Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File:                     jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier:          MtLrxRBTQ0m3GkyKBgt4pzXM48LKU3lS6oZDUW/FZaQ=
Subject key identifier:   57:A7:9E:94:F2:E1:33:8E:91:F7:17:05:24:92:DA:AA:AF:D7:91:4B
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer:       /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial:       01A192E88FFBA051AC7C08BAB2644464950C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number:          0B43
Signing time:             Sat 31 Oct 2026 17:01:16 +0000
Manifest this update:     Sat 31 Oct 2026 17:01:16 +0000
Manifest next update:     Sun 01 Nov 2026 17:01:16 +0000
Files and hashes:         1: X_oexMAynHCssJWS1xXVUpjLPDU.roa (hash: u2YqA2ZR5BhcCK1zVpI632Qbwf1IqH25NXhdjexdM9w=)
                          2: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: e/kXs9WwY/zzD3hl/hbcxVCy+Xm361/6tQEEzgvactU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:92:e8:8f:fb:a0:51:ac:7c:08:ba:b2:64:44:64:95:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
        Validity
            Not Before: Oct 31 17:01:16 2026 GMT
            Not After : Nov  1 17:01:16 2026 GMT
        Subject: CN=57a79e94f2e1338e91f717052492daaaafd7914b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c4:a8:e6:96:e3:f4:27:0d:55:8e:09:d2:3e:
                    15:b2:17:f9:e1:8f:03:61:ec:8f:e1:ed:76:db:44:
                    38:0d:ef:20:fb:c7:bc:14:3f:08:cf:f7:56:c9:4f:
                    2d:1f:39:c9:e9:37:da:d5:b5:42:76:97:b5:10:3b:
                    b4:a9:a4:8a:34:88:2b:4e:cc:ff:18:e4:85:3b:9c:
                    85:17:d5:ee:e3:36:90:10:44:69:d2:95:7d:55:48:
                    b4:b8:c2:27:9f:77:cf:1c:91:8c:19:3a:52:66:24:
                    c6:a8:3a:b4:d7:d9:44:75:5c:2b:7d:bb:ba:bd:aa:
                    bb:73:0d:25:bf:72:ff:6b:a8:80:46:95:d2:12:87:
                    19:f0:12:9e:9a:c6:da:f5:9d:1e:ad:b4:3c:fc:29:
                    ce:b2:9a:19:aa:c5:4e:61:bf:97:43:d0:2e:3e:48:
                    bc:a3:93:0f:8f:cf:b7:90:b2:3a:0d:11:26:2e:ac:
                    b2:69:1a:bd:b2:eb:90:98:e7:99:f5:27:15:4b:4a:
                    74:e9:a9:65:20:f2:70:d0:ba:7b:99:6c:45:e0:88:
                    e0:a8:27:9e:cb:5d:ee:3b:ee:e0:67:ef:a4:75:59:
                    63:d2:2b:3a:60:5c:2c:61:41:61:e9:84:4e:16:c5:
                    4c:be:df:9f:28:04:0b:7c:74:e0:91:f4:fb:98:e4:
                    fe:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A7:9E:94:F2:E1:33:8E:91:F7:17:05:24:92:DA:AA:AF:D7:91:4B
            X509v3 Authority Key Identifier:
                keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:27:8f:41:fa:9d:f0:80:ef:2a:0c:1a:98:5a:dd:77:e2:cb:
         ef:51:7f:c5:54:d0:71:7f:ee:17:8a:12:df:15:1d:c5:71:a5:
         b9:f1:43:63:2c:98:74:81:5a:63:c9:e5:18:cf:97:b6:02:be:
         e2:c8:2a:67:cd:0f:9f:cb:e2:ff:82:61:c8:d4:b8:f6:b3:7f:
         5e:7c:37:71:09:df:ae:7e:0f:47:41:06:9b:68:3e:c9:60:92:
         4d:65:24:b8:0d:bb:27:d1:61:51:42:a3:40:4d:34:32:e2:07:
         68:a9:66:ca:5d:09:59:02:06:26:10:c0:82:32:65:19:69:aa:
         68:99:ba:03:65:04:ad:39:c3:07:62:71:00:91:bb:01:48:82:
         fb:05:1a:17:9e:f2:f8:fb:97:db:83:30:a3:1b:f9:32:e1:f1:
         f8:50:c7:7e:61:b8:35:dd:4d:4a:aa:e1:05:92:30:af:02:b5:
         6d:d1:32:97:55:a9:a4:59:aa:1a:06:e4:86:4d:c9:fe:5d:74:
         d8:96:87:25:86:c4:b5:38:9e:66:81:ef:fa:c7:8e:77:e8:bd:
         5a:68:44:b7:23:81:4a:49:0c:c4:ce:15:72:23:d6:a3:a3:8e:
         5a:3e:2a:e4:88:ec:48:59:b7:2a:25:d4:a4:76:12:1c:3d:05:
         b1:86:27:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:55:01 2026 by rpki-client