Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
File:                     C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json)
Hash identifier:          iGtWEpFpGudkrcaX4HcNfZfzQAJO3x5KsYS2ttZEvSs=
Subject key identifier:   D6:7F:CD:C8:E3:E6:CC:8B:FE:30:B8:9E:01:53:9C:00:88:1F:36:6E
Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
Certificate issuer:       /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Certificate serial:       01A1795EFD36759BB48B2887CADD1A53496D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
Manifest number:          059E
Signing time:             Mon 26 Oct 2026 18:00:30 +0000
Manifest this update:     Mon 26 Oct 2026 18:00:30 +0000
Manifest next update:     Tue 27 Oct 2026 18:00:30 +0000
Files and hashes:         1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: DJMB9jyw5KCnAo26CEKY0/J9fSW6Wk7t5+gwNmu4D+w=)
                          2: GTbIIUIo-dUPXDDNc0IDT6FB8t4.roa (hash: 8J7E94r3VGtcxGoE3/Ht7FS8OoqmAYFunNkzFd6kzqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 18:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:5e:fd:36:75:9b:b4:8b:28:87:ca:dd:1a:53:49:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
        Validity
            Not Before: Oct 26 18:00:30 2026 GMT
            Not After : Oct 27 18:00:30 2026 GMT
        Subject: CN=d67fcdc8e3e6cc8bfe30b89e01539c00881f366e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:05:fc:b5:b3:28:93:c6:00:d5:d1:36:bc:
                    27:c2:b6:3a:88:41:0a:0f:a8:2a:92:2a:af:7a:6b:
                    9d:cc:a4:fa:54:fe:77:73:1f:92:1b:b9:cc:42:e5:
                    81:9a:71:da:f3:df:ac:75:23:2a:72:93:e7:33:c9:
                    60:64:cd:2c:ad:44:b4:99:88:5e:08:b3:a7:bb:bb:
                    b0:ce:99:ca:4f:db:3f:51:a1:6a:f8:91:e8:4c:da:
                    83:2a:ed:ea:ab:da:41:ee:36:fd:35:a6:f3:5b:88:
                    ac:9f:fe:85:06:4a:f4:be:ba:c5:03:fd:43:3e:39:
                    57:ba:f9:31:05:05:63:16:78:eb:67:0a:96:69:9b:
                    81:e5:1d:78:f0:f0:c4:81:15:02:4e:0e:6c:d4:52:
                    35:71:0c:3d:a1:97:d8:75:fe:9e:af:cf:58:aa:73:
                    70:16:b7:9e:ea:8e:18:5b:2b:a9:47:d4:d4:f4:e9:
                    69:35:61:80:c5:97:29:0a:02:6d:c8:82:9d:c5:04:
                    0e:90:7d:40:6f:61:e3:a9:da:0b:b4:3c:c6:83:4f:
                    dd:16:15:0d:73:c1:51:8d:16:5e:26:4f:45:12:6a:
                    94:a3:ec:bf:31:21:f3:eb:3c:d4:27:01:9f:3b:51:
                    a4:42:83:7c:d2:c6:cc:fb:bd:30:28:03:ad:c5:45:
                    74:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7F:CD:C8:E3:E6:CC:8B:FE:30:B8:9E:01:53:9C:00:88:1F:36:6E
            X509v3 Authority Key Identifier:
                keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:af:8d:84:4f:ec:d6:34:e4:98:c7:0e:86:7d:62:66:be:b3:
         aa:08:5e:dd:90:2f:b8:21:fd:32:a9:ac:dd:51:e8:85:e6:46:
         d0:07:81:75:67:26:e4:b3:1d:31:b4:a7:8d:04:ae:85:51:2d:
         74:2e:6a:b3:31:d1:86:54:49:4d:2d:52:19:50:a8:ae:df:d4:
         62:38:10:33:e7:8b:cf:a7:58:29:a4:aa:78:fc:6c:f2:50:94:
         81:0b:93:7f:52:7e:56:31:66:7c:c3:e9:24:3a:d9:20:6e:b2:
         9f:5c:db:53:68:bc:03:17:d0:67:07:e3:dc:0c:ce:b6:9c:99:
         91:2b:12:0f:ee:3d:63:1b:32:68:ff:21:a1:6e:5c:4e:23:55:
         51:0d:2f:c1:e4:6a:f5:ea:b2:28:02:fa:00:b6:58:aa:c4:90:
         a9:9f:6e:85:34:c1:ff:f2:49:05:d2:c4:0f:89:36:31:38:f0:
         40:4b:cb:c5:d3:48:fe:92:92:20:6e:e7:58:85:2b:f2:cf:6e:
         b4:ee:c4:b6:ef:50:e0:55:3e:5f:54:61:1f:7e:cc:86:d0:f7:
         01:de:d7:74:1c:21:6f:14:cc:68:9c:88:ee:55:90:ef:6a:c9:
         c1:a1:66:e3:0f:54:23:8f:c2:e0:d0:dd:ca:b6:56:68:fc:53:
         8d:d1:06:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:48:34 2026 by rpki-client