Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
File:                     ioludoVA84eh3U_52qS4W6SKkG8.mft (raw, json)
Hash identifier:          XJ0OxoKU0kJM6MgxV+EFNqZynAOLNJmqgEKfKojqjmw=
Subject key identifier:   74:B6:0B:07:6B:1A:BA:17:2A:C1:9D:DF:E6:6E:A7:1D:11:83:F4:7B
Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
Certificate issuer:       /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Certificate serial:       01A11A50049859C7B4321957CD7FF1803D8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
Manifest number:          13D5
Signing time:             Thu 08 Oct 2026 07:00:13 +0000
Manifest this update:     Thu 08 Oct 2026 07:00:13 +0000
Manifest next update:     Fri 09 Oct 2026 07:00:13 +0000
Files and hashes:         1: ioludoVA84eh3U_52qS4W6SKkG8.crl (hash: 45AASVuSddj9eolxLpZPAYFTmUrSMSMrWdOmpfR3Q08=)
                          2: pl9mzp_8YMyJw55sEo1vdEjuXI8.roa (hash: gvQ9YBNcPAS5X5E1J1OqXa8f8Nq/+m7113n6v9qADuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:50:04:98:59:c7:b4:32:19:57:cd:7f:f1:80:3d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
        Validity
            Not Before: Oct  8 07:00:13 2026 GMT
            Not After : Oct  9 07:00:13 2026 GMT
        Subject: CN=74b60b076b1aba172ac19ddfe66ea71d1183f47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:93:f3:8b:46:de:72:a0:cc:d1:d7:4e:30:
                    51:6e:13:93:18:c5:8a:f5:de:e4:0a:34:e8:b7:ed:
                    b8:c1:4b:20:26:e7:64:4a:17:8e:eb:f0:78:af:e0:
                    2c:36:53:7f:80:d7:e3:d0:a4:11:8e:68:b1:c6:0e:
                    21:54:4e:2f:38:01:49:c3:53:d8:7d:94:fb:d9:7b:
                    6f:b8:e0:ac:11:94:e1:d5:6f:e9:87:5f:24:98:f8:
                    82:b9:f7:16:a5:1d:0b:89:5f:ab:88:8a:8f:18:23:
                    2f:0e:2b:fb:a8:1b:57:53:5f:3d:d5:9b:ca:03:be:
                    40:be:54:10:b5:ff:b8:07:17:99:84:d2:66:f6:55:
                    38:b8:b5:f7:74:8f:21:74:bf:18:5e:b9:c4:af:ee:
                    7b:0e:8d:da:a4:51:f4:c1:15:40:b4:c5:5d:60:54:
                    ee:f7:20:97:2b:af:e5:76:75:9a:44:13:a6:79:ce:
                    79:bf:18:c5:06:23:e3:3e:51:4b:d2:18:34:9b:28:
                    ad:a4:ec:7b:39:ce:b9:64:c4:ad:91:6a:e7:4a:ca:
                    51:c0:22:5e:aa:35:df:f6:bd:98:77:db:30:1c:f8:
                    11:fa:01:d4:2b:40:79:9d:2a:09:d7:d2:07:2f:5a:
                    7b:4c:18:ff:b3:7a:f6:a5:65:47:a9:1a:e1:47:47:
                    aa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B6:0B:07:6B:1A:BA:17:2A:C1:9D:DF:E6:6E:A7:1D:11:83:F4:7B
            X509v3 Authority Key Identifier:
                keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:94:17:a4:42:e1:7b:18:14:7d:23:97:4d:e0:ab:15:92:07:
         c6:e3:54:a3:48:bb:db:5f:ef:e4:5d:08:7d:e1:61:08:df:3d:
         8a:5c:0a:c8:c2:4a:66:be:cb:06:bc:36:15:6a:09:bc:ef:01:
         de:2d:67:af:1f:71:35:4c:db:1a:ac:0c:b4:3e:50:1e:f9:b4:
         ae:cd:22:fe:3e:e0:2b:13:d8:ac:d2:56:c9:1e:ba:36:41:cb:
         0b:4d:a2:93:ba:0f:35:ac:67:22:cb:c4:42:1a:ea:04:a8:d4:
         fd:11:27:c8:0e:09:c0:5a:39:27:d6:89:6d:06:58:2e:e9:5d:
         74:4c:3e:be:9f:65:1b:56:1b:75:a8:7f:9b:e9:cb:98:3b:27:
         07:a2:17:04:13:bd:5c:0e:30:57:01:7e:fc:9e:53:ae:9c:21:
         66:33:71:88:49:7c:46:d3:ab:3f:04:19:b3:ff:13:eb:d7:88:
         e5:2b:f8:67:27:5f:71:7b:53:d2:37:1f:76:23:6b:ac:39:42:
         0d:79:e8:58:ca:2f:e6:6d:47:eb:81:cf:95:08:2d:25:a4:a9:
         ce:56:45:2d:85:02:65:14:ed:a7:91:23:16:82:00:58:58:09:
         78:cc:da:9d:bd:5e:fc:a5:26:fa:3a:1f:d5:f4:26:3a:ab:4e:
         c6:9b:52:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:36:11 2026 by rpki-client