Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
File:                     _2JWLK6HP0_EoyMr9J3VNDtwhPk.mft (raw, json)
Hash identifier:          4xyL2JcPvk/SIZUbpQn5uw4gsNu4DnI64yCQLMgE+SI=
Subject key identifier:   32:93:BB:C1:C3:46:A2:90:2F:2F:9F:AA:CD:61:35:C6:3F:DB:B3:DE
Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
Certificate issuer:       /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Certificate serial:       01A17D737FF6FA2969D65966508845DBE9CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
Manifest number:          19F9
Signing time:             Tue 27 Oct 2026 13:01:23 +0000
Manifest this update:     Tue 27 Oct 2026 13:01:23 +0000
Manifest next update:     Wed 28 Oct 2026 13:01:23 +0000
Files and hashes:         1: A6rxUEeDAXZKd2bfFtADSoZcC1o.roa (hash: +1AJC/T1uy51K3cG4QOtn84Jtoxq5VjE/ru2294aRv4=)
                          2: _2JWLK6HP0_EoyMr9J3VNDtwhPk.crl (hash: BqVUXTHHddHNFaXylnPACoun3mW616Oi2a+vPzsvW1w=)
                          3: _ZWSKkXuBHjiv-L0PixHTIHZOdQ.roa (hash: qe6ihhT3yR6t7+njBEvLfRsvgRV0ISuyHcZNmPr71D4=)
                          4: vMS7tozWQCg81akMpQlvwwiR_ks.roa (hash: JSFXNsgb4AQiEP8H2GgAtdgJfsJbL3EKa9NCHLcfnBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:73:7f:f6:fa:29:69:d6:59:66:50:88:45:db:e9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
        Validity
            Not Before: Oct 27 13:01:23 2026 GMT
            Not After : Oct 28 13:01:23 2026 GMT
        Subject: CN=3293bbc1c346a2902f2f9faacd6135c63fdbb3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:21:87:ae:22:73:d6:b4:07:68:43:7c:d8:
                    6e:b0:67:5d:ae:2c:14:d2:99:77:03:bb:cd:8b:d6:
                    36:df:72:26:0d:22:22:3b:1f:1c:1a:4e:29:95:f6:
                    48:3a:76:24:94:1b:ef:82:6d:9a:e0:f4:11:bc:63:
                    9e:18:12:0c:13:02:54:33:0d:4f:5d:7f:d5:c2:ff:
                    43:06:69:48:ba:8d:d4:68:87:94:6d:69:ee:68:73:
                    7c:21:66:ff:76:3a:56:28:fc:c3:b2:89:c7:95:64:
                    d3:22:37:95:cb:4d:14:75:74:35:16:08:ec:ac:79:
                    c9:9c:e4:23:17:e7:bb:79:44:d0:4e:a5:17:56:4f:
                    bd:c3:b9:3e:1d:32:78:5b:b6:ad:04:64:be:78:ee:
                    5b:61:64:b6:d6:1a:5a:df:f4:7b:ae:e0:ef:02:b1:
                    6c:05:ab:bf:1c:b5:0b:e2:06:31:aa:2a:f3:2a:88:
                    8a:39:d3:13:3b:7f:82:66:83:33:19:13:fa:a0:1b:
                    68:61:e0:e8:59:97:6a:f9:9f:56:1f:a2:64:61:74:
                    a3:f2:86:0b:ec:f0:ea:7a:37:39:50:d4:47:33:26:
                    6c:93:69:48:fa:fb:b8:17:e7:d3:c3:0f:96:1b:6e:
                    8d:7f:66:a6:ef:43:30:c2:16:1b:5f:c8:bf:69:c2:
                    72:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:93:BB:C1:C3:46:A2:90:2F:2F:9F:AA:CD:61:35:C6:3F:DB:B3:DE
            X509v3 Authority Key Identifier:
                keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:3c:9f:46:4e:ed:e2:61:56:b4:f1:6c:f3:0b:9d:81:b9:91:
         f2:39:71:da:15:59:bf:48:42:95:c9:5e:73:91:1f:d9:7a:7e:
         3b:00:cf:ef:11:04:92:7e:36:e0:15:ed:22:0e:9f:e6:7c:f8:
         cc:44:b0:0f:a7:b8:97:45:52:33:d3:2a:6b:d6:7b:60:50:72:
         e2:d4:53:56:67:cf:53:17:2e:98:a3:9a:5b:56:f2:9b:a3:b2:
         04:56:91:37:42:82:a7:b8:0b:60:ca:66:e4:ff:f7:3f:ff:0f:
         ca:b6:f6:a1:6e:29:96:a1:c8:3c:68:52:6d:07:df:01:15:4e:
         45:4f:b6:cf:42:6d:1d:6c:a9:38:ed:94:66:df:8a:a2:2f:ba:
         3f:70:33:b1:c3:9b:95:7f:e3:f5:07:76:2f:7f:ea:59:e1:7a:
         8b:3d:8a:5f:b2:5e:29:96:d2:9a:b6:0b:7d:ec:0f:bd:f5:29:
         17:c8:f4:f9:ea:e1:06:cf:4a:60:e4:a9:3e:ab:bf:40:5d:5d:
         59:60:07:8e:0c:e3:fa:e7:64:63:64:7b:f7:86:32:1e:6e:5d:
         a8:66:4a:3a:98:79:7d:85:25:5c:da:81:bd:ac:87:47:06:bb:
         24:ad:75:05:fd:ed:5c:f3:fc:22:65:d8:a2:aa:cc:24:9d:7a:
         40:de:2c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:40:00 2026 by rpki-client