Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
File:                     JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft (raw, json)
Hash identifier:          vNUuARTVeRQLHrHLbHyRxhrqSqOP0cGnQbI6/g7KiFE=
Subject key identifier:   23:F0:FC:49:F4:55:BE:62:FB:5C:41:7B:30:54:53:FE:93:EE:97:F6
Authority key identifier: 26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B
Certificate issuer:       /CN=26251cf7d8d6d057dc64715ba836299df39fd85b
Certificate serial:       01A18C782E155310027CDFD391C94BF05861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
Manifest number:          0432
Signing time:             Fri 30 Oct 2026 11:00:48 +0000
Manifest this update:     Fri 30 Oct 2026 11:00:48 +0000
Manifest next update:     Sat 31 Oct 2026 11:00:48 +0000
Files and hashes:         1: JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl (hash: SlsmA8+YBBEzkUiZp0VVcr8x8BGamaF6YlMNTO/D6EI=)
                          2: fX-rHvxMS7rGe-P0kdh6qBCV0kw.roa (hash: YxEpHCuxMU6/BR/ByERCcyICEyXZ5/Zrc7JTg1hXiro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8c:78:2e:15:53:10:02:7c:df:d3:91:c9:4b:f0:58:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26251cf7d8d6d057dc64715ba836299df39fd85b
        Validity
            Not Before: Oct 30 11:00:48 2026 GMT
            Not After : Oct 31 11:00:48 2026 GMT
        Subject: CN=23f0fc49f455be62fb5c417b305453fe93ee97f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:eb:e6:63:b2:25:b6:18:25:1c:7a:a3:6c:
                    e4:b6:9c:2c:1f:50:97:7f:0e:42:d3:4f:8f:0c:a9:
                    e7:76:a2:bb:94:ce:80:26:b2:05:b9:e5:0b:99:58:
                    69:7a:77:d4:62:69:cd:88:62:13:ef:52:f1:28:66:
                    36:39:7f:e6:92:2f:ac:3f:40:53:e6:84:46:64:60:
                    1a:64:2e:db:4c:e6:d9:a6:57:7d:61:01:b6:bc:53:
                    66:5c:df:78:fe:da:70:91:bf:2d:62:e5:fd:60:81:
                    86:02:5a:88:cd:82:35:8b:62:cb:b4:10:93:db:ab:
                    f6:60:db:73:04:18:c7:9c:bf:f4:6f:60:c1:be:0f:
                    61:84:4b:cf:35:f5:f0:82:2f:1c:94:1f:4a:14:1e:
                    6e:e2:87:aa:3f:41:39:a7:53:03:be:63:e9:fc:f9:
                    d3:d2:05:6e:aa:4b:5d:90:67:de:81:da:82:55:03:
                    27:e5:36:9a:c9:b8:e1:7c:bf:66:77:07:de:1f:f6:
                    38:df:0c:2a:82:34:c8:0c:5e:95:61:cb:1b:81:cb:
                    c6:c1:b0:15:ea:51:3e:52:17:46:c9:ec:c8:17:93:
                    b2:c2:32:a1:62:88:d2:4b:d6:fa:8a:cd:96:38:c3:
                    35:2f:cd:d8:37:e8:12:bf:ef:c7:5f:14:24:0c:8e:
                    b2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F0:FC:49:F4:55:BE:62:FB:5C:41:7B:30:54:53:FE:93:EE:97:F6
            X509v3 Authority Key Identifier:
                keyid:26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:cc:d8:ab:6d:f7:80:d3:25:6a:64:8f:8b:52:06:af:12:1c:
         a0:f9:6c:79:3d:f0:8d:3e:5b:9f:5e:97:42:7d:cc:62:80:15:
         3c:14:43:fb:3f:45:c4:f3:0c:56:e9:c4:37:3e:6b:4e:dc:97:
         1c:95:dc:27:f9:0b:eb:70:ee:cb:9b:f0:52:c7:c6:6d:cd:25:
         a9:96:9d:38:f2:7c:b9:9c:d4:c8:70:08:44:8e:55:02:bf:a4:
         c9:67:6d:5b:5e:86:8c:0c:f7:72:ab:b3:22:9e:00:6b:38:3e:
         af:7a:1e:c2:9f:b5:de:ee:05:28:9e:ae:45:f4:e8:c6:f5:a3:
         68:57:b9:01:14:31:f1:60:03:bf:73:a6:d1:a6:68:27:03:96:
         8b:50:c5:6a:96:72:cc:2b:17:84:8c:2c:3d:fd:1b:bf:23:ee:
         e1:dc:99:96:8c:46:ac:5c:a9:84:75:5d:b0:30:2d:59:f7:32:
         5b:0d:c9:5b:59:8b:c3:ec:4d:e4:c6:73:c9:c9:a2:56:80:86:
         f9:9d:cb:82:3d:00:b5:8c:a6:f5:6e:38:da:75:c9:c5:9f:c8:
         0f:4b:c3:1f:d1:fa:20:e8:ce:eb:f2:35:0e:6d:a5:c9:73:5a:
         4d:8b:8e:fb:00:ed:a4:18:52:05:47:2f:80:a7:a5:1f:f4:3b:
         1d:52:7b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:23:09 2026 by rpki-client