Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File:                     tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier:          4Izwe0m/K/QYPIKtW8b689RUR6ITMHcZNFQYJ9VPUjQ=
Subject key identifier:   0A:37:84:D2:BE:28:14:74:BE:4E:6C:B5:A3:07:B5:C7:13:81:67:6C
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer:       /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial:       01A1445F58AF4192E22785CA0F2C06D1F954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number:          1128
Signing time:             Fri 16 Oct 2026 11:01:01 +0000
Manifest this update:     Fri 16 Oct 2026 11:01:01 +0000
Manifest next update:     Sat 17 Oct 2026 11:01:01 +0000
Files and hashes:         1: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: fUuy3RDJpLK5v3wOpTub9u3ZG149QD8zrdialijuMoA=)
                          2: wFIxH6rmc0pTO3lHbm1q54JXQUw.roa (hash: LdJ/iIkB/Qkjc76ikiZz0rGCtU2IPzIjdQ2qezYDSK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:44:5f:58:af:41:92:e2:27:85:ca:0f:2c:06:d1:f9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
        Validity
            Not Before: Oct 16 11:01:01 2026 GMT
            Not After : Oct 17 11:01:01 2026 GMT
        Subject: CN=0a3784d2be281474be4e6cb5a307b5c71381676c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:ab:9f:b0:e4:b2:3f:93:3f:4f:b8:37:dd:
                    66:a5:e2:c7:e9:ad:23:07:b9:b0:1c:a6:9a:e7:b7:
                    e3:ea:1f:14:70:5f:98:bd:93:ef:f0:09:8f:38:e7:
                    a3:44:bf:a4:4b:de:c1:b0:52:e6:47:65:ef:ac:ce:
                    82:32:a9:44:8a:3b:71:48:59:e0:87:c4:1e:97:99:
                    e0:31:e0:8f:d5:cb:e4:dd:69:ad:6f:ef:1c:8e:c9:
                    c5:8d:0a:53:89:4f:72:0e:3f:ad:6b:5d:aa:2a:dc:
                    99:e5:44:22:85:21:73:fb:53:b0:74:6b:36:62:79:
                    bf:d3:a0:29:05:30:48:c9:45:ac:d2:a9:c9:11:2b:
                    ed:8f:af:28:83:50:29:48:41:a7:20:db:39:18:cb:
                    bc:8e:9e:68:bb:e2:ff:d4:d2:5f:a1:c1:3f:19:98:
                    81:8c:67:fe:04:79:0c:d2:30:29:4e:bd:85:59:55:
                    d3:51:99:5a:95:e2:2d:1e:bc:6e:42:0a:3c:96:b3:
                    20:19:1f:55:1b:08:39:e9:7f:e8:26:7b:d3:40:0f:
                    ea:f4:ca:9f:a8:43:b2:af:02:dd:28:cd:d1:2e:0a:
                    bf:4a:13:f6:1c:79:c7:c9:a0:b2:26:19:c6:7f:17:
                    1b:54:55:4c:ef:70:fe:80:01:49:d1:d5:f3:01:b3:
                    a0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:37:84:D2:BE:28:14:74:BE:4E:6C:B5:A3:07:B5:C7:13:81:67:6C
            X509v3 Authority Key Identifier:
                keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:82:79:bd:6d:6c:38:59:c4:e5:32:a4:b1:aa:4e:fb:d8:34:
         9e:0b:c4:75:e4:9f:52:e9:b5:3c:07:53:26:c1:b6:45:dc:4b:
         2b:ce:47:c1:d3:c9:cd:c9:da:4a:40:c5:6e:9e:e4:5d:1c:a7:
         bf:8a:6f:3d:27:9f:13:05:4e:47:7a:f0:92:16:e1:f3:2d:db:
         c6:95:24:9c:25:40:dd:97:11:96:eb:40:91:29:d8:29:30:fd:
         5f:78:09:28:3a:40:7a:85:45:cd:05:9f:85:f1:cd:1b:62:21:
         c7:d8:4f:b6:1f:e6:e7:ca:da:16:a0:55:fb:5e:19:ca:d5:26:
         9c:d8:c1:11:cb:98:1d:8f:29:d5:15:37:86:31:cb:60:a8:77:
         02:24:d9:2a:12:f7:3b:85:97:70:49:8a:17:c8:ba:b7:f6:05:
         8f:5f:e7:8d:18:a7:0b:45:e6:8b:f1:19:a7:c9:9a:ce:cf:f5:
         43:01:10:04:63:72:4e:a1:0a:a4:82:33:55:2d:95:96:28:91:
         e8:d7:b1:f9:6f:a1:52:7b:3b:75:2f:a2:53:0d:ad:e8:e6:85:
         eb:ba:c3:61:58:f5:23:a6:57:7a:20:c5:10:c0:29:a6:0f:6b:
         1b:cf:75:b3:cd:59:9f:ff:4e:b9:0f:3a:ce:fb:d7:f8:1d:8d:
         c9:f5:e5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 19:33:47 2026 by rpki-client