Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
File:                     F9uL3_IuGjew9KaVNCS2UWmwNCk.mft (raw, json)
Hash identifier:          t1ANQ8GcZUgqydZ0WI2q8UHc5AVRW6BMK1wRHo/oAro=
Subject key identifier:   AC:FE:BC:BB:D2:9A:D7:6A:BD:B0:8C:34:E4:57:46:AF:33:5A:9E:64
Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
Certificate issuer:       /CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Certificate serial:       01A16EDBCF79A9B3EBD6A2BA9526CCD977DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
Manifest number:          11CB
Signing time:             Sat 24 Oct 2026 17:01:01 +0000
Manifest this update:     Sat 24 Oct 2026 17:01:01 +0000
Manifest next update:     Sun 25 Oct 2026 17:01:01 +0000
Files and hashes:         1: F9uL3_IuGjew9KaVNCS2UWmwNCk.crl (hash: VMr1Uz9IpzptVl+9Y1dmdnbklj5fk/FjVXWXVpkr7tM=)
                          2: J0EuWLSb3B_xwNJGfbHeQ2JEG5w.roa (hash: MlQZGeS1jAVBfO3R8nnm0N8oigQzbZ43khot/CP8lDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 17:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6e:db:cf:79:a9:b3:eb:d6:a2:ba:95:26:cc:d9:77:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429
        Validity
            Not Before: Oct 24 17:01:01 2026 GMT
            Not After : Oct 25 17:01:01 2026 GMT
        Subject: CN=acfebcbbd29ad76abdb08c34e45746af335a9e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:fe:0f:d1:db:dd:45:fd:43:e3:fa:37:00:
                    ba:02:1e:f1:81:a6:99:46:5c:7e:2b:83:90:7a:3c:
                    56:4e:fb:1e:75:54:40:7b:e4:46:99:cc:99:f5:3d:
                    53:e3:7b:01:80:9e:1d:0f:83:8e:27:e7:36:0e:13:
                    17:e1:4b:0e:ef:9f:87:9e:6b:2c:25:d7:87:db:91:
                    d8:f7:1c:f9:09:ab:a1:7f:89:7a:f4:c1:a2:0e:2f:
                    de:88:8d:b3:48:d4:9b:a9:5c:30:e9:bb:12:4d:dd:
                    48:4c:05:7b:f4:40:8f:95:8c:1e:18:10:e7:d3:98:
                    37:ad:0b:71:ac:5e:b0:73:26:f2:40:b2:b3:0f:99:
                    9a:2c:de:96:ce:b3:dc:10:be:5d:ba:eb:ac:d8:47:
                    17:2b:70:09:37:40:0d:47:1d:ae:fd:45:f1:fc:28:
                    a9:a9:30:69:c1:c5:10:b9:53:07:86:43:fb:b2:13:
                    ac:44:e6:62:5b:a9:7a:54:2e:4d:60:f7:f9:9a:bc:
                    1c:59:2a:19:eb:ef:b2:c5:1e:66:23:fa:c3:4d:53:
                    fa:b3:0d:6a:e6:34:32:86:e3:e0:7a:ea:5b:1f:1d:
                    e6:2f:b0:25:8e:d1:fa:0f:af:09:60:b2:f3:d5:ec:
                    0c:6e:c1:ad:c0:ed:97:55:ac:c2:f7:a1:a3:22:57:
                    c8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FE:BC:BB:D2:9A:D7:6A:BD:B0:8C:34:E4:57:46:AF:33:5A:9E:64
            X509v3 Authority Key Identifier:
                keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:4d:30:7f:31:e3:96:77:cc:42:0a:22:40:a6:f2:94:d1:9b:
         dd:00:d6:fd:93:f4:e8:2c:d2:c2:5c:67:0a:e8:8e:a4:e7:f8:
         60:f9:8c:c5:1d:df:07:18:b1:a9:56:85:6a:a6:7d:ab:f9:bf:
         9a:96:fb:ad:bd:89:ee:e7:bf:01:f5:31:c3:11:ac:b3:97:f4:
         e8:c7:a1:48:69:ed:62:27:1e:ea:79:54:8a:07:3c:b4:61:21:
         e3:83:5b:3a:d0:86:ee:41:f5:60:e4:a3:4d:74:d3:a5:0f:e8:
         3c:bf:ee:e9:68:e2:e0:fb:27:2a:6e:72:f1:3d:7a:30:91:0d:
         40:3d:04:f0:93:23:87:e9:c9:ac:2a:0f:5d:a7:31:6b:22:9e:
         99:b9:57:bb:01:7c:9c:da:9a:71:da:0f:78:ed:c2:f5:4a:9a:
         81:bc:5b:bd:a2:e9:14:83:38:93:f4:3d:0d:e5:ce:92:ef:b1:
         96:68:6b:06:00:15:06:b1:dd:d9:dd:b3:4d:42:f9:36:07:c8:
         8e:e8:95:88:57:5c:ae:df:66:90:e3:4b:4f:f7:69:3f:4a:e2:
         d1:1e:16:87:79:e0:be:04:36:89:d2:61:2a:5a:8a:6b:b5:69:
         8d:43:05:3d:50:d8:4a:ba:3d:b1:fb:6f:4e:95:c9:ac:78:04:
         09:1e:ad:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:13:13 2026 by rpki-client