Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
File:                     J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json)
Hash identifier:          BQJ9pncZ60HnIANLl19G2IbBqCfCc4YFQd36spqLePs=
Subject key identifier:   43:BB:1F:DB:A6:74:61:D0:1B:5B:71:07:13:9C:3B:0D:34:9E:17:84
Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Certificate issuer:       /CN=279f3652e4458fa001c6738a41425b07e70c91a1
Certificate serial:       01A10DDEE8DE458E0BCC383D6E66AFA85596
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
Manifest number:          1704
Signing time:             Mon 05 Oct 2026 21:01:14 +0000
Manifest this update:     Mon 05 Oct 2026 21:01:14 +0000
Manifest next update:     Tue 06 Oct 2026 21:01:14 +0000
Files and hashes:         1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: pUJqDo2qsJRz8O4BSs6rsMhLsvYxoGIsarHM/stVJBI=)
                          2: h53oA3SujEDr4ELckr6UN9W2NOk.roa (hash: EVBN35qoptKAigPRFwoWW6G0+97b+KvRqgyf+bRb3+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 20:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0d:de:e8:de:45:8e:0b:cc:38:3d:6e:66:af:a8:55:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1
        Validity
            Not Before: Oct  5 21:01:14 2026 GMT
            Not After : Oct  6 21:01:14 2026 GMT
        Subject: CN=43bb1fdba67461d01b5b7107139c3b0d349e1784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:8a:a6:9a:ec:a8:bc:38:1d:06:51:98:7f:ad:
                    4e:d7:dd:be:b0:f4:cf:5e:8f:e8:ce:11:95:dd:1c:
                    4f:59:15:6d:6b:e6:5a:1e:4a:4c:6e:bb:67:96:47:
                    90:71:e1:21:ca:26:cd:ac:95:39:97:fb:6d:0e:59:
                    8a:72:1b:6b:fc:c4:73:6e:41:23:bc:6a:dd:ca:8c:
                    4d:f1:fe:c1:67:e9:89:f1:d9:9b:e5:f6:78:10:62:
                    e9:57:bb:3c:2c:c1:32:8d:b2:7e:71:b7:af:e5:ef:
                    9d:9f:5a:d3:93:7a:0b:71:be:28:11:7b:0b:75:d4:
                    e9:fe:18:df:5c:d0:e2:d7:93:17:24:9a:13:3a:f9:
                    6f:81:94:f7:14:14:96:b7:0c:1b:c8:68:67:42:3f:
                    96:c4:7a:98:2d:dd:9b:8f:9f:78:69:05:b9:1e:94:
                    8d:cc:89:2a:f3:76:27:10:05:93:f0:2f:2f:17:a1:
                    03:f2:8b:0a:a5:06:8d:0c:73:df:65:75:53:62:78:
                    24:d6:71:ec:d7:5b:8d:32:c4:64:09:7f:4a:05:34:
                    ea:22:f7:b4:73:fe:58:40:83:ae:6a:d8:4b:64:a6:
                    9c:7d:9c:60:80:e5:ea:e5:92:3e:ff:57:c4:b0:3a:
                    f1:97:45:03:c3:2c:5e:19:67:77:a3:01:f7:c5:c2:
                    e7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BB:1F:DB:A6:74:61:D0:1B:5B:71:07:13:9C:3B:0D:34:9E:17:84
            X509v3 Authority Key Identifier:
                keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:32:7e:d3:5b:66:69:93:80:c3:f5:5b:0f:8b:b0:31:79:99:
         5c:26:13:dc:f0:ab:ac:23:b6:94:73:eb:d9:3e:a0:bb:10:77:
         d2:6a:c5:27:f0:1c:25:1e:90:94:d0:b3:20:b4:12:34:b6:fe:
         da:44:64:19:80:8a:b0:7d:fe:bb:0a:7a:89:1a:b5:38:ea:9d:
         a4:0c:b7:81:f8:85:a1:1b:a0:f9:d6:6c:81:2a:1a:60:6c:79:
         c9:63:8c:ad:47:f8:2a:ab:46:93:91:32:10:ca:e6:66:9f:43:
         6f:33:5e:cb:e8:48:e7:3d:45:1b:53:c6:c7:c7:49:a6:6c:1f:
         69:29:b0:d6:d0:aa:25:6e:59:e1:c1:8a:dd:fa:0c:29:51:5b:
         b9:e5:a4:a2:0f:0f:5f:95:65:82:35:82:4e:f9:f0:a1:6f:88:
         c6:fe:f3:ae:db:5b:6e:a7:aa:04:aa:59:30:48:6d:74:25:73:
         2f:3a:bc:47:20:c6:c4:ba:b0:10:e6:a9:c2:b6:95:54:d0:cc:
         f8:82:7c:7a:5e:4f:18:15:21:cf:e2:09:db:15:4d:d0:c7:0a:
         cf:e5:82:eb:ad:f9:96:35:c3:4d:22:e7:8d:1b:25:cc:76:78:
         f1:71:dc:27:58:60:fc:77:73:10:b2:93:16:3f:a3:cd:7d:a4:
         1f:24:bf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:08:44 2026 by rpki-client