Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
File:                     fBvFitldp4SStC2IY9Rej2qmqiQ.mft (raw, json)
Hash identifier:          XaQ03KyzddlJT6T65LOftHSm79LKy4hw6pokehk38OY=
Subject key identifier:   05:C7:C8:18:94:78:A5:3E:8F:7A:6E:B0:60:6B:C3:F2:C9:56:A2:42
Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
Certificate issuer:       /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Certificate serial:       01A187F6A391001BDD53D21BA38A97700449
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
Manifest number:          180B
Signing time:             Thu 29 Oct 2026 14:00:50 +0000
Manifest this update:     Thu 29 Oct 2026 14:00:50 +0000
Manifest next update:     Fri 30 Oct 2026 14:00:50 +0000
Files and hashes:         1: fBvFitldp4SStC2IY9Rej2qmqiQ.crl (hash: 9UWmdDJPZd90XstQWbQVt+qGGZhV2jppVxrZs4HR4n0=)
                          2: iS8uMVcfTxV4oFRPmDdhbpSZpws.roa (hash: MP/qvCm1sWW7tlIkjuMYgAfGTXxSGhkZeUhVHpOpueU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:87:f6:a3:91:00:1b:dd:53:d2:1b:a3:8a:97:70:04:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
        Validity
            Not Before: Oct 29 14:00:50 2026 GMT
            Not After : Oct 30 14:00:50 2026 GMT
        Subject: CN=05c7c8189478a53e8f7a6eb0606bc3f2c956a242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:29:e1:15:42:64:bf:b8:64:18:e6:ba:b5:
                    f7:a0:a1:c6:dd:b4:b3:61:47:49:e3:6a:df:fd:00:
                    31:39:a0:24:a2:00:ca:b2:6d:17:3d:dd:13:6f:6d:
                    70:ef:c3:be:8a:80:11:18:4c:38:a3:eb:33:18:5d:
                    e6:42:ee:e9:34:22:4c:f7:5a:c4:72:5a:f5:d5:73:
                    e7:9f:86:70:92:8d:95:10:aa:12:53:26:c5:3c:2d:
                    04:1a:77:5c:9d:3f:e0:64:0a:81:51:cb:bd:af:85:
                    e0:66:80:c9:5b:45:e0:29:b1:c3:a7:8c:d5:00:8a:
                    e6:b1:01:8e:d2:9b:09:e8:ae:cd:0f:69:f4:d3:68:
                    79:82:5c:c2:6c:cc:4e:d5:3e:30:f0:e2:88:93:7b:
                    62:51:7a:4f:94:df:5d:94:9c:f6:6a:71:82:19:4a:
                    ef:ff:dc:4f:af:b9:9a:03:80:7a:e8:53:3f:b4:69:
                    20:09:c2:5b:9a:fa:f8:97:53:48:67:79:b5:14:2a:
                    4f:8d:77:1d:b1:18:00:8a:a6:0c:dc:e8:5f:f4:72:
                    74:06:58:47:ed:60:85:68:4f:36:7d:36:c0:39:c3:
                    6c:3c:92:76:50:dc:30:ff:9c:55:31:ec:13:fe:0b:
                    a9:d6:e0:47:4d:d8:cc:51:23:6d:de:2b:69:bd:e3:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C7:C8:18:94:78:A5:3E:8F:7A:6E:B0:60:6B:C3:F2:C9:56:A2:42
            X509v3 Authority Key Identifier:
                keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:06:d4:e4:ef:c2:2c:d0:11:eb:4d:5d:0a:a5:7f:23:da:24:
         57:f0:14:10:4a:8d:86:a4:7e:51:0f:16:4d:df:be:2c:0f:d6:
         17:19:b5:60:dd:04:9b:b8:d8:3f:ee:e0:94:a7:42:53:39:8e:
         95:d4:3b:64:22:52:1e:48:ed:c0:f8:57:ae:e3:87:a1:60:57:
         e1:0e:1d:40:2a:1b:22:62:a3:9a:bc:f5:3e:80:8f:d0:35:16:
         a6:c8:0d:58:65:24:8d:c5:2b:61:23:4d:dc:c3:a4:ad:f6:c1:
         16:5f:84:bf:68:48:1b:78:f0:6c:0f:41:bf:97:0d:99:4f:22:
         c8:dc:59:d5:bc:4d:3d:bf:5e:62:b3:53:34:9b:b3:2e:a0:b4:
         73:c6:8f:81:ac:9b:2d:02:9e:ec:53:af:c3:fb:8f:1b:6b:f1:
         b7:cf:47:0e:90:1a:1c:2a:56:e6:33:1e:91:66:0f:1c:80:cf:
         4e:e3:2f:a4:aa:26:98:04:a5:7f:63:b4:f1:87:5e:b6:bb:e0:
         f4:00:6f:1c:7a:f8:ad:83:5a:e9:4e:e0:ac:d9:c0:56:d7:d1:
         f8:1e:53:77:84:5c:7d:c1:71:49:e8:4f:74:81:ff:e2:f5:f6:
         82:a4:fd:0e:15:20:27:dd:15:03:93:d7:93:59:62:cb:23:13:
         a6:e3:d9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:11:12 2026 by rpki-client