Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
File:                     2URo88w_OG8m5igbf6iww7sjagY.mft (raw, json)
Hash identifier:          PcwBVFzSf3SX0f4JnEZbWKbxSUd0H7GiOGjAuz6ZmGQ=
Subject key identifier:   F3:FD:63:87:2F:E9:2B:A5:27:96:4B:AB:4D:20:59:2E:2C:55:81:5A
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Certificate issuer:       /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial:       01A17C979AA5F9FA47B2D959B46F12982AD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
Manifest number:          04F4
Signing time:             Tue 27 Oct 2026 09:01:12 +0000
Manifest this update:     Tue 27 Oct 2026 09:01:12 +0000
Manifest next update:     Wed 28 Oct 2026 09:01:12 +0000
Files and hashes:         1: 2URo88w_OG8m5igbf6iww7sjagY.crl (hash: M0IqjWyDHgZOAyRmFxGmnX0oOy76Z9pWsgtUf5xF9TA=)
                          2: 2W8UbuMzJ_4l0XXqp2MoqWfFXpo.roa (hash: IF9NGoEJ576DjGe0oh23BNnEV/9sdYpBnLiKAR1szr4=)
                          3: 2naRCXtm4c8QGK9fzUN6omwb2OE.roa (hash: LZlEgbeiDa5co70KmVv/qHnC9NAMuF7oiCcCZqH+vuw=)
                          4: 6DOrz3928TU7wZXRvfoe5TIHe2A.roa (hash: dkoX6rsv82LKW6X0aXjN4hG4E9xoboCySwytbCJljwU=)
                          5: 9iYZwkxjUcEsFbxajgfKUAHpwqo.roa (hash: rOHD67cBggUdYXdaTP7eNFtk7CLJ5e+wg+hEmP7cS0A=)
                          6: kAKuXVzbthSJCa9_XyQiFsVmBso.roa (hash: j7YyQibF9jux/DZKePceRe9hnhmF98H36thhTNTqV+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:97:9a:a5:f9:fa:47:b2:d9:59:b4:6f:12:98:2a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
        Validity
            Not Before: Oct 27 09:01:12 2026 GMT
            Not After : Oct 28 09:01:12 2026 GMT
        Subject: CN=f3fd63872fe92ba527964bab4d20592e2c55815a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:07:72:7c:21:56:18:38:9d:c5:d3:40:fb:
                    69:14:05:e1:fd:6f:e8:bb:52:ee:e8:b9:10:39:72:
                    80:f2:68:c9:e8:57:b9:7a:e4:4b:79:37:e3:f8:b3:
                    02:33:c2:9f:e1:ef:0f:ed:1b:85:1e:e3:08:21:13:
                    68:3f:02:d5:22:a9:7d:6b:d7:2d:9c:2b:f8:1b:28:
                    fa:ac:4b:9e:d5:88:70:d6:00:82:1a:a6:97:a2:97:
                    bb:fe:6f:ce:96:0f:ea:9b:e5:96:c3:0f:67:b6:69:
                    d4:3c:cf:49:fd:d9:ae:10:83:b8:b2:a2:c2:2b:18:
                    7a:8f:a8:59:0a:66:71:61:f9:86:11:22:31:e5:30:
                    2c:99:3b:01:ec:62:8a:78:d0:9c:a4:b1:44:af:bf:
                    99:cd:44:fe:aa:6e:7e:0c:d8:50:5d:3d:23:da:54:
                    51:ab:47:cb:33:a6:6a:41:37:a1:10:76:ce:1d:1c:
                    7c:77:5c:c1:88:95:ff:09:13:cd:d2:81:54:4d:77:
                    c2:09:d7:29:fe:32:03:ac:dc:9d:c6:b8:e3:99:6b:
                    82:7f:0f:0a:ad:2f:17:c0:a8:64:88:83:aa:27:fe:
                    a5:84:39:ea:23:dc:cf:a0:3b:c5:5c:b4:e7:90:d8:
                    50:15:2f:e1:d1:68:ef:08:03:87:79:5f:20:b5:2e:
                    97:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FD:63:87:2F:E9:2B:A5:27:96:4B:AB:4D:20:59:2E:2C:55:81:5A
            X509v3 Authority Key Identifier:
                keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:9a:db:a6:19:42:86:55:52:23:13:42:2c:59:7f:ce:1f:60:
         1a:ce:11:7c:2f:f1:6b:28:03:b7:52:3a:77:99:46:84:bb:8e:
         49:b4:7b:34:c8:cb:2d:c7:0a:64:58:99:0a:56:a3:76:57:75:
         01:c0:0f:2c:fa:be:f3:94:5e:ce:9f:f5:c0:b5:59:e4:fb:07:
         c9:02:95:5f:f2:a4:1a:0f:3a:c3:af:dc:d8:72:22:91:03:47:
         c8:82:b9:ef:ea:05:3f:78:02:04:d8:a0:78:d1:98:3f:ff:00:
         48:81:82:55:17:c3:cb:b6:d5:fd:52:72:2e:3d:8d:28:fc:7d:
         e6:b5:4b:c9:e7:c3:3a:64:c4:a1:21:d4:6c:9b:96:82:fd:97:
         ef:a3:39:ef:33:70:79:52:16:b4:05:2c:c4:6d:e8:b5:7c:91:
         c3:81:b8:7e:9e:58:e6:6f:51:f9:d4:fd:45:e6:43:53:2d:02:
         5f:5e:56:3c:ec:7a:42:5a:bf:d1:5b:c1:23:ad:47:93:15:59:
         3b:24:4d:27:86:5c:a4:a9:7a:d2:f2:79:c8:6a:a4:bd:00:6c:
         0d:56:16:41:d9:c3:24:50:8c:90:cb:75:89:32:59:23:0b:d6:
         7c:05:1f:3b:77:e1:da:8e:9a:c7:61:48:02:49:83:3c:f2:78:
         4c:73:51:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:49:03 2026 by rpki-client