Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File:                     Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier:          Yr6A55LUJJd0q/8ozo2eNYQ83DSKbE5Eas4uCQltXTc=
Subject key identifier:   AC:BF:A7:CD:04:A1:E0:8E:3E:C9:1C:C4:49:11:BC:15:B2:B1:80:5F
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer:       /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial:       01A18A897ABA7DAB9CB3A12311561AA8ED31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number:          1011
Signing time:             Fri 30 Oct 2026 02:00:27 +0000
Manifest this update:     Fri 30 Oct 2026 02:00:27 +0000
Manifest next update:     Sat 31 Oct 2026 02:00:27 +0000
Files and hashes:         1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: OwpjrkBExmRodk9zWnYjV2voHzQoHCSiGv0camMLfPw=)
                          2: b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa (hash: HGRxKRl+EVaZgrGClx+TSy5HdfcfRc78fy6SCMHEA/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 02:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8a:89:7a:ba:7d:ab:9c:b3:a1:23:11:56:1a:a8:ed:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
        Validity
            Not Before: Oct 30 02:00:27 2026 GMT
            Not After : Oct 31 02:00:27 2026 GMT
        Subject: CN=acbfa7cd04a1e08e3ec91cc44911bc15b2b1805f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5b:0e:09:5c:3f:20:54:a3:24:cd:1b:d5:35:
                    7c:32:d5:d5:85:8e:f0:de:b8:ef:93:7b:45:52:9f:
                    5d:48:52:bd:40:fa:df:d3:bd:ac:b8:00:d8:6f:c4:
                    14:66:92:e4:c9:68:d6:6a:6d:13:36:6e:62:a9:dc:
                    a5:05:ac:4c:6a:35:00:45:72:e1:4f:64:b5:01:90:
                    ee:d5:27:67:51:03:f8:71:af:af:a7:02:8b:d3:69:
                    a1:f9:ec:52:fe:3e:9a:49:5f:54:0a:eb:65:cf:44:
                    35:fa:2f:e9:25:df:3f:19:05:a8:b7:20:b4:62:a1:
                    af:f6:d7:5b:dc:8c:b8:c0:67:bc:ef:46:f0:0e:1b:
                    66:3f:38:ed:bd:74:8a:68:bd:50:9f:cb:a8:99:ac:
                    41:94:df:a3:8b:12:1c:df:7f:85:0d:c8:6b:1a:ed:
                    51:7c:b2:cf:22:b3:dd:6d:8c:13:48:8b:dd:c1:2b:
                    e1:26:3e:e7:dc:57:78:8a:4c:0c:da:9a:5f:ea:b5:
                    10:ae:bc:52:ba:a8:16:cb:22:6f:dc:c7:ee:bc:38:
                    4c:4e:e3:41:e3:62:f4:a2:87:e3:34:a2:c6:f8:a5:
                    47:0a:94:08:00:74:97:d9:ee:36:93:61:6f:f6:9a:
                    a9:e2:1c:aa:7e:ec:e9:e6:a7:c4:63:0d:b7:6e:f4:
                    43:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BF:A7:CD:04:A1:E0:8E:3E:C9:1C:C4:49:11:BC:15:B2:B1:80:5F
            X509v3 Authority Key Identifier:
                keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1d:46:db:19:8d:6d:e8:10:f9:fb:09:ec:d9:71:83:a0:5a:
         d9:18:5b:8e:ab:a1:3e:c0:ec:2c:b0:b4:1a:9d:a8:d1:bc:7a:
         fb:aa:10:dc:00:41:77:4a:90:eb:81:67:12:de:0b:d7:13:ed:
         b8:82:0e:61:bc:14:bc:4a:72:41:ae:bd:1e:11:ea:cd:e6:b2:
         90:bb:58:79:ed:71:16:e0:e0:f1:4d:fc:88:c3:b1:1c:32:b1:
         37:a7:06:98:bf:39:45:22:39:8b:86:49:50:4a:ef:91:0e:cf:
         a9:4e:24:80:90:dc:21:32:95:c9:c4:36:3a:b7:e7:0f:15:50:
         13:4b:09:f7:82:72:3e:b0:08:34:47:83:33:7d:7c:aa:4c:f4:
         ef:65:8d:45:dd:6f:63:8e:b2:98:13:07:f7:de:83:4f:25:62:
         99:38:c9:d8:7a:2d:ac:02:1b:08:08:56:5c:9b:d8:01:d5:c6:
         cf:09:ae:32:78:8b:7e:b0:ed:26:92:b4:ed:9f:29:20:36:4a:
         ed:d6:ae:c2:f4:40:92:55:12:54:d8:7f:f8:1a:68:91:03:6e:
         66:be:0f:3d:27:db:5f:fb:44:b5:aa:30:14:53:5c:09:69:6f:
         f6:f5:bd:1e:ef:d1:9c:15:98:b8:18:7a:37:57:6b:2e:79:96:
         2a:95:21:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 12:04:27 2026 by rpki-client