Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
File:                     IJPjg7LMUtXsow_rEml1k8nHiKA.mft (raw, json)
Hash identifier:          U8DqE9gjHdakaN149cGDMQaPwi7YAsJHRyaM3MN/ggc=
Subject key identifier:   F7:7A:BF:EB:91:0D:1B:8F:47:FF:39:C5:B0:64:CA:9F:3B:C4:FB:32
Authority key identifier: 20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
Certificate issuer:       /CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Certificate serial:       01A17D059956CA869B2A6AD840DA11CB44EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
Manifest number:          1AC5
Signing time:             Tue 27 Oct 2026 11:01:21 +0000
Manifest this update:     Tue 27 Oct 2026 11:01:21 +0000
Manifest next update:     Wed 28 Oct 2026 11:01:21 +0000
Files and hashes:         1: IJPjg7LMUtXsow_rEml1k8nHiKA.crl (hash: EDKpPC6HEvxRD1IwzWiQz0QyaBZBmniGz4YMGZbsyng=)
                          2: UhcVOrWI94PD7J8NZ396e7oTXmQ.roa (hash: le2/ey5cYL9OHx+rHl459Ml2HcRFUdgLBFJPfGYggHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:05:99:56:ca:86:9b:2a:6a:d8:40:da:11:cb:44:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2093e383b2cc52d5eca30feb12697593c9c788a0
        Validity
            Not Before: Oct 27 11:01:21 2026 GMT
            Not After : Oct 28 11:01:21 2026 GMT
        Subject: CN=f77abfeb910d1b8f47ff39c5b064ca9f3bc4fb32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:c4:44:9d:3f:db:3f:c5:a3:09:d6:ef:b8:
                    e4:88:69:4b:ad:15:7d:44:cf:a8:18:a6:38:ef:9d:
                    fd:38:77:1f:fa:92:56:3f:6f:6c:b5:35:17:a0:6f:
                    b0:ca:36:3a:d2:05:95:cf:13:ab:b6:26:5e:ee:53:
                    ac:13:7c:0d:bb:31:97:23:5d:eb:67:70:2e:3a:29:
                    3a:ef:e9:5c:34:25:9b:28:a1:b6:f2:54:2e:84:06:
                    cd:57:ef:76:d6:b2:39:b6:6e:de:98:eb:44:dd:38:
                    0f:4b:6b:40:5d:e0:6c:a1:40:d9:b7:24:f2:44:9f:
                    08:17:9f:dd:af:2c:52:34:a1:92:70:b7:cf:4c:62:
                    af:ef:6c:41:e0:c7:0f:f5:b5:67:b5:6c:0d:3e:1d:
                    d1:24:50:82:c7:da:13:59:dc:67:f9:6e:5e:64:2a:
                    a9:fc:d3:0e:65:49:13:dc:8b:29:68:de:47:dc:c9:
                    e0:01:45:b9:5f:e0:60:d3:a1:be:3b:28:ea:7c:25:
                    80:e9:05:4d:d7:df:27:1d:fe:ef:09:b1:18:55:71:
                    08:81:88:9f:a3:3f:36:d9:a2:b2:5b:54:e8:27:9e:
                    d0:09:c8:ef:c8:a6:5e:66:3f:3b:43:ad:a7:6d:4f:
                    f1:3a:3e:e5:c8:7a:66:73:23:58:e7:5e:81:b6:8e:
                    4e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7A:BF:EB:91:0D:1B:8F:47:FF:39:C5:B0:64:CA:9F:3B:C4:FB:32
            X509v3 Authority Key Identifier:
                keyid:20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a4:36:73:2c:4d:be:1f:48:3b:47:37:ee:98:0f:0f:2f:48:
         f0:4e:7c:e6:38:00:51:52:5c:75:8a:7b:c2:67:56:5d:15:80:
         03:22:1d:85:85:e2:4a:a5:0f:b6:c9:49:f8:7c:f8:c3:a7:e5:
         ad:c7:19:96:ce:4d:cb:3c:b2:ad:85:ff:bf:bd:e7:52:75:16:
         28:22:4d:2f:9d:e0:dd:b0:01:36:34:5e:f9:56:81:58:c4:6a:
         94:ca:07:d0:fb:24:0d:95:17:6a:6a:6b:1a:30:e5:f7:36:b2:
         a0:47:2b:02:69:09:d9:52:89:b9:87:00:71:08:01:90:41:05:
         ce:96:4c:da:07:53:f8:49:69:e0:b9:1c:2f:35:d0:07:96:d5:
         47:aa:05:72:91:d8:5a:01:07:7a:78:16:eb:8a:18:f6:60:1b:
         4e:c7:ee:75:cf:04:0c:11:08:90:19:5a:55:04:a1:03:7e:6d:
         4a:54:e7:66:75:34:bf:15:62:be:a7:1f:7a:63:c7:fc:bc:eb:
         48:d9:bc:b5:54:e0:d8:86:52:f4:70:97:f5:1a:95:66:58:0f:
         00:72:1e:97:60:1e:4e:7e:35:22:04:95:51:76:79:9e:88:95:
         61:6b:25:61:6e:35:b2:de:99:6e:43:83:13:1d:d9:fa:ea:76:
         05:42:ee:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:27:05 2026 by rpki-client