Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
File:                     9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft (raw, json)
Hash identifier:          6iVQEQq+vlIW2/qwY5imeZ9ez/LtNGBxOJqoqEDB990=
Subject key identifier:   F6:C8:73:6C:63:19:F0:92:61:4F:01:12:E4:7E:F7:21:1B:2C:FE:72
Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
Certificate issuer:       /CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Certificate serial:       01A174396BAFA2E89CC98C2EFEA3388C24DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
Manifest number:          058B
Signing time:             Sun 25 Oct 2026 18:01:22 +0000
Manifest this update:     Sun 25 Oct 2026 18:01:22 +0000
Manifest next update:     Mon 26 Oct 2026 18:01:22 +0000
Files and hashes:         1: 7_zn84ybIr1uylkitwOR1cEu2dI.roa (hash: 2W6Vxmwk8XQBE6BnPj2SuKeyu76vgg2avkcyHjCtB64=)
                          2: 8qI5M9nt77vE4nTZuhI3O-_7Moo.roa (hash: bhOfxE1N9Q9DLTIZ9ruXl8yH7rMWdChvmxBcbOxnD1I=)
                          3: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl (hash: GN/B8x0QZefolPImRWHl7Re5SMiTTChSAQK23HS1Wwg=)
                          4: I-XIjRxgkdNZeZ6XgcxI96kMFwI.roa (hash: /L+nfUszoFluPyMyZo9VlBC8cE+Ie4cQ8KAxPH1RRAw=)
                          5: iCQOeluGzuF2H3yby0GDplaPkdI.roa (hash: FSXXrDNKGzru4cBB3J/wsVuN39ULCg+BCEi5BmI7ZZk=)
                          6: mzDYp7n26mDiWHNdtuApd9PtwRI.roa (hash: B9knfXLtUIlMboxQnejwbYi+kBKU6xfPLrCe2Bf2F4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 18:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:39:6b:af:a2:e8:9c:c9:8c:2e:fe:a3:38:8c:24:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a
        Validity
            Not Before: Oct 25 18:01:22 2026 GMT
            Not After : Oct 26 18:01:22 2026 GMT
        Subject: CN=f6c8736c6319f092614f0112e47ef7211b2cfe72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7d:b2:36:00:e4:b4:37:b1:15:cb:44:3f:f7:
                    8f:af:84:6e:fd:df:a1:dd:56:6f:90:9e:b3:2e:44:
                    3c:3a:fa:a9:aa:a0:79:d0:5e:ca:63:24:48:c4:9f:
                    5f:38:42:47:cd:54:7f:ee:f6:50:6d:b7:46:bc:a3:
                    30:fa:50:89:0e:fc:51:07:a2:a3:49:e5:a7:37:64:
                    2a:6c:c1:c3:c7:c3:7c:d6:6f:d9:7d:9a:4d:51:ef:
                    53:23:8e:4e:d6:83:06:e4:e7:c5:b0:d2:db:6c:34:
                    7f:eb:f9:7b:b2:fc:f0:6f:bd:f4:f4:4a:90:0e:e4:
                    30:ba:aa:5e:59:8c:24:e9:df:e0:3d:10:fa:9f:e0:
                    68:78:57:36:69:49:4a:3c:8c:4f:14:39:f5:8b:f9:
                    88:78:d8:c3:8c:ce:2d:77:dc:d1:e8:d9:1d:47:b3:
                    12:8f:f7:f5:ce:5d:bb:a7:a7:b9:8c:d2:f8:6c:d2:
                    fe:68:ab:b0:7d:62:72:28:dd:84:02:e1:2d:6f:b7:
                    95:51:4b:81:0a:15:a5:6e:7a:30:86:3f:5b:29:22:
                    d4:73:5e:ac:1e:47:7e:a6:d8:03:b6:cc:f0:f8:39:
                    f9:9c:85:ef:f2:f7:f6:6f:b9:93:0d:f9:a5:de:8d:
                    7b:e4:9c:66:f5:74:2d:40:8d:23:a9:16:dd:e1:aa:
                    c2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C8:73:6C:63:19:F0:92:61:4F:01:12:E4:7E:F7:21:1B:2C:FE:72
            X509v3 Authority Key Identifier:
                keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:64:fb:ac:c8:cf:7b:62:3a:10:6e:7e:7f:13:c7:35:b4:d4:
         53:ca:39:7e:b8:6f:47:df:9e:f8:7a:01:a3:0d:cf:9e:65:c4:
         01:eb:f8:61:d3:87:30:1a:c0:ba:84:2d:a2:a4:91:ae:62:12:
         36:17:2b:fd:48:1f:86:55:97:1d:35:64:78:e0:fd:e1:22:89:
         28:96:52:f0:ee:fa:8a:19:f8:c9:34:32:2b:9b:80:93:3c:df:
         06:ca:00:6d:01:ed:7e:71:66:2b:09:7d:ad:66:0f:cc:4d:8d:
         a2:86:d1:fd:24:3c:8a:d3:d9:e6:9b:04:c2:da:df:9e:17:e2:
         81:72:63:1e:29:db:ec:9c:b2:63:6f:23:c7:cd:77:21:9f:e2:
         9c:0a:bc:c9:cd:78:bf:2e:d4:25:c4:bf:81:1e:c9:d2:fa:e4:
         ed:95:d6:15:43:38:15:cf:6d:8a:09:e3:a6:eb:ed:f0:23:b6:
         e4:51:cf:a0:e6:42:e4:41:5c:0d:2c:18:25:cc:a6:9c:0a:33:
         e8:a1:04:fc:3d:00:59:9f:a8:7d:65:60:65:8b:d3:f0:35:4c:
         00:45:67:aa:26:8b:5e:5a:25:b6:42:35:f9:15:1b:1e:cb:2d:
         dc:86:3f:e9:50:3c:a5:15:0a:65:2b:34:6f:0f:70:a9:c8:f8:
         c9:6f:43:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:44:53 2026 by rpki-client