Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
File:                     RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft (raw, json)
Hash identifier:          tvuRcLHYz+YkZOdvFvB4E4ekQY0xcpYkWzdKVLD2ABM=
Subject key identifier:   A8:D6:8F:80:12:06:E0:AF:EA:63:8E:B4:EF:BE:C8:7B:E1:53:CE:79
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Certificate issuer:       /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial:       01A14BE23EFB618DCABDF9BCF7E353952468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
Manifest number:          1AB8
Signing time:             Sat 17 Oct 2026 22:01:20 +0000
Manifest this update:     Sat 17 Oct 2026 22:01:20 +0000
Manifest next update:     Sun 18 Oct 2026 22:01:20 +0000
Files and hashes:         1: 8fhYtKpVakt0uV4ZHUTjU4fIbFw.roa (hash: BUVZIDRFer90z5xzSe7ir9WDKqZ/aWAGvB26nEQK32A=)
                          2: RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl (hash: DCUngG2QOwaQSHAujsS+YX8/UN61aWSvU37qlTkZpyc=)
                          3: TCAQGPQ0BZ8ud4Gm8UguZYpuzms.roa (hash: +Kmb6BumaUGSfi8TJeQxjsoBcMk+3PlRsvjbV5UF/c8=)
                          4: _xGsVJQeBzbBLpCkFLNfOvZbW4U.roa (hash: Y4500/iUXADzSRR+OyCO6ojWBN6EGiCPjwgXlWxzhhA=)
                          5: vcbEzvx1zie9dwpRKaaVwvTw4d4.roa (hash: s7dhy3Ht7fPj270WhKJcSmby6GyMwW0TOLWlYMocDDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4b:e2:3e:fb:61:8d:ca:bd:f9:bc:f7:e3:53:95:24:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
        Validity
            Not Before: Oct 17 22:01:20 2026 GMT
            Not After : Oct 18 22:01:20 2026 GMT
        Subject: CN=a8d68f801206e0afea638eb4efbec87be153ce79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:09:fa:88:7e:7d:0d:da:61:0c:5d:4d:f5:88:
                    43:16:86:bf:b6:fb:e0:a3:34:ff:6d:08:95:fc:d7:
                    3b:c8:40:03:d9:15:b2:3c:c2:6b:15:ea:48:62:55:
                    36:8d:24:48:08:83:c0:ff:cf:43:c1:c8:a4:65:12:
                    5b:6d:1c:0a:fc:83:7f:be:7a:2a:d9:20:57:c5:05:
                    3a:7a:58:1c:5b:d1:f4:a2:9a:71:31:87:5f:53:ed:
                    c9:bb:8f:00:ca:b0:5b:eb:92:29:c8:4a:35:f3:86:
                    2f:74:50:30:bb:dd:11:57:bc:02:6a:7d:46:e7:a2:
                    3f:48:1c:28:2b:7c:9f:92:d2:bd:aa:d0:e5:59:a2:
                    2b:c5:53:2c:61:5f:41:c3:b0:cd:e4:90:39:8a:d2:
                    30:d4:bd:54:b1:54:38:b0:ff:19:bb:78:fb:d7:a7:
                    6b:3b:03:da:44:c6:f0:7b:5d:58:ca:ab:c4:d6:0b:
                    49:f6:7b:ed:fc:b0:3b:5e:99:e8:b2:40:6c:2c:67:
                    7e:04:7e:29:20:20:3f:e5:95:75:b1:e8:45:f5:a1:
                    9b:13:76:3c:cb:9e:13:dc:55:bb:cc:a8:96:ec:52:
                    86:54:d9:84:c4:bc:b8:c9:d8:5e:fd:b7:3c:aa:95:
                    f0:0b:8c:44:e0:a4:8f:a2:7d:7f:32:f2:e9:82:80:
                    af:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D6:8F:80:12:06:E0:AF:EA:63:8E:B4:EF:BE:C8:7B:E1:53:CE:79
            X509v3 Authority Key Identifier:
                keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b0:8c:bf:82:93:c1:e8:f1:9a:ea:f9:ca:79:ac:6b:2d:90:
         fa:92:34:20:66:10:b3:cd:00:f0:15:38:79:64:cf:10:a6:98:
         15:44:25:4e:b5:c5:39:a2:99:5f:1d:48:79:05:75:a4:b1:9b:
         84:59:46:cb:96:9c:3e:c1:31:2a:a1:75:9b:d5:d4:34:8e:a8:
         98:72:4a:1e:e4:ae:67:0f:8a:63:83:1e:25:4a:30:79:24:4a:
         db:a6:7a:f8:5b:e0:a6:fd:31:2e:c1:ef:bf:46:cb:f3:ba:2d:
         77:ae:e5:ff:f1:2f:9a:fa:7e:6b:d3:88:13:48:73:65:81:74:
         65:82:e0:46:fd:50:b6:32:9e:66:e3:b4:ac:85:66:90:fe:90:
         9e:b1:4f:3d:30:ee:85:79:cc:99:b5:4f:b9:75:f1:e3:5e:0d:
         d0:c8:94:3e:bb:83:a9:07:a4:34:a1:63:fd:0f:cc:c7:bd:9e:
         8e:fe:f1:f5:88:5d:92:90:76:e2:32:16:ac:4f:b5:9b:26:ef:
         56:67:70:b9:8b:8c:1d:b1:4b:ef:fd:a1:97:12:3a:62:c7:55:
         ab:b3:ea:9c:ee:75:d9:ac:c0:a0:ad:7a:7d:75:d5:b3:96:1e:
         10:6f:49:2f:06:1e:d8:56:6b:f8:a3:28:fd:cf:fa:2a:7d:8e:
         75:d2:f8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:33:22 2026 by rpki-client