Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
File:                     RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft (raw, json)
Hash identifier:          FFiO280AlfojMBjEAXlbPpR6OrkILxWXsMZ5gH0kAWY=
Subject key identifier:   F0:79:F7:B8:1F:EB:D0:A9:50:B5:FF:50:B4:4A:24:13:2F:E2:6F:EE
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Certificate issuer:       /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial:       01A16CB6AC87D4F0FDEAA03823C0A46E2571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
Manifest number:          0921
Signing time:             Sat 24 Oct 2026 07:01:13 +0000
Manifest this update:     Sat 24 Oct 2026 07:01:13 +0000
Manifest next update:     Sun 25 Oct 2026 07:01:13 +0000
Files and hashes:         1: RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl (hash: eowXJWntRZv+Kfq0ny+lWXC/fqHJP6xGtwFm6BwSbIs=)
                          2: dksbh_tx3bU5Ok0WztbuReiYrpU.roa (hash: NSSCxFWQG/xHAi2bn2Rv8MYwRip8Bj4kZ82RJfLw3As=)
                          3: gRmXeW_g4XWlJoD-3VX4J1-7IpU.roa (hash: D7tJT81Ih/7yE0Ex5L+2xy+fHBPkeGvPOLXrDK+WOqg=)
                          4: miAb-8PhHCi43bUCI_hLnwDESQM.roa (hash: R+HHUuhd28D1d5kF4bYGuzan7r+ujmUekbJUkPeHQ9U=)
                          5: vrN1ckiG11RIjmLBs3NUdn3vLXw.roa (hash: r1+gve8otRlqQvYmhKMUDpHufcQSUz4Vi42HDaDr78E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 04:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6c:b6:ac:87:d4:f0:fd:ea:a0:38:23:c0:a4:6e:25:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
        Validity
            Not Before: Oct 24 07:01:13 2026 GMT
            Not After : Oct 25 07:01:13 2026 GMT
        Subject: CN=f079f7b81febd0a950b5ff50b44a24132fe26fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:42:9c:d7:a0:cc:20:28:9c:90:f7:58:d7:
                    e4:21:a7:55:6e:80:ad:f9:1a:27:bf:dd:eb:cd:a8:
                    a0:5c:39:ff:c5:de:0b:d3:c8:73:24:7e:3d:69:2a:
                    5e:bb:ef:21:74:6d:68:97:69:2e:b6:e3:56:4c:94:
                    56:8f:7b:81:27:b8:0c:87:7c:c5:49:29:ba:d7:71:
                    8b:13:b1:6e:c8:29:59:0e:17:f4:8e:d2:92:f5:f6:
                    2c:b3:e4:12:ab:b9:f6:b7:66:36:48:61:0d:24:79:
                    30:40:3c:65:fe:19:db:59:fc:49:7e:8c:03:52:a2:
                    ed:5a:46:cd:cd:f4:77:ba:ae:e4:c2:13:8c:62:fa:
                    3b:90:36:ed:fb:43:e8:00:4a:ed:20:74:1f:44:ec:
                    74:00:d7:1e:eb:40:ce:34:17:59:97:29:07:7c:82:
                    11:e2:6a:75:1c:82:6b:71:5c:db:fd:a2:64:e2:a1:
                    84:83:24:0a:e0:11:8c:32:01:a8:25:76:e8:7a:2b:
                    ef:d4:da:a6:95:c5:6b:69:49:f5:e5:ff:2f:6d:50:
                    06:e6:70:a9:a2:eb:54:45:68:3e:b7:78:2a:62:be:
                    d7:ff:a3:64:af:5d:a9:a2:56:95:55:e6:bc:15:23:
                    a4:cc:8b:fc:d3:f7:fc:1a:d5:0d:25:ac:e9:f3:89:
                    1f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:79:F7:B8:1F:EB:D0:A9:50:B5:FF:50:B4:4A:24:13:2F:E2:6F:EE
            X509v3 Authority Key Identifier:
                keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:48:0e:ac:fa:af:d2:57:6c:af:7a:7d:68:ad:20:e7:83:d3:
         be:be:db:33:92:8a:f6:df:d0:ff:48:d8:c2:47:f1:55:7d:17:
         a0:3b:61:05:30:24:4d:04:e9:96:dc:b9:48:62:a3:93:05:a8:
         32:c4:c0:a2:c2:eb:90:84:de:bc:75:aa:21:af:14:c4:21:6f:
         68:f9:44:30:48:8f:8d:46:c4:27:15:5b:f4:f5:43:e5:c5:e1:
         fe:83:f7:3d:1b:18:64:f4:4f:91:f1:37:d5:57:13:8b:48:e6:
         fd:b9:84:d9:1a:f9:76:3d:35:93:91:6c:b2:93:6c:47:34:61:
         8e:e1:f7:8c:aa:4c:cb:81:55:bb:7e:88:e4:0b:d9:90:d5:a4:
         e0:79:30:b8:60:13:ae:82:1e:d8:54:6e:a2:9c:c1:00:07:50:
         58:66:da:b1:09:e0:38:a2:74:5d:1b:38:35:db:4b:57:12:79:
         71:99:c6:19:57:21:0b:af:10:17:1b:1f:1e:94:03:0b:0f:1f:
         b7:e4:81:b7:0e:8b:25:ff:53:50:89:e6:2c:19:51:22:57:70:
         77:f7:ee:00:58:40:85:10:50:47:66:46:9f:5a:eb:0e:2f:90:
         d0:9e:bc:e0:70:2e:f2:66:32:91:c6:ee:de:42:f1:b4:ce:38:
         c8:8c:58:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:19:43 2026 by rpki-client