Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
File:                     Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft (raw, json)
Hash identifier:          o+fXZj24Td64yVwW+YaQvd9mCln6paQuy8KrbJ9EyAM=
Subject key identifier:   53:F1:06:1A:0D:4B:10:BE:D4:B7:EA:4A:C8:46:89:52:80:FE:96:BC
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Certificate issuer:       /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial:       01A1705C37F5C4CE74B20ADCCCE8A42FA1CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
Manifest number:          16FD
Signing time:             Sun 25 Oct 2026 00:00:53 +0000
Manifest this update:     Sun 25 Oct 2026 00:00:53 +0000
Manifest next update:     Mon 26 Oct 2026 00:00:53 +0000
Files and hashes:         1: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl (hash: i/DS3itcADFbA/GQL96bXnaeccu73eCE/TwXvPovZp4=)
                          2: di_0LtYX-zy7910p1HbVAPeQb4E.roa (hash: Q0mvASV/CVPiKor53MwAZ00Mlkbyxmt/p19B01XkHwA=)
                          3: pEOUwaWLO5dvG7uvVIo0_OIl9G8.roa (hash: hUdGksl3Om+qi4NqcjWlHiivRsMFn3puC7yl77M9g+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 23:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:70:5c:37:f5:c4:ce:74:b2:0a:dc:cc:e8:a4:2f:a1:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
        Validity
            Not Before: Oct 25 00:00:53 2026 GMT
            Not After : Oct 26 00:00:53 2026 GMT
        Subject: CN=53f1061a0d4b10bed4b7ea4ac846895280fe96bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a6:0d:cb:47:a5:af:26:a6:43:54:59:65:3f:
                    95:04:47:5b:00:be:f9:f1:a7:67:18:33:a1:0f:ab:
                    90:54:f4:8c:b9:d2:a4:d3:7d:51:b4:e7:24:35:33:
                    5a:7e:1f:3d:4b:2e:55:1f:78:75:56:6f:77:42:a4:
                    1c:db:73:ff:11:be:e5:f3:79:27:bd:0d:a9:d8:c0:
                    e0:d9:d0:e3:8b:5d:67:74:bb:0d:52:0e:6a:e9:33:
                    ec:e6:35:d1:5b:c6:32:6d:cf:06:48:d8:27:dc:de:
                    0a:e2:4c:0c:35:ba:c2:2f:3c:db:94:cd:62:96:b6:
                    2a:9c:19:b8:c6:37:ab:95:42:f8:d5:9e:c9:25:91:
                    f9:61:88:05:83:3e:e9:c2:1c:4d:b4:9a:cb:c5:b9:
                    cd:bf:fa:37:4b:58:d3:bc:fa:d4:bc:89:a8:be:f4:
                    f2:61:91:c9:c3:a3:1b:6c:91:8a:3d:90:0b:2e:d1:
                    7d:c2:ee:12:30:e6:d0:f5:32:8e:e6:f6:a5:60:f1:
                    1c:3f:d6:33:84:44:7d:d9:30:06:1e:6a:75:88:df:
                    ab:12:ff:ad:eb:8f:bc:d5:72:e3:5d:3a:ed:8e:a8:
                    1e:08:cf:75:24:97:b6:de:58:b8:da:1b:6e:b3:63:
                    7e:3d:6d:35:f8:39:53:1f:de:6a:fb:9d:8c:87:59:
                    6a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F1:06:1A:0D:4B:10:BE:D4:B7:EA:4A:C8:46:89:52:80:FE:96:BC
            X509v3 Authority Key Identifier:
                keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:29:8b:a4:e4:47:e0:96:55:86:57:c4:42:90:22:20:16:89:
         ed:2b:d1:20:0d:7f:d1:c8:2d:c5:c1:6a:65:21:be:b1:3c:c5:
         7b:e0:38:9a:d1:52:a4:f3:5f:68:64:99:b2:60:fd:db:b6:73:
         83:03:a4:c0:75:a7:9e:7c:77:49:19:9e:fe:5f:61:48:41:e3:
         b7:61:13:0d:a7:0b:20:f1:d5:ba:d9:0e:ea:26:c6:59:8b:92:
         89:ee:fc:69:c4:a6:18:40:92:95:19:52:49:e5:56:24:b1:d6:
         c6:4a:d4:85:22:8a:b2:9a:0c:ca:02:35:02:67:6f:c6:d4:fd:
         92:b4:b2:ce:3b:42:48:fd:e3:54:11:77:f3:ef:93:c4:3e:85:
         51:08:a1:63:80:38:8b:2c:30:72:b1:74:1d:ea:52:97:d8:9a:
         91:a7:90:f1:e4:70:cf:be:21:e3:00:0e:3d:b3:fd:b7:62:e1:
         81:23:75:36:4e:47:42:2e:7a:3b:bc:9b:1e:0e:34:12:aa:61:
         c1:68:91:1a:5f:3c:aa:6e:be:17:a0:03:ef:69:fb:6f:6b:ee:
         41:78:e2:c4:a1:cd:b7:f4:28:d4:c8:bb:95:78:f8:b0:1f:c6:
         8f:af:29:6e:70:b6:ec:32:5f:06:42:28:f3:90:bb:84:e4:50:
         53:9e:f3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:50:10 2026 by rpki-client