Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
File:                     i7AWzMBcV2V0az92QtBD6BEgNwU.mft (raw, json)
Hash identifier:          abvoF8qjrQhj7EvMGjnSoYAQV4U2oCnuLrezGVYMx8w=
Subject key identifier:   99:F2:E3:33:7B:E1:16:CE:72:28:89:18:C8:4C:9E:6E:2F:25:E0:40
Authority key identifier: 8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
Certificate issuer:       /CN=8bb016ccc05c5765746b3f7642d043e811203705
Certificate serial:       01A151E474DA9A2576C73839528E914A90DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
Manifest number:          0599
Signing time:             Mon 19 Oct 2026 02:01:28 +0000
Manifest this update:     Mon 19 Oct 2026 02:01:28 +0000
Manifest next update:     Tue 20 Oct 2026 02:01:28 +0000
Files and hashes:         1: Uo4wvgdXfyF3e2k0pZS0H1UzGLw.roa (hash: MZrsYUO7qgY/xpSvPUXy1NiJNVe3XMBHtcUlpHocjuI=)
                          2: i7AWzMBcV2V0az92QtBD6BEgNwU.crl (hash: 5FNHw/hBcGazTTjYHVwAozkJQqJ4EVn7ndJ4hKVWMkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:51:e4:74:da:9a:25:76:c7:38:39:52:8e:91:4a:90:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb016ccc05c5765746b3f7642d043e811203705
        Validity
            Not Before: Oct 19 02:01:28 2026 GMT
            Not After : Oct 20 02:01:28 2026 GMT
        Subject: CN=99f2e3337be116ce72288918c84c9e6e2f25e040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:55:55:89:ee:41:62:94:44:3b:40:05:b4:ae:
                    19:f3:81:52:84:03:16:a7:f4:b9:ee:b0:44:58:6d:
                    c0:a6:47:55:2f:01:11:9f:92:65:15:5a:c2:c6:b3:
                    79:ab:25:fe:42:99:68:5f:0e:c4:4d:96:6d:2d:63:
                    bd:9f:d7:d4:45:79:13:56:b9:6d:e4:93:c8:83:09:
                    20:df:27:9d:cb:cd:ac:0a:ce:b4:90:bb:bb:35:c0:
                    ad:a5:95:01:95:79:09:7e:96:cf:46:97:a9:b1:18:
                    4d:d6:a2:10:05:24:54:fd:e7:d7:90:0d:49:5e:0d:
                    85:e6:79:56:d5:f4:de:5a:3a:f4:a6:07:1f:c6:77:
                    1f:1a:ac:ea:2d:8a:7e:a7:6d:2f:09:1f:16:35:86:
                    1c:c2:45:31:18:3b:98:50:48:11:57:82:60:ff:90:
                    7f:2b:67:4e:4a:c8:c9:43:09:9b:7f:2c:70:99:d6:
                    b2:f6:7a:75:e0:0f:a7:09:da:a4:a3:99:dc:90:86:
                    d6:fd:c8:2f:b5:f9:44:b1:02:0b:65:63:fe:9f:91:
                    73:35:48:e2:99:b0:c7:ac:d7:40:ce:c2:5c:b5:38:
                    bc:00:eb:f4:60:e6:1f:26:94:ed:7c:84:e1:d2:84:
                    de:10:4e:e5:02:35:33:e0:33:0a:4d:58:81:fd:6d:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F2:E3:33:7B:E1:16:CE:72:28:89:18:C8:4C:9E:6E:2F:25:E0:40
            X509v3 Authority Key Identifier:
                keyid:8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:22:09:df:06:d4:ae:59:c9:42:bf:2c:3e:f9:c5:42:b4:2d:
         08:21:3d:69:ea:fe:08:fe:81:c3:fd:bd:04:41:4a:5d:94:82:
         73:ac:f4:8e:bf:01:70:de:9e:9b:64:12:8e:8b:95:92:83:34:
         15:bb:11:03:a4:6f:e4:db:ff:39:5e:be:85:de:fd:01:58:ea:
         b9:b7:70:2a:78:2d:bb:d0:f1:24:07:90:89:b5:84:b6:a4:93:
         eb:a3:01:1d:0a:3b:4c:99:6e:c5:49:2e:b0:dd:9d:46:a2:fb:
         ee:7b:09:cf:65:49:48:d6:b1:46:ee:25:a4:d5:45:cf:29:f5:
         1d:95:f1:5b:a2:d1:a4:1a:a0:d7:e0:c5:2a:40:72:e5:24:b8:
         81:b4:3d:c8:55:64:8c:11:88:8e:aa:ae:9e:18:d9:25:10:02:
         d7:14:40:8c:0d:f9:a8:cc:0a:b3:50:6b:1d:0a:b3:05:11:bc:
         85:5a:92:57:e9:1a:b8:7c:4d:38:f7:e8:4e:06:d5:80:45:18:
         6b:78:93:58:75:4e:0e:f7:4b:06:fb:1b:84:58:b9:0b:e8:56:
         50:c7:69:a8:3d:5e:f3:89:b1:6b:a7:3c:96:b2:53:70:bc:90:
         23:15:db:44:ac:89:05:85:6a:c7:88:4d:95:bf:95:73:f2:7f:
         ff:ed:ae:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:00:42 2026 by rpki-client