Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
File:                     82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft (raw, json)
Hash identifier:          Sn9iP6c0J31yGMfJH98u5KFkTdriYGs1IcjOKIQPo5Y=
Subject key identifier:   E8:B6:CC:CD:88:DA:B8:B8:34:24:FE:24:47:27:CA:D3:23:BD:E6:1C
Authority key identifier: F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64
Certificate issuer:       /CN=f36f9cbaff653b60134b46aa70e79117098a7c64
Certificate serial:       01A1C179053F92702F17950D11996E9F0C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
Manifest number:          15EF
Signing time:             Mon 09 Nov 2026 18:01:36 +0000
Manifest this update:     Mon 09 Nov 2026 18:01:36 +0000
Manifest next update:     Tue 10 Nov 2026 18:01:36 +0000
Files and hashes:         1: 82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl (hash: TTBdSl81KT9N4knjcebjjZyfogv2SCV4Jc6a0lD3KYk=)
                          2: AWrvYFZRzBwoKUoD2RTwopn0ahg.roa (hash: FIrRNnU7H4yL3fRTOTjvqaEhwxiYCua1DMnPIKZ4Wpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 18:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c1:79:05:3f:92:70:2f:17:95:0d:11:99:6e:9f:0c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f36f9cbaff653b60134b46aa70e79117098a7c64
        Validity
            Not Before: Nov  9 18:01:36 2026 GMT
            Not After : Nov 10 18:01:36 2026 GMT
        Subject: CN=e8b6cccd88dab8b83424fe244727cad323bde61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ca:91:f1:3c:2c:43:ee:7e:bd:5b:92:56:83:
                    da:80:b0:22:16:58:bd:9c:ca:7a:7b:af:87:a1:66:
                    69:d5:fb:88:cd:c6:e9:4f:1f:6e:1d:a7:d3:1b:82:
                    d7:2b:cf:30:8a:c7:93:05:1a:d0:6e:17:37:b6:09:
                    88:e4:90:a5:77:a4:a2:70:f9:30:61:22:73:0d:4a:
                    65:66:6c:db:a7:77:59:d6:ee:24:a7:5a:2c:d0:9d:
                    ce:7d:b9:52:36:de:95:46:01:94:69:47:e3:56:09:
                    30:0c:2a:21:b0:e5:18:23:ad:2f:5a:7a:69:2e:56:
                    14:76:ad:87:ff:b9:7e:2f:b8:79:70:9f:4a:c9:d0:
                    44:5b:22:d0:9a:55:e4:f6:56:19:f1:7f:05:74:0e:
                    f3:e8:1a:9c:0e:16:88:09:e7:6f:97:cd:d8:5a:f4:
                    d6:ee:09:ce:15:6d:d7:95:e2:a1:49:c2:3f:9b:59:
                    6e:a2:4b:5a:03:47:46:63:1d:99:1d:35:c1:01:81:
                    b9:88:e6:ee:06:87:b2:f3:6a:ba:7b:cc:24:d7:b9:
                    e0:11:43:06:95:34:ee:2d:8d:24:10:36:cd:ac:12:
                    b2:2c:7c:15:ec:68:19:0c:f7:d8:9f:29:15:c1:7c:
                    c9:1b:81:33:79:5a:7a:25:e7:a4:ac:fb:9f:53:97:
                    4a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B6:CC:CD:88:DA:B8:B8:34:24:FE:24:47:27:CA:D3:23:BD:E6:1C
            X509v3 Authority Key Identifier:
                keyid:F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:3b:a6:d4:71:25:2e:f8:2a:38:93:50:33:47:aa:b7:41:62:
         f4:82:96:f6:83:58:85:00:f4:de:77:ea:c8:04:0e:5a:9c:a7:
         66:7e:a0:a8:46:91:03:34:e9:53:3d:ee:cb:2c:7e:1c:51:a7:
         87:53:69:b2:4a:57:9f:b0:e8:e2:b5:65:8a:4f:71:2c:24:45:
         15:5c:4a:69:14:12:bf:d7:65:77:ac:45:98:c6:ca:69:24:5e:
         d2:d2:49:c0:33:63:20:db:a1:b9:cf:b4:5f:33:6c:c5:16:80:
         04:af:65:94:9d:10:87:ee:6b:9a:df:5b:2e:e5:d3:d0:c4:4c:
         b6:74:a2:45:26:14:6a:3e:66:24:73:e0:c2:11:26:20:f7:42:
         d0:8c:05:35:bf:df:8b:dd:33:42:cf:35:1c:5e:9c:fc:01:15:
         68:20:37:fd:ab:d3:ae:91:41:55:27:ed:f8:64:b3:81:eb:d5:
         1c:c9:42:61:8d:db:ac:81:c6:95:38:8d:08:e9:91:09:c6:85:
         fa:57:91:58:4d:c9:c0:34:f4:6d:10:f0:e5:ee:9e:de:c2:a2:
         16:07:c9:70:ce:58:3e:17:b2:8f:25:f2:81:8e:06:84:8d:14:
         13:9f:ee:e4:09:52:c7:f7:ae:77:17:bf:e3:81:f0:d7:e2:b6:
         da:5d:d3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:52:39 2026 by rpki-client