Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
File:                     8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json)
Hash identifier:          SCfNEV6mUgIb+9mtjYDnNeU1IcemfVhDf+yfmlc5Gig=
Subject key identifier:   EE:DA:25:2D:8C:32:59:90:80:51:F4:80:F5:1F:D3:9C:F9:A8:4B:39
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Certificate issuer:       /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial:       01A1935627A1DABF0AE1CEEABC17B90A3B95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
Manifest number:          1AE5
Signing time:             Sat 31 Oct 2026 19:00:59 +0000
Manifest this update:     Sat 31 Oct 2026 19:00:59 +0000
Manifest next update:     Sun 01 Nov 2026 19:00:59 +0000
Files and hashes:         1: 3xGhx8NZgWxLSKCDfcPFLQ8-OsI.roa (hash: nrPCTtkuQDIcy3WjV2PDeyqXdxGsNrOVS6dTe/yokSw=)
                          2: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: Mimji8xxlPJ137DqE381sfXvy4JWe7EzPGKNtFg9yq0=)
                          3: M9uNW_AjvSRWP9leh-go_2dj3js.roa (hash: ujQsM5g8Rg+mlV0fU5GktfX3ayjJW/2OIfzqCO9iobo=)
                          4: X7VKKNvOYZTTFDZ8BCWjmPebtX8.roa (hash: L/kFEnNplgovPacWJl2tFaydAgsY/9Zn113PwxIDUis=)
                          5: ZH-fOKhfhXtTvq5cNeuUVWkcFIQ.roa (hash: 2xvhce+amLHD9b2VUMk2z7GO/hZOLwWwWRJLNXmF+4g=)
                          6: w7bLCCx1wCzEhIJTLJSgrAAyI94.roa (hash: xKotcxgu+SFt13dTwTupn3pf3OXdH+smODfsZIVeV0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:93:56:27:a1:da:bf:0a:e1:ce:ea:bc:17:b9:0a:3b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
        Validity
            Not Before: Oct 31 19:00:59 2026 GMT
            Not After : Nov  1 19:00:59 2026 GMT
        Subject: CN=eeda252d8c3259908051f480f51fd39cf9a84b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:4b:47:07:d2:ed:57:84:7f:b9:7b:c3:f2:
                    14:c9:95:db:65:fd:d6:79:f0:10:2c:46:10:31:c3:
                    29:99:40:9e:b4:fa:f7:e0:9a:47:d2:6d:6e:3f:c2:
                    68:84:e8:1d:bb:79:c3:bf:30:5c:5b:46:35:9e:23:
                    2b:c9:34:35:02:d9:ce:3d:ff:29:e8:e8:b6:65:a2:
                    4f:56:f4:23:90:12:7d:35:f3:fb:d4:be:ad:fc:e3:
                    ab:50:f8:43:2a:c4:17:20:0d:9c:bf:e1:a8:f3:11:
                    c9:30:de:7e:cb:ce:0e:e1:85:90:6e:eb:90:67:47:
                    40:ba:95:ef:18:d6:a1:4f:79:0d:e9:4d:25:28:a3:
                    cd:1a:2b:fd:ee:6a:f2:61:45:c4:7a:76:18:73:44:
                    de:ce:87:57:42:eb:b2:b3:73:43:34:ab:a8:17:c1:
                    61:3c:25:37:c8:08:9b:98:18:83:58:47:67:89:c6:
                    73:4b:4c:99:35:20:b8:e2:68:56:9d:71:e4:a5:95:
                    20:11:b3:67:05:78:95:2e:c1:5c:87:d5:0a:5f:97:
                    84:7f:4c:2e:78:82:35:a3:cd:5d:3b:0d:8e:90:dc:
                    1e:e4:9b:fb:52:cb:f9:2a:d2:32:8a:3e:1a:b9:20:
                    62:a2:af:ff:9e:dd:bc:9a:95:e3:9d:55:c4:04:58:
                    d9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DA:25:2D:8C:32:59:90:80:51:F4:80:F5:1F:D3:9C:F9:A8:4B:39
            X509v3 Authority Key Identifier:
                keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:12:63:3c:83:1b:a0:1b:6b:48:af:59:87:5a:04:13:31:72:
         cd:e5:53:cc:5e:89:2e:7d:b7:bb:92:08:a1:45:f7:01:e1:f5:
         fe:00:63:52:8a:be:17:67:b1:5e:6c:ed:13:9d:3a:22:d6:0c:
         a2:07:4e:0e:8c:71:57:62:be:b2:f9:80:9b:b3:d5:6e:17:62:
         1a:f2:a6:43:a4:1d:e1:59:24:29:bf:9f:ff:5e:14:70:88:c9:
         5a:2b:5a:46:e4:9f:6f:26:ad:7f:0f:fd:be:4c:ad:52:d4:00:
         44:81:67:e9:f3:bb:40:1b:d8:9f:1e:13:49:22:6b:16:bb:7e:
         05:ef:8e:81:e3:c3:b2:58:15:50:1c:76:70:dc:76:cc:eb:3e:
         87:18:aa:f2:f9:05:48:2f:9c:cd:b4:af:71:85:48:88:58:ca:
         87:9a:11:cd:2a:8f:ab:c6:42:0a:e4:97:17:bc:4a:a8:fb:69:
         81:7a:b0:59:af:2c:98:24:54:28:59:05:b9:80:17:25:fd:8c:
         39:da:e7:6d:18:43:50:b4:4e:65:df:b8:e6:dd:ce:7c:dd:cf:
         11:fd:b6:30:3d:97:1d:c5:b6:9d:fa:fb:fb:1a:2e:30:50:ed:
         4e:01:8a:42:ce:e6:4e:e2:a4:88:00:ea:da:dd:9e:92:58:96:
         c0:c6:86:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:50:15 2026 by rpki-client