:ba:8a:c4:46:e8:
         59:71:b3:b0:42:be:85:2c:80:e9:6e:d6:73:61:51:03:74:c3:
         42:b5:28:99:2a:64:ae:d6:6d:e0:96:21:77:95:67:aa:aa:c6:
         93:e5:0e:96:25:b0:a6:82:e2:cb:a7:dd:e3:1a:65:67:08:a6:
         21:aa:6f:6a:8f:91:d6:23:f8:e9:a6:e2:97:8b:cc:77:fe:7e:
         89:9f:27:25:36:1c:89:4f:ff:91:02:c9:7a:fe:75:d9:c6:91:
         36:d9:68:eb:53:53:43:d0:4c:d4:cb:91:12:0b:b7:9a:d9:de:
         3f:a6:07:f6:c3:ab:b7:ba:fe:d1:fb:cf:4f:13:dd:0c:a6:90:
         06:00:b2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:09:02 2026 by rpki-client