Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
File:                     rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft (raw, json)
Hash identifier:          z171Phdf8uRUTQ9m3JG/WmbEsy5Vk6YPE01uv3oLyf0=
Subject key identifier:   0B:49:EA:B5:F5:FE:DB:25:56:0D:12:A3:EA:82:E5:51:98:7A:DB:7F
Authority key identifier: AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27
Certificate issuer:       /CN=ac82c9dd9d6ccfb38ca11640e102f751ae274927
Certificate serial:       01A17A71E03E9F1C560E32B3226E56F0D293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
Manifest number:          0267
Signing time:             Mon 26 Oct 2026 23:00:45 +0000
Manifest this update:     Mon 26 Oct 2026 23:00:45 +0000
Manifest next update:     Tue 27 Oct 2026 23:00:45 +0000
Files and hashes:         1: AsgCbpxXAfVEl8fMySxEMEBj3v0.roa (hash: 3DUclWrbvVnjRe22xwXjCYPITDFNxuR0Ynpweo6931E=)
                          2: rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl (hash: 9UCAR2Nmzf6/W0SP+hFl7H0bvCzuMYc/gOdCqjcy8/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7a:71:e0:3e:9f:1c:56:0e:32:b3:22:6e:56:f0:d2:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac82c9dd9d6ccfb38ca11640e102f751ae274927
        Validity
            Not Before: Oct 26 23:00:45 2026 GMT
            Not After : Oct 27 23:00:45 2026 GMT
        Subject: CN=0b49eab5f5fedb25560d12a3ea82e551987adb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:c5:dd:7c:5f:25:85:fc:87:75:1f:00:5b:
                    f4:cb:dd:e2:bc:77:65:c7:3b:96:1c:72:6b:e0:55:
                    f5:94:90:d1:e0:8f:1d:54:1a:57:0b:7d:b3:32:9e:
                    7a:30:1f:30:8f:10:3d:52:24:d4:3d:05:9d:a1:4b:
                    96:63:6f:bb:84:ef:15:a4:99:7f:04:23:82:88:74:
                    e4:c1:21:a0:16:6f:19:53:64:e4:13:47:b8:18:87:
                    73:18:63:23:62:0c:d1:90:a7:2f:81:c5:59:23:db:
                    50:35:da:b3:0f:af:5f:d0:df:fa:a9:53:45:f3:65:
                    53:51:14:76:44:1d:f0:6b:35:01:fd:86:2f:07:d2:
                    a6:ac:5c:ab:5f:e5:1d:0e:4c:40:4e:59:6d:f0:00:
                    fd:76:fc:6e:f0:bb:91:b4:5e:f6:0f:64:bf:f3:a9:
                    b8:9e:84:8a:48:cd:22:1e:ea:ba:56:2d:22:5b:7a:
                    5e:a4:d4:e8:5d:38:93:d8:90:7e:bf:61:4b:9f:ea:
                    c0:82:22:e0:66:d4:03:12:0f:98:b0:fd:f6:79:2a:
                    94:3e:2a:d9:af:00:88:17:99:b8:c9:6e:ad:5a:20:
                    6d:41:d3:6e:e4:4c:f9:10:ce:ba:2c:d9:b2:34:03:
                    21:cf:50:81:ba:7b:4a:68:d7:ba:84:81:ee:86:e3:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:49:EA:B5:F5:FE:DB:25:56:0D:12:A3:EA:82:E5:51:98:7A:DB:7F
            X509v3 Authority Key Identifier:
                keyid:AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e7:4b:83:d1:ed:7e:a9:41:54:9e:b1:ca:e0:95:e1:3a:77:
         7d:f7:1b:7b:a5:9e:52:f2:9e:41:cc:a9:7e:ea:74:8b:fc:fb:
         fd:12:2c:b3:30:87:b4:8a:f3:15:59:32:a0:6f:39:fd:a3:e9:
         48:a6:9d:e7:6d:8e:f2:53:b0:06:6c:ba:98:03:69:1d:e8:f1:
         59:99:32:b4:18:65:27:bc:ac:65:73:0a:bf:8e:7c:5a:33:7b:
         c9:1f:ae:95:fa:60:47:75:b9:fd:6b:f1:7b:f2:da:9d:1d:95:
         e9:34:28:e9:ef:ff:ea:3b:17:f8:45:2d:98:27:ba:24:1b:b1:
         21:06:ae:6c:1f:11:cf:6a:1d:9a:e9:70:e7:0a:15:61:e1:26:
         e0:4f:97:98:a8:4d:66:4d:3c:62:89:63:73:d4:46:8a:8e:df:
         d5:2d:80:11:a6:e4:98:64:d0:be:cb:35:77:40:db:16:bd:e5:
         b5:bf:29:84:fa:51:61:9e:2b:6d:fa:3b:3e:8f:45:58:89:fb:
         ad:f6:bb:80:2d:c7:d8:08:3c:eb:34:51:7b:95:26:a5:14:8c:
         37:e8:a0:8c:e5:78:2e:8c:20:ce:4d:ad:d1:13:2d:83:fe:ef:
         31:52:1b:c7:b8:6a:47:03:4d:dd:5e:d5:2a:c4:0e:30:15:5a:
         a4:d5:18:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:02:01 2026 by rpki-client