Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
File:                     RPMwC82ETWB1L-Xfst4pmWbpuPY.mft (raw, json)
Hash identifier:          0W/fGVHgZxH8iKjpvccfeqQTXJBcIfXHQWZjkAf3P9I=
Subject key identifier:   09:5B:AF:CA:C3:54:79:9E:AE:3F:05:EF:DD:39:A7:7C:DA:F4:C3:34
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Certificate issuer:       /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial:       01A12955A630E44E20A1AE6FA85084C0D83D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
Manifest number:          1084
Signing time:             Sun 11 Oct 2026 05:00:41 +0000
Manifest this update:     Sun 11 Oct 2026 05:00:41 +0000
Manifest next update:     Mon 12 Oct 2026 05:00:41 +0000
Files and hashes:         1: RPMwC82ETWB1L-Xfst4pmWbpuPY.crl (hash: 4iJCP+chTPTbnm+MMIQ1zv0AWFeTlqjDH7ZtiTT5+es=)
                          2: nileVr-DQfSJAZFmbcbQEtK8Yk0.roa (hash: 9mZq8h73P9FU0Z0VCgdb2KmGquLGZE66QT5Z6ZqwuxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:55:a6:30:e4:4e:20:a1:ae:6f:a8:50:84:c0:d8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
        Validity
            Not Before: Oct 11 05:00:41 2026 GMT
            Not After : Oct 12 05:00:41 2026 GMT
        Subject: CN=095bafcac354799eae3f05efdd39a77cdaf4c334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f0:b1:7b:27:42:ed:ca:a5:79:b3:e9:1f:89:
                    1e:a6:a1:93:c9:1e:4a:2b:2a:e0:2c:e3:27:cf:75:
                    63:d0:bf:c3:a6:34:0f:d7:6a:c9:4d:17:25:be:31:
                    9b:1c:64:8d:ba:9b:83:65:86:b6:80:54:b4:5d:16:
                    0d:5d:72:b4:b8:61:1f:90:a8:99:a9:d8:1d:86:34:
                    11:fa:f9:20:30:34:7f:ac:98:c2:2a:b8:b1:d3:53:
                    da:ae:2e:25:c8:a2:33:40:a9:01:87:b8:eb:63:c6:
                    b1:fe:68:45:b0:0b:6f:4c:47:5e:f9:72:ef:5d:b5:
                    c0:aa:52:5a:93:83:86:4d:cb:de:a7:b8:cc:28:22:
                    56:d3:d0:cc:88:69:dc:0b:98:93:83:54:e1:30:2d:
                    95:40:32:68:3b:60:cf:70:7b:c0:48:8c:90:17:07:
                    5c:54:90:37:29:18:0c:54:61:89:e1:84:1a:e2:c7:
                    33:da:f0:a2:01:ab:15:f3:b7:f7:10:d1:87:7e:07:
                    75:0b:8b:39:6b:cf:1f:68:ff:be:c9:49:c7:24:da:
                    9a:11:c3:92:34:3d:a6:53:66:09:76:49:79:3a:bd:
                    28:c7:a8:71:93:ac:d0:48:42:5b:49:fe:85:08:04:
                    87:e9:7f:66:65:82:f9:a1:c0:ac:01:c6:ec:1c:3a:
                    8d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5B:AF:CA:C3:54:79:9E:AE:3F:05:EF:DD:39:A7:7C:DA:F4:C3:34
            X509v3 Authority Key Identifier:
                keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:81:bf:86:27:bf:35:83:46:30:3a:42:b8:fd:6a:8f:11:bf:
         73:02:c3:cb:52:50:cb:e3:bd:08:18:e5:9e:8f:1f:76:70:02:
         61:a8:12:c0:a5:21:cc:68:5c:bc:2b:34:bf:2d:d5:10:69:df:
         c5:bd:f1:36:93:08:6b:7f:b4:d4:be:1a:f1:d0:9f:35:c5:5b:
         67:1a:13:95:07:19:47:45:6f:ae:62:f5:3f:c6:bf:c2:8d:bd:
         ca:b4:1d:3f:fa:4c:99:e0:1e:40:bb:e3:46:09:82:7a:d4:75:
         01:8e:de:ff:97:5f:f2:ac:50:3b:68:33:b9:61:12:3f:fc:10:
         ea:0c:53:b9:49:04:41:3b:a4:35:81:cc:ab:a9:6a:45:c6:3e:
         f7:2c:90:61:c7:74:05:d4:86:22:38:39:f9:08:71:91:5e:37:
         04:d4:69:3a:3c:5b:b2:31:45:32:84:4a:a4:9f:a3:b3:b0:2f:
         0a:66:4c:51:46:2b:b0:70:ff:9f:ad:6c:93:8f:4b:b1:79:67:
         17:72:73:8d:7a:b6:d9:6f:b0:f7:e4:b6:81:db:f9:44:81:24:
         e2:90:1d:aa:ab:15:bc:3a:9e:64:75:d4:19:c5:11:c8:e4:cd:
         8d:66:1c:32:1c:02:ac:aa:a0:be:d9:60:6b:3a:58:cf:73:f6:
         8a:be:76:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:51:46 2026 by rpki-client