Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
File:                     mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft (raw, json)
Hash identifier:          /bNOml1pQXabWB/P4wr5WLHhCR0IR6I2b0zwkecMQFc=
Subject key identifier:   2B:71:94:F4:E7:51:16:78:AE:87:0E:9D:2D:EC:46:39:EC:7C:A6:42
Authority key identifier: 98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41
Certificate issuer:       /CN=98418cc6550dfdb1899969a6027e435a1b0b1341
Certificate serial:       01A17FCF94B57F435F2765EFCE9FEAD89A4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
Manifest number:          10D0
Signing time:             Wed 28 Oct 2026 00:01:12 +0000
Manifest this update:     Wed 28 Oct 2026 00:01:12 +0000
Manifest next update:     Thu 29 Oct 2026 00:01:12 +0000
Files and hashes:         1: mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl (hash: YoL3wGoVaW2id7lEKsZQFfaNwRrNqvpt/yvTlaZLhR4=)
                          2: ymwnzHfZGdMRFGEeM7VXK-BgXAw.roa (hash: zIUfyqH90eqwbG4q9Ekkq/Mb1Io/2HvKy6Zq+oTaP8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:cf:94:b5:7f:43:5f:27:65:ef:ce:9f:ea:d8:9a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98418cc6550dfdb1899969a6027e435a1b0b1341
        Validity
            Not Before: Oct 28 00:01:12 2026 GMT
            Not After : Oct 29 00:01:12 2026 GMT
        Subject: CN=2b7194f4e7511678ae870e9d2dec4639ec7ca642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:60:24:6d:85:46:f5:98:94:18:4e:65:cd:cc:
                    4d:59:88:67:9c:44:a6:b0:3e:4d:82:3d:19:90:85:
                    1c:fe:54:03:11:83:a8:11:0b:de:0d:0a:87:44:7e:
                    2e:58:12:4d:30:83:ad:3e:81:bd:68:d4:0d:19:bb:
                    b7:e8:cb:25:5c:7f:80:2a:ba:ca:48:36:74:fe:81:
                    27:0b:6d:b0:6e:3b:da:b4:16:cd:57:3b:45:ab:e4:
                    39:35:43:d3:e8:8c:ba:ac:01:d0:38:6c:cb:4f:d8:
                    26:8b:d5:fc:60:45:46:a3:f9:c4:85:4b:82:88:02:
                    f7:06:c6:dc:2a:03:95:e2:56:23:9f:ad:8b:65:1b:
                    2c:41:9e:8c:6a:c2:e8:f6:e1:fd:5d:b1:5d:43:13:
                    c1:35:ad:77:ac:94:dc:d4:16:5d:c6:97:97:fe:e3:
                    f2:3c:29:ab:da:5c:66:82:86:a2:79:0e:09:7d:a7:
                    f4:99:6b:8c:da:1c:f3:f6:9d:6c:f8:ed:c4:26:e2:
                    ad:43:75:aa:d4:95:df:94:1f:d1:c8:5c:91:3f:24:
                    43:9d:98:9a:cb:db:3e:da:27:dc:b0:bf:44:35:63:
                    95:d6:99:8c:3d:40:11:dd:cd:74:25:b1:90:e5:e9:
                    a2:f8:c3:79:f7:2b:75:16:cc:62:23:39:bc:52:83:
                    80:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:71:94:F4:E7:51:16:78:AE:87:0E:9D:2D:EC:46:39:EC:7C:A6:42
            X509v3 Authority Key Identifier:
                keyid:98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f7:d0:cf:79:0c:b6:91:22:cf:71:1d:8e:84:99:4f:48:c9:
         42:63:e0:9c:6c:f4:3d:f7:61:77:6f:92:56:48:cd:14:72:e7:
         05:f3:2c:25:7a:c0:22:11:66:25:d0:0f:01:e7:a1:b5:32:e9:
         30:e1:08:86:b7:2f:f6:ce:52:a4:20:6d:a4:b5:3e:6e:63:2a:
         7a:fb:9f:84:c8:32:82:69:5b:2f:f5:5c:73:e0:db:88:2d:85:
         eb:61:a4:56:d7:f8:16:9d:01:40:82:37:d8:0a:aa:6f:e8:6b:
         49:b5:81:aa:83:32:a5:eb:71:f3:2e:32:d5:5b:f0:53:17:4f:
         4c:fd:d6:bb:c4:89:f5:45:84:90:de:32:12:2b:7b:4e:41:45:
         e8:5a:0d:2e:e7:7e:1e:f3:4f:5e:51:53:df:b0:a0:d7:26:7e:
         7c:12:32:9f:7a:34:6a:b4:e1:de:1f:8e:32:d1:be:43:3b:ee:
         df:3a:33:31:a1:1b:4d:86:05:19:6e:98:f0:f0:cf:d0:81:95:
         fd:12:70:b3:b8:66:cd:6d:7c:1c:49:f0:93:68:e9:97:59:46:
         58:70:19:67:26:c2:36:e4:27:54:b6:a1:e3:17:88:1a:43:88:
         a6:02:44:12:53:a3:a2:54:80:6d:26:91:26:3b:28:e8:e3:86:
         33:7d:1c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:39:51 2026 by rpki-client