Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
File:                     b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json)
Hash identifier:          +ve3I3DXrl4lkC4J15TCPDlkiYO6fdYbGH2S2kyi1Uc=
Subject key identifier:   AE:44:DB:BA:E9:DB:94:C6:28:C0:40:CB:E9:1A:72:D2:93:C9:06:33
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Certificate issuer:       /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial:       01A108139C3F40EF073D3BEA0DB235DA07D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
Manifest number:          1250
Signing time:             Sun 04 Oct 2026 18:01:04 +0000
Manifest this update:     Sun 04 Oct 2026 18:01:04 +0000
Manifest next update:     Mon 05 Oct 2026 18:01:04 +0000
Files and hashes:         1: QEvR43rn7DHOYyABuYA1eLNqIkA.roa (hash: cUXOa6ZZg6M88CmsP7OWEFb4wJjhqPpZLujJtEhpcCc=)
                          2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: 5QGLhD/mOJMPdDaPjpUzxxtVGKVvbs5O8tCAd+0NzNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 18:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:13:9c:3f:40:ef:07:3d:3b:ea:0d:b2:35:da:07:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
        Validity
            Not Before: Oct  4 18:01:04 2026 GMT
            Not After : Oct  5 18:01:04 2026 GMT
        Subject: CN=ae44dbbae9db94c628c040cbe91a72d293c90633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d1:24:ee:ab:4b:2d:a6:c5:82:0f:c7:ab:22:
                    10:17:b6:55:c1:79:e0:2f:5b:68:4e:c4:9e:b8:27:
                    ca:7e:85:f4:c4:b5:68:9f:8b:d2:92:c6:fc:6e:fb:
                    25:20:9d:ff:88:6b:29:35:5d:52:47:c5:b8:bd:d0:
                    ee:2a:75:0f:c4:8f:57:fc:49:0e:87:51:17:34:c3:
                    39:d6:6f:1a:a0:51:84:52:4f:e3:09:81:44:d8:93:
                    52:42:40:59:84:76:4f:b1:60:cd:c0:a6:1a:7e:39:
                    ba:38:02:5f:b7:81:37:0e:fc:e1:e8:27:fe:94:84:
                    00:88:5c:0b:c9:fe:8d:38:39:18:21:ee:cb:35:0f:
                    05:4f:70:02:9b:cc:7c:e7:e4:dc:1d:e4:fa:25:5f:
                    37:46:cc:80:89:01:91:f8:ed:7b:91:db:20:8d:91:
                    15:e3:4d:cd:bb:5b:c8:7e:eb:90:95:e3:05:c3:1f:
                    91:b0:29:99:9d:04:df:8b:6b:28:18:a4:9c:b1:81:
                    9b:46:3a:c8:0b:16:bd:52:81:b7:d1:f2:72:e6:a2:
                    47:06:62:13:59:45:6b:e0:82:ca:de:fa:e2:83:1e:
                    83:02:0c:6a:01:86:a4:a1:7e:a3:e4:88:56:90:07:
                    73:96:30:b6:45:af:02:ae:80:95:11:59:eb:c1:fe:
                    70:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:44:DB:BA:E9:DB:94:C6:28:C0:40:CB:E9:1A:72:D2:93:C9:06:33
            X509v3 Authority Key Identifier:
                keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e8:81:3c:59:98:01:2e:70:47:a8:57:c8:6a:ac:ef:01:fe:
         0b:8e:53:62:eb:10:ba:8c:a9:e2:d3:8d:d9:cf:88:1a:d4:6d:
         f2:a4:17:5e:8c:04:40:55:20:94:e7:a8:82:1c:81:e0:95:60:
         2a:ff:b5:d2:0d:b8:4b:bf:0a:66:2a:56:17:18:52:3c:6b:78:
         c3:c1:71:32:3b:ef:0c:b9:9c:15:2e:79:7f:71:42:d8:fd:59:
         88:a8:11:e9:64:c4:c3:a7:fc:35:a3:46:c0:f2:98:c7:05:66:
         df:a2:e4:27:61:0e:56:a8:4b:84:1f:19:76:ae:51:8c:12:34:
         2f:e3:4a:3b:98:d2:4e:16:fe:19:23:27:b1:91:6f:8a:36:c5:
         67:a8:9e:b5:ff:5b:1e:53:f7:4f:b1:3a:3e:78:6f:c5:f9:42:
         d0:3d:d9:2c:35:37:a5:df:5e:8e:e5:f1:57:d9:b8:9c:83:b3:
         76:af:66:a4:6c:62:a9:18:f9:c8:c4:2b:42:f4:64:1d:f5:b7:
         bb:3d:6e:be:86:ca:a2:85:bc:39:c3:90:2c:3b:8b:c4:c8:b9:
         e0:d8:00:f5:ac:14:7f:58:a1:de:41:e5:ad:99:32:57:74:9f:
         b9:c7:f1:11:4d:b8:11:54:bf:63:b6:a3:0f:b4:fd:8d:05:b7:
         98:45:44:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:30:16 2026 by rpki-client