Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File:                     PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier:          blpzk190u2utF75Vby6jKOU5NQzSGIbDlJ+FJ1qTI3o=
Subject key identifier:   E8:5E:6D:A8:60:14:9E:91:CF:AD:05:E3:25:E6:7D:39:BC:36:D1:FF
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer:       /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial:       01A1126073CEA35829841826B66B9B380509
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number:          1093
Signing time:             Tue 06 Oct 2026 18:01:13 +0000
Manifest this update:     Tue 06 Oct 2026 18:01:13 +0000
Manifest next update:     Wed 07 Oct 2026 18:01:13 +0000
Files and hashes:         1: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: 4+p7uYPixels0qh71kZRWAq76ZJ/6RJZk02iIOSUYzI=)
                          2: bJ6xJt6ZdP1j5xV1ifbFjOZCpCg.roa (hash: CuOWPy4R5sb9VUo/TuOTu1jjmvwMnXC2ruvyuim2IiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:12:60:73:ce:a3:58:29:84:18:26:b6:6b:9b:38:05:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
        Validity
            Not Before: Oct  6 18:01:13 2026 GMT
            Not After : Oct  7 18:01:13 2026 GMT
        Subject: CN=e85e6da860149e91cfad05e325e67d39bc36d1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e3:59:aa:d4:1e:7c:5e:b8:7f:8b:52:a3:98:
                    c0:52:f7:84:64:a9:5e:71:aa:85:0f:e0:d2:a2:1a:
                    b6:30:23:db:c8:89:5c:f6:51:4b:4b:42:f2:01:38:
                    38:2f:d6:f2:cd:70:d9:ec:94:58:65:ea:00:9b:68:
                    ae:44:86:ce:38:61:f9:4e:35:b6:01:43:35:35:44:
                    ba:72:40:10:84:92:ac:eb:b9:53:b6:79:aa:8f:1c:
                    5d:fa:2e:51:87:56:9c:79:31:4f:10:a8:8b:1c:cc:
                    ea:79:c6:d1:d2:22:5f:c0:b8:c7:55:91:f5:a1:dd:
                    83:77:19:80:2d:e8:b8:47:15:cd:d7:fd:81:14:69:
                    86:06:11:d5:a5:74:8d:f7:87:fc:97:b1:f8:95:cb:
                    a7:0b:d4:1e:14:07:9d:4d:9d:1e:8a:66:20:ac:92:
                    63:9c:9d:d1:dc:f1:57:87:20:fe:0d:55:3f:23:ae:
                    77:59:4e:ef:47:9b:99:b3:46:1c:c5:07:f0:b6:1e:
                    6b:79:b8:03:fe:11:6c:6e:7e:9a:8b:4a:07:85:7e:
                    43:06:43:fd:57:7d:18:71:89:b2:1e:6b:e4:78:e3:
                    42:7c:ba:34:29:cb:07:59:9b:d6:ed:8a:4f:6c:2e:
                    53:4b:68:fa:65:62:80:4c:2f:33:95:8b:e0:43:a1:
                    52:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5E:6D:A8:60:14:9E:91:CF:AD:05:E3:25:E6:7D:39:BC:36:D1:FF
            X509v3 Authority Key Identifier:
                keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:38:3a:e6:1c:2a:3f:15:3f:2b:0a:5e:08:81:8f:b2:7d:f8:
         6f:6c:d6:e1:4b:b4:61:c3:eb:3f:b8:70:85:6a:00:e8:8a:2f:
         18:97:d6:ca:e1:3c:ad:c8:fd:85:c0:2d:6f:d8:c7:63:db:99:
         c1:90:2c:90:1f:04:1a:5c:62:ca:41:77:01:ca:db:94:2c:b9:
         ca:16:07:de:b7:f2:44:3e:c2:01:23:74:7d:85:0e:9e:00:b3:
         8d:7b:92:96:e8:d9:06:d3:93:35:f0:b6:3f:59:cc:38:07:82:
         67:2a:99:97:96:05:51:84:c8:1a:d1:6b:7b:d5:bb:c9:63:49:
         9b:c4:fe:05:88:4a:cf:b1:c4:54:30:5f:4e:31:35:7a:1e:72:
         01:e7:c2:fa:d7:9f:5c:ed:c6:07:aa:ee:03:d5:7e:81:ad:9d:
         b6:79:ea:9b:ff:73:e9:e5:80:c7:6d:f7:bf:a0:e6:31:fd:d5:
         79:01:ac:0a:3b:ef:30:91:a1:42:02:44:63:21:41:2d:07:1f:
         bb:28:08:7b:dd:60:a9:3d:02:a9:c7:3c:1c:ee:54:d7:f9:2c:
         8a:7b:12:23:91:b6:e6:a8:fa:f9:e0:e1:84:5a:6b:1e:71:b9:
         78:76:fe:39:c4:31:b3:a6:a3:46:b8:ea:ca:0e:4f:b5:3b:e0:
         d3:ac:75:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:24:43 2026 by rpki-client