Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
File:                     L46D7v5_FLnkSQo27r2IHhY8zBs.mft (raw, json)
Hash identifier:          ajHhr0+blrqz/60Qt7FVp8WrozO85S78obRgeT72kKQ=
Subject key identifier:   0B:53:02:1A:7B:72:6F:FA:20:EA:A2:C5:76:25:BC:76:07:5B:38:C2
Authority key identifier: 2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
Certificate issuer:       /CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Certificate serial:       01A1280C7FCDC7E724B00115DD7581BC8925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
Manifest number:          17DF
Signing time:             Sat 10 Oct 2026 23:01:10 +0000
Manifest this update:     Sat 10 Oct 2026 23:01:10 +0000
Manifest next update:     Sun 11 Oct 2026 23:01:10 +0000
Files and hashes:         1: L46D7v5_FLnkSQo27r2IHhY8zBs.crl (hash: f8KP5RYZVcCza4kpPU5BSSPbOHcsWVf+LMwR8NU6Vx4=)
                          2: tNjZH9-x1g7HqUfJGt0InZjB23w.roa (hash: RRoUsNS1EP4tRlbwAyzXgXLAhFiDzTM4MGWjbgquZiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:0c:7f:cd:c7:e7:24:b0:01:15:dd:75:81:bc:89:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
        Validity
            Not Before: Oct 10 23:01:10 2026 GMT
            Not After : Oct 11 23:01:10 2026 GMT
        Subject: CN=0b53021a7b726ffa20eaa2c57625bc76075b38c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:1a:84:e9:98:8e:3b:68:f9:0a:f5:78:d6:
                    5a:1d:e0:38:82:95:41:69:e1:58:13:08:e5:97:65:
                    b4:22:80:01:80:76:12:bf:fa:92:63:f0:88:72:12:
                    62:53:a9:0e:82:0d:de:7d:d3:b1:e8:a9:bc:85:78:
                    a3:53:47:d5:d1:4c:f7:13:ad:79:55:a8:3c:cb:60:
                    04:0a:d6:cb:0e:8d:4c:c9:aa:6f:5e:6e:50:22:2b:
                    fe:67:98:85:d4:ab:72:1f:90:18:a8:18:37:09:30:
                    61:30:71:b1:63:f3:92:d8:53:92:d3:95:ed:96:7b:
                    90:7c:2a:b5:60:75:bb:ab:72:ca:0a:01:c9:7d:08:
                    a5:7c:37:b8:ce:28:57:74:e3:fe:1b:73:da:a8:3e:
                    ac:50:37:16:50:4f:39:da:08:ba:85:25:b3:d1:87:
                    c4:0a:3c:ca:2a:ca:8f:c7:5c:29:41:21:3c:2f:58:
                    5b:d7:2f:9a:e4:2e:ae:d4:a9:58:8a:e6:c0:54:9b:
                    ff:55:28:35:64:bf:a3:e3:63:b4:0c:1a:ac:06:36:
                    7c:42:23:4e:ac:f0:e8:dd:91:d2:26:37:a2:36:c5:
                    57:00:f3:1d:19:ba:a5:8e:a4:7d:ee:92:7f:30:96:
                    44:91:32:68:42:29:1c:97:0f:23:25:61:69:66:53:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:53:02:1A:7B:72:6F:FA:20:EA:A2:C5:76:25:BC:76:07:5B:38:C2
            X509v3 Authority Key Identifier:
                keyid:2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:a6:9e:3e:d5:99:0c:18:8e:a1:7c:27:23:cf:d2:47:81:0f:
         31:80:f1:be:6c:0d:25:b2:31:64:c3:37:30:64:78:45:19:d9:
         55:5d:03:cb:88:e5:3c:4c:e0:f1:44:62:86:39:95:49:0d:d9:
         0d:25:c3:03:d8:60:8e:b0:cd:4a:6a:ac:33:d7:e7:83:5f:15:
         fc:ab:e9:32:62:28:e8:24:bc:e4:56:54:8e:dc:90:64:bf:2c:
         50:f4:cc:5c:1b:aa:60:a7:07:d6:31:ca:91:a5:14:69:fb:03:
         64:93:67:87:de:97:9d:bb:7e:be:d3:4f:21:2f:a8:2c:70:44:
         70:91:f6:ef:7d:14:5b:00:d9:9c:b0:f2:91:ea:4f:2d:4b:32:
         9b:4c:fe:70:ef:fe:72:83:f5:6c:1e:1a:8c:53:50:78:74:fe:
         0b:a4:c9:0f:64:19:cf:4a:55:ed:65:75:f3:ce:b0:e7:c0:6a:
         d1:ff:89:78:b9:51:33:83:92:cd:c8:72:3f:32:72:36:89:2e:
         c6:18:52:36:7d:e9:d4:18:cd:d7:0a:e6:ef:45:a6:c4:ca:66:
         0e:6c:a3:ab:ec:5c:48:bf:10:b8:39:0a:2b:0d:1d:ac:ed:c7:
         a5:47:82:1e:b8:e3:7b:93:5e:06:b4:f5:86:62:47:cf:23:ee:
         32:dd:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 00:40:17 2026 by rpki-client