Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
File:                     syycJt98zYrTjYm9XUk4C5Ox4Ak.mft (raw, json)
Hash identifier:          A+A2p/3Eva5FknmbivPSQtpqXBS+cmGhrI6vI8vtj60=
Subject key identifier:   0E:DE:89:4F:2C:52:E2:8D:55:CE:E9:F7:6B:49:1F:7E:BB:BC:8E:C6
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Certificate issuer:       /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial:       01A17695B418569D60327D9118397E0373D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
Manifest number:          181E
Signing time:             Mon 26 Oct 2026 05:01:24 +0000
Manifest this update:     Mon 26 Oct 2026 05:01:24 +0000
Manifest next update:     Tue 27 Oct 2026 05:01:24 +0000
Files and hashes:         1: JhhU-c5gOoUfoITJlyMrJgLxGis.roa (hash: IJ4mW1wxsPPV81AWWlRXhH78sbUitldbFLDgO7PWavI=)
                          2: WWv52tGFO2kMcEewV5qZD_WPG3M.roa (hash: PbPZumBcrFR7Yo2JXGB7UlvnkomjihCztTIqDqfXbrc=)
                          3: aNMwbtnKhcF9wSCl_EbVGBGLtog.roa (hash: +CgM2pnXv7KZGRoWq4U5DBh6jhUP3vorsltumM39O1A=)
                          4: cxrYDYRve-AK30Fn1TQ9Kqrsm3M.roa (hash: omj5Dxmbd1CeguDg9OXaZDFdwZG6Smx/H+Y39YrtYK8=)
                          5: syycJt98zYrTjYm9XUk4C5Ox4Ak.crl (hash: KO4sAuvMjfRL9j8O66NkO5JZom2juXTiqno0I3rm784=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:95:b4:18:56:9d:60:32:7d:91:18:39:7e:03:73:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
        Validity
            Not Before: Oct 26 05:01:24 2026 GMT
            Not After : Oct 27 05:01:24 2026 GMT
        Subject: CN=0ede894f2c52e28d55cee9f76b491f7ebbbc8ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:32:32:be:d8:f1:70:45:b2:5a:87:40:51:3e:
                    9a:fd:1a:ad:1c:7c:84:55:76:df:60:52:c7:bc:fd:
                    ab:d2:06:67:09:0e:50:c6:4e:36:95:16:98:08:33:
                    2b:d3:07:bc:0f:c9:04:57:db:af:ea:ca:9f:f9:65:
                    f6:33:8a:6b:f0:99:1c:f7:19:86:43:57:b8:95:6d:
                    ca:d1:45:b0:e3:04:db:85:31:1b:ad:7c:e5:74:cd:
                    90:79:23:7f:4d:63:21:0b:f1:12:8c:59:6a:e3:90:
                    5d:79:a7:a4:76:86:e0:a3:ea:5c:63:63:68:de:d1:
                    c3:7f:c1:79:4d:5f:a1:2f:2a:7d:4c:b7:58:da:f1:
                    fc:41:3a:a4:21:fb:3d:8b:bc:f2:f1:ce:a7:f7:28:
                    0b:57:38:81:5e:4d:eb:d8:38:34:70:b1:b0:e7:08:
                    85:ed:37:6f:3f:e7:94:8f:2f:9d:5e:ee:65:a6:cd:
                    50:39:6e:62:6f:da:c4:b1:e3:5f:94:b9:c0:56:5b:
                    cf:57:ea:2d:d4:c2:76:16:1f:fd:c8:b1:b1:3c:f5:
                    2e:21:77:d7:00:cf:35:83:32:27:1f:84:f0:96:34:
                    85:47:e9:0f:79:4e:a7:8b:69:62:3d:c5:e0:ae:62:
                    c6:fe:91:9e:e1:62:12:19:b0:af:e9:2f:59:9a:fc:
                    3a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DE:89:4F:2C:52:E2:8D:55:CE:E9:F7:6B:49:1F:7E:BB:BC:8E:C6
            X509v3 Authority Key Identifier:
                keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:29:b0:f7:03:03:b0:56:b7:06:d9:5b:3e:6a:44:fd:8b:07:
         1d:1d:79:72:05:3b:c5:b0:c0:b6:a6:ad:02:e5:d2:e1:12:52:
         07:ed:78:6a:91:e9:61:02:92:d9:56:73:2b:c9:04:51:45:dc:
         07:9a:45:1f:7c:ec:98:24:5b:d1:95:b8:83:65:35:cd:14:42:
         f3:24:c0:51:ec:0f:27:13:21:7f:b0:51:96:b4:2d:bc:0a:39:
         2d:68:e9:27:a5:19:95:be:61:92:02:37:2b:6a:9d:cd:3d:29:
         d9:1c:31:8f:2d:60:3e:e3:07:01:89:80:de:19:f3:b4:1f:0c:
         90:a1:7e:a6:3b:e3:3e:e4:37:c8:fc:b6:a1:44:6e:29:9f:72:
         2b:2b:df:7b:c7:ac:8e:5b:11:33:21:b8:1f:fe:e3:50:bf:8d:
         86:44:14:ac:00:d6:4d:c0:18:f8:82:5b:a2:3c:0c:3b:b3:a3:
         75:dd:6b:8d:c2:b1:d1:71:09:fe:10:f0:7e:a7:e6:55:f6:94:
         f1:7a:c6:5b:db:2d:fd:7e:42:dc:ec:fe:11:ec:f5:a8:7a:ab:
         ae:0c:1b:ac:97:46:15:f4:1a:a4:36:82:34:58:4d:4c:8d:78:
         4e:bb:e4:12:f0:c1:68:c5:2e:21:d2:6c:58:43:82:2d:9f:cc:
         d6:76:78:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:41:12 2026 by rpki-client