Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft
File:                     mJre8bGpea83LsZ1WgtUIaBncbs.mft (raw, json)
Hash identifier:          Wdx7ervF9nR/0FG9OKIsF17Y/ehLDnCx+JeII9Pl0ws=
Subject key identifier:   88:5B:48:F3:35:17:2C:84:15:01:D4:E1:E8:B4:DA:07:31:3A:56:AB
Authority key identifier: 98:9A:DE:F1:B1:A9:79:AF:37:2E:C6:75:5A:0B:54:21:A0:67:71:BB
Certificate issuer:       /CN=989adef1b1a979af372ec6755a0b5421a06771bb
Certificate serial:       01A1231CEFBE1ECFD6FC43E75B06D7750736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft
Manifest number:          02A8
Signing time:             Sat 10 Oct 2026 00:01:01 +0000
Manifest this update:     Sat 10 Oct 2026 00:01:01 +0000
Manifest next update:     Sun 11 Oct 2026 00:01:01 +0000
Files and hashes:         1: mJre8bGpea83LsZ1WgtUIaBncbs.crl (hash: OtVHHXkExA14hX5VHhz6EDCOZ3jy0jzNo6L6MkPB0go=)
                          2: tLe7pLUB1FbsxJodBjiaylvPWqY.roa (hash: iCcIo0MXZAGo4QKL7jZTOf07lWCaTF9D6uBBNDm3oqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 00:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:1c:ef:be:1e:cf:d6:fc:43:e7:5b:06:d7:75:07:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989adef1b1a979af372ec6755a0b5421a06771bb
        Validity
            Not Before: Oct 10 00:01:01 2026 GMT
            Not After : Oct 11 00:01:01 2026 GMT
        Subject: CN=885b48f335172c841501d4e1e8b4da07313a56ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:41:16:24:c0:bc:1d:0f:cc:47:40:4e:42:
                    65:bb:6b:61:ef:20:f3:96:1f:97:06:e3:39:dc:2d:
                    12:1b:ea:00:60:ac:3e:a0:f7:d9:ee:fc:64:e5:87:
                    b9:c9:29:8c:58:3f:7d:4d:42:df:c0:d2:84:88:68:
                    c2:05:bb:fb:a7:43:bf:27:40:14:72:5a:a7:a2:11:
                    bf:bb:d6:a4:77:aa:cc:48:f4:57:02:39:74:67:82:
                    20:6c:9f:be:91:93:09:fd:38:4e:41:6f:a1:8b:9b:
                    31:53:e5:4f:21:8f:a5:6b:ce:8d:d8:61:42:11:b8:
                    e3:0a:ee:cc:9d:fa:8b:47:78:8b:aa:07:e9:ac:af:
                    4c:44:a0:18:b1:30:75:48:05:6f:12:fd:11:e7:55:
                    de:46:18:f7:a4:b9:70:e6:bf:4a:5e:39:ac:33:8f:
                    1a:23:73:46:52:d6:1f:67:f1:4e:c8:82:c5:87:95:
                    57:c8:61:c2:27:20:4b:d7:e8:79:07:55:f3:a6:4c:
                    a6:af:39:7a:f8:e3:25:06:46:d1:01:6e:9b:57:6c:
                    19:c8:25:9f:6b:9c:e8:6d:71:cb:b9:7e:80:9d:17:
                    e0:5f:3a:f3:ca:ad:4a:7a:d1:c0:7a:40:c5:e7:d3:
                    a8:11:8e:f2:62:5f:c7:10:1f:73:53:90:d4:31:c9:
                    35:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5B:48:F3:35:17:2C:84:15:01:D4:E1:E8:B4:DA:07:31:3A:56:AB
            X509v3 Authority Key Identifier:
                keyid:98:9A:DE:F1:B1:A9:79:AF:37:2E:C6:75:5A:0B:54:21:A0:67:71:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d8:81:41:ed:96:98:bb:bc:6f:6a:bb:5c:9e:6a:2d:97:05:
         56:1e:ab:43:e5:9d:50:3b:42:2b:49:52:02:ca:f9:ba:93:b7:
         53:6e:90:21:9a:01:1f:1d:79:6e:e2:db:10:ee:45:3f:a8:42:
         be:f8:45:ba:33:3e:37:93:96:61:66:71:13:6b:5e:7b:65:1d:
         45:8a:9a:f5:80:6c:ed:74:4a:04:77:01:7e:2a:b9:93:73:0c:
         fe:7a:b3:96:84:82:71:5b:fe:b5:13:6b:db:89:ce:b8:d5:18:
         f2:07:86:ce:5f:f4:da:bc:6e:42:56:1d:f4:56:3b:93:56:af:
         7f:51:da:c2:ff:2f:6d:50:e8:e0:7c:64:f6:e0:05:aa:02:52:
         26:19:68:bc:ed:c7:1e:6b:97:24:a4:e7:c9:1e:b2:63:49:92:
         19:43:8a:bf:aa:51:5e:85:e4:fa:5b:cc:74:0d:a9:d2:42:17:
         ad:d3:fb:af:fb:79:a6:9b:0a:a7:76:58:ad:22:5d:0c:e3:f8:
         c9:e2:a9:bc:bb:6b:b6:4e:60:ed:fa:96:7e:f5:98:61:cd:76:
         9d:fe:8f:ca:66:e2:d3:fb:8b:d2:dc:ac:37:67:31:c9:69:85:
         8c:7a:ca:a7:ea:0a:d1:33:b5:40:8f:58:38:fc:f8:b1:3f:6d:
         54:a4:eb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:43:33 2026 by rpki-client