Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
File:                     sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json)
Hash identifier:          fyzGU2GrUy8AwA/5SizLLc1Qz/nueNVnJSvaEyym5zg=
Subject key identifier:   F6:FC:51:A3:08:4B:B5:8B:40:47:ED:86:FC:CA:2B:FD:1D:9E:5D:AA
Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Certificate issuer:       /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Certificate serial:       01A11C0B05E7FC9918ED4C7E0C20B5B35017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
Manifest number:          18EF
Signing time:             Thu 08 Oct 2026 15:04:06 +0000
Manifest this update:     Thu 08 Oct 2026 15:04:06 +0000
Manifest next update:     Fri 09 Oct 2026 15:04:06 +0000
Files and hashes:         1: cQEbH0ReeL9KuFjUuYtxv0LNUA8.roa (hash: P6+BrvlEZ0ARWwChG27uoTYHL5ICmgRnw4a5c1gKOxk=)
                          2: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: J380r7BQ07CVKHy74WBkbXwyyFrBy0T6JlVgWUQaqCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1c:0b:05:e7:fc:99:18:ed:4c:7e:0c:20:b5:b3:50:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
        Validity
            Not Before: Oct  8 15:04:06 2026 GMT
            Not After : Oct  9 15:04:06 2026 GMT
        Subject: CN=f6fc51a3084bb58b4047ed86fcca2bfd1d9e5daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:3c:86:59:c1:1a:9e:16:1b:7f:47:96:47:
                    9a:13:c2:18:2d:32:53:ce:35:49:bd:5c:42:0f:10:
                    b5:6d:8f:10:b0:11:3a:98:88:47:22:30:21:9a:f8:
                    4c:11:bd:af:20:5e:0b:39:8a:77:95:25:e8:b6:1d:
                    ab:86:0c:dd:14:ea:16:77:c0:bb:5b:59:9d:dd:c0:
                    ac:c6:87:7b:51:d2:c2:6d:c4:2b:f1:51:90:47:6b:
                    da:4f:1b:af:d3:99:68:98:64:ef:08:98:16:72:00:
                    fb:ba:38:a0:61:fb:56:b3:39:13:03:34:78:21:e6:
                    49:aa:fe:99:a6:ce:9f:63:57:d2:3a:09:17:fb:66:
                    13:c9:0f:59:ba:b4:05:b2:60:85:fe:8c:f5:4a:0c:
                    3b:08:1e:42:c0:f0:b0:24:1d:d9:d4:70:ec:7e:51:
                    53:3d:1b:33:d7:d7:c2:b6:4c:6b:97:95:7d:84:58:
                    62:4a:4a:ad:27:61:34:fa:79:e1:d7:14:89:06:b8:
                    d3:6c:e9:e3:f5:d5:84:61:a8:1a:37:b5:46:29:4f:
                    70:5a:88:ef:95:1d:21:87:f8:c2:40:c1:50:94:b1:
                    6d:ba:4d:08:25:c7:5e:90:78:d2:42:22:38:6e:b9:
                    eb:b6:af:0b:7a:06:56:1f:49:3f:76:3c:4f:42:83:
                    ff:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FC:51:A3:08:4B:B5:8B:40:47:ED:86:FC:CA:2B:FD:1D:9E:5D:AA
            X509v3 Authority Key Identifier:
                keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a4:51:fe:4f:e6:31:34:36:89:bb:fd:eb:b0:ec:85:04:f0:
         17:49:9a:2c:93:86:e0:17:da:42:20:75:de:a3:bb:9c:28:d2:
         2d:5d:ee:34:d6:50:ce:c8:95:3f:05:c4:7f:9b:e0:b5:6e:14:
         74:83:19:7d:78:b5:69:eb:2b:87:2f:c3:40:b1:ea:4c:49:21:
         2a:62:32:e5:50:82:75:66:e0:17:eb:d7:20:b9:c9:ea:5d:07:
         04:2a:e0:ce:dd:e4:8b:06:9a:a5:ac:9c:75:a1:15:ea:f8:76:
         f4:e2:b2:45:37:83:d3:e1:02:d3:a2:65:5a:d7:38:52:6e:70:
         40:13:cf:1c:62:98:db:f9:ee:c5:d5:69:19:a4:99:92:5a:76:
         64:1a:9a:91:dd:a6:ea:24:d8:b3:c9:d9:73:a7:80:97:8a:31:
         04:ad:bc:99:da:2e:f7:09:4e:2b:2c:16:3c:06:3b:97:2d:99:
         ed:6c:95:21:b0:5f:88:7a:a4:0d:8c:58:f6:ce:46:5a:f9:e9:
         4e:2a:30:8f:1c:ba:7c:f5:bd:4c:c3:4b:12:a2:9f:b0:f2:fc:
         74:12:92:49:e9:e9:0b:17:3e:96:71:c9:eb:e3:b7:ea:ef:5c:
         1b:66:a0:86:93:14:59:e5:60:45:fc:a3:aa:65:2b:91:11:67:
         0b:6c:fb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:28:21 2026 by rpki-client