Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
File:                     2wU2Dphzgl911nHa8WJKUumFOQw.mft (raw, json)
Hash identifier:          FI2GQgxSHtsljH41LMYAGH6D/Eo7EIAB3Ar2N4WDCf4=
Subject key identifier:   AB:70:00:E7:72:F9:FB:1B:75:54:6A:A1:D9:FF:6E:C4:49:67:04:66
Authority key identifier: DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
Certificate issuer:       /CN=db05360e9873825f75d671daf1624a52e985390c
Certificate serial:       01A17EBD1E1F65C4E90593A11BC5157208AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
Manifest number:          054E
Signing time:             Tue 27 Oct 2026 19:01:25 +0000
Manifest this update:     Tue 27 Oct 2026 19:01:25 +0000
Manifest next update:     Wed 28 Oct 2026 19:01:25 +0000
Files and hashes:         1: 2wU2Dphzgl911nHa8WJKUumFOQw.crl (hash: EjFTjf7SB76bV5IAUVXvNDE9MhE1xa6gJkLz2HFplu4=)
                          2: qIEvRyug51NtPOqrvZlLTZ5-EIQ.roa (hash: BsW/+9betY20XfYjkexlN+8vCvy84YAaJnRdNAcmTYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:bd:1e:1f:65:c4:e9:05:93:a1:1b:c5:15:72:08:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db05360e9873825f75d671daf1624a52e985390c
        Validity
            Not Before: Oct 27 19:01:25 2026 GMT
            Not After : Oct 28 19:01:25 2026 GMT
        Subject: CN=ab7000e772f9fb1b75546aa1d9ff6ec449670466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:40:91:ea:96:29:bc:a6:5a:2c:29:e9:68:0b:
                    e6:b0:28:3f:58:88:98:47:8d:ba:c4:ce:9a:bc:d1:
                    2d:da:d7:ab:f6:17:51:19:cd:65:d0:84:31:02:d8:
                    7b:44:bf:0e:9b:b1:aa:d0:6e:e2:2f:92:2f:8d:ae:
                    5b:6e:59:d8:1d:05:ad:ba:bd:8a:ba:db:dd:6e:a5:
                    de:27:b8:62:f2:16:93:2e:91:dd:7e:72:45:9e:80:
                    6c:b5:71:ff:ec:81:35:73:3c:b8:2e:6d:82:ea:da:
                    d7:b9:4d:6f:42:6e:9e:7c:5c:ce:3f:88:03:75:02:
                    02:21:d6:d7:04:64:ce:90:69:a5:40:5c:ed:2e:5f:
                    24:75:4e:b6:cd:2a:e2:54:fe:b1:5e:6c:84:c9:47:
                    1c:45:72:e8:d9:43:46:a2:3b:71:f7:62:62:ae:b5:
                    b8:cf:28:65:89:8a:9c:47:65:5c:e6:a9:1b:9c:ee:
                    3e:a6:0b:1c:d3:90:00:5a:62:b3:39:75:d5:a7:41:
                    dc:aa:c5:e0:94:85:c9:27:2d:fe:d5:7a:a9:e9:c6:
                    fa:08:60:79:7b:74:1c:6c:0a:0d:43:72:72:8a:8c:
                    5c:22:6d:3c:af:8f:a6:18:21:5c:f5:81:3a:3a:b7:
                    46:cc:48:64:65:5f:c8:24:3d:f0:b2:66:b5:1a:db:
                    80:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:70:00:E7:72:F9:FB:1B:75:54:6A:A1:D9:FF:6E:C4:49:67:04:66
            X509v3 Authority Key Identifier:
                keyid:DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:01:07:76:da:73:c2:25:47:66:92:49:84:38:f3:d5:0d:07:
         71:10:5a:ad:c2:78:18:16:d4:0e:28:3b:66:95:71:d1:03:d7:
         74:ef:32:51:f6:69:f2:df:92:f1:8b:4a:dc:65:2f:01:ed:85:
         5b:27:a2:1a:f9:ba:d9:f7:0f:8c:e7:f9:bb:4c:8a:9b:69:1c:
         b0:0e:79:28:ad:e2:b1:cb:e9:ad:b0:db:54:83:c5:4d:26:3a:
         cd:43:48:d6:d8:8e:71:e0:01:73:b5:8a:05:c6:d8:ac:2c:64:
         48:54:8b:76:3b:64:a9:bf:03:b4:d9:f1:ca:22:5c:60:44:fe:
         d2:78:a7:9b:be:7a:01:df:be:a8:d6:53:d6:58:8c:52:2d:d8:
         2d:7f:8c:6f:b2:b7:f5:93:7a:71:9a:84:66:12:e7:7b:ad:3d:
         0f:64:52:ab:ec:e1:cf:c1:a8:78:12:e0:3c:4c:da:93:ea:0b:
         d4:ca:76:0d:ad:9f:1b:d6:54:3e:7a:22:c0:04:0f:10:a1:b2:
         5f:5b:b9:2b:25:6e:84:68:ec:35:9a:dd:f1:a3:b2:c1:b8:19:
         10:41:88:5c:f2:ef:f6:e5:9b:f5:5d:a7:62:88:aa:d7:d0:80:
         90:3a:78:71:22:b6:7b:dc:23:53:4e:bd:44:c9:0f:66:af:d4:
         5c:ec:bc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:30:10 2026 by rpki-client