Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
File:                     J7ITMhmYnmoy1xFY0IUqUW62958.mft (raw, json)
Hash identifier:          z71nMl+VQiXLWzR8ipebS6PUHBS+cSuutA2i8d2JNXQ=
Subject key identifier:   03:B2:CA:07:77:BB:CA:AA:DB:33:94:D6:19:85:95:54:F5:6E:95:A2
Authority key identifier: 27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F
Certificate issuer:       /CN=27b2133219989e6a32d71158d0852a516eb6f79f
Certificate serial:       01A19355B6383028D61EA5B2760F9C94E127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
Manifest number:          1756
Signing time:             Sat 31 Oct 2026 19:00:30 +0000
Manifest this update:     Sat 31 Oct 2026 19:00:30 +0000
Manifest next update:     Sun 01 Nov 2026 19:00:30 +0000
Files and hashes:         1: J7ITMhmYnmoy1xFY0IUqUW62958.crl (hash: 0hoRMb1oJMK286Q5vnV0jePP52pX++kMHoktPHkTYyM=)
                          2: aXD0FFNchQkwK34CB80vuVCFnu8.roa (hash: 7EgFfEGEl824yez9iLAftyJ4zvdxuachpWpx1Yo48rQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 19:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:93:55:b6:38:30:28:d6:1e:a5:b2:76:0f:9c:94:e1:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b2133219989e6a32d71158d0852a516eb6f79f
        Validity
            Not Before: Oct 31 19:00:30 2026 GMT
            Not After : Nov  1 19:00:30 2026 GMT
        Subject: CN=03b2ca0777bbcaaadb3394d619859554f56e95a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:1c:7e:06:38:23:70:e7:9e:ca:0c:58:69:
                    15:de:83:b6:d0:0a:a4:bc:82:2c:2c:76:c0:3a:d9:
                    99:c0:2f:4a:53:5c:f7:41:7c:02:e1:53:98:12:b9:
                    d0:f3:d7:e0:dd:c2:47:f5:1b:09:e6:3c:50:e7:b8:
                    f9:b5:0f:01:64:0f:00:c6:6a:f4:94:d5:5f:e2:f3:
                    b9:94:48:e1:af:d7:e0:43:8b:48:cd:b0:7a:02:f0:
                    00:de:9d:7d:0c:e7:5e:9c:96:43:d7:3a:82:3d:eb:
                    22:65:56:12:81:c5:79:8b:9c:74:f2:67:29:26:c1:
                    25:a8:f6:6f:ac:d7:5d:e3:2a:28:6a:c4:45:16:e1:
                    2c:5b:35:03:37:2e:bb:87:ec:ac:11:45:b4:cc:4e:
                    7d:1b:57:36:09:c0:28:ed:a5:61:0e:30:a6:12:52:
                    de:a2:bc:c9:70:75:9a:f0:d1:f7:4f:71:ce:54:5f:
                    ac:67:83:3e:bb:d6:d7:dc:16:a7:d6:b4:8f:4e:5c:
                    d7:5e:ac:9b:ca:b7:69:1f:3a:58:66:a4:6c:c0:eb:
                    cb:ab:69:d7:66:63:4e:f8:ac:79:85:27:d3:9a:5e:
                    26:14:85:92:de:52:f1:44:66:e1:6a:7a:1b:b8:34:
                    75:b2:02:3e:c3:d3:c4:75:57:25:85:3e:77:d7:36:
                    fc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B2:CA:07:77:BB:CA:AA:DB:33:94:D6:19:85:95:54:F5:6E:95:A2
            X509v3 Authority Key Identifier:
                keyid:27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:33:f4:5b:cf:e8:d8:1c:83:f0:0d:e5:45:bc:08:fa:7d:61:
         17:dc:bb:40:d1:c3:31:16:8c:fa:7a:ec:92:78:4b:17:36:5a:
         c6:17:d7:e4:71:10:99:e2:5c:b0:eb:df:ce:b7:31:c8:4c:5b:
         aa:17:39:09:5e:1e:ed:c1:dc:b1:22:a1:5a:b5:e7:9a:c2:d8:
         d4:85:56:2b:d4:f2:47:be:09:bd:59:cc:78:fd:25:74:7f:bd:
         12:76:a8:8b:ba:07:52:d6:b9:1a:2a:fa:e2:d2:ea:d2:65:a5:
         5c:23:82:ba:0d:87:5c:7e:30:63:09:08:ea:28:90:bb:49:b1:
         a5:33:49:8c:2b:86:82:4a:35:70:a6:e1:ea:64:be:43:c3:f8:
         d3:c5:ce:c3:ac:e2:4a:d5:87:7f:02:57:4b:0d:46:c8:45:ec:
         96:b5:db:3e:8e:d4:3c:ba:98:2e:c4:6b:8b:fb:73:30:12:62:
         9f:4e:ad:79:f5:1d:ea:5f:e0:19:a6:b5:9e:5a:54:9b:ee:3c:
         2d:a4:c9:ed:a4:27:84:a0:7a:41:5a:f1:8d:21:bc:77:d2:91:
         bd:6f:ba:4e:96:64:15:48:df:8a:15:92:c2:8b:19:f0:e5:e3:
         28:a2:57:ad:47:bc:78:56:28:86:23:83:8f:bb:04:c9:eb:57:
         eb:d4:31:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:54:13 2026 by rpki-client