Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.mft
File:                     FEDP2UKzzeZl7PLxqC2EWwRRTMY.mft (raw, json)
Hash identifier:          KpDYMD+VKWovcTT1wCzV9OMl4fXmAtsgJeuk2roWmEM=
Subject key identifier:   88:EA:3E:AA:7D:F4:00:28:6E:CE:43:48:F3:05:1F:52:F7:13:86:04
Authority key identifier: 14:40:CF:D9:42:B3:CD:E6:65:EC:F2:F1:A8:2D:84:5B:04:51:4C:C6
Certificate issuer:       /CN=1440cfd942b3cde665ecf2f1a82d845b04514cc6
Certificate serial:       01A1569D262A73F01DAEEECD819242BF0E7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FEDP2UKzzeZl7PLxqC2EWwRRTMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.mft
Manifest number:          01B1
Signing time:             Tue 20 Oct 2026 00:01:41 +0000
Manifest this update:     Tue 20 Oct 2026 00:01:41 +0000
Manifest next update:     Wed 21 Oct 2026 00:01:41 +0000
Files and hashes:         1: FEDP2UKzzeZl7PLxqC2EWwRRTMY.crl (hash: g482ICrilPTr7VeBL4QiLUcqkhZ17NNxUKiyNKlHPXU=)
                          2: jlwmlKSUfHbKs6zt1m81RLJnNls.roa (hash: 0Wp49LsbSoKPdY1WwpNDwL8E5Fus4mwp+7pWa02+aqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FEDP2UKzzeZl7PLxqC2EWwRRTMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 17:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:56:9d:26:2a:73:f0:1d:ae:ee:cd:81:92:42:bf:0e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1440cfd942b3cde665ecf2f1a82d845b04514cc6
        Validity
            Not Before: Oct 20 00:01:41 2026 GMT
            Not After : Oct 21 00:01:41 2026 GMT
        Subject: CN=88ea3eaa7df400286ece4348f3051f52f7138604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e1:8d:e6:4c:c9:87:60:25:8f:81:94:9e:ed:
                    90:83:1b:99:81:59:bb:de:cc:34:38:df:d3:cc:af:
                    45:82:48:56:3a:a1:29:3c:aa:1a:b3:af:76:55:58:
                    59:5f:ea:4d:69:3b:c6:0a:15:93:d2:0c:f2:f4:c5:
                    f2:a9:24:44:24:69:0e:44:be:de:75:e2:1a:81:eb:
                    8a:1e:67:a1:65:d8:63:de:ec:ea:31:25:48:51:a0:
                    15:bf:dd:4e:de:55:7f:04:dd:78:3f:6f:3d:35:d6:
                    a5:48:bb:7b:8d:d6:7c:ec:a4:6c:e0:47:dc:3a:d2:
                    0c:85:2a:0c:2f:b8:ac:05:38:e4:0d:2f:3d:31:e3:
                    51:08:83:78:e2:c5:93:d3:f2:71:74:c9:3d:61:c0:
                    f5:49:1a:f7:7b:48:10:9f:4d:09:fd:4c:5e:de:62:
                    42:87:86:03:e3:88:74:fa:4a:9d:6c:52:07:e0:db:
                    bd:4e:d1:12:8e:73:9d:1c:3a:a2:2c:17:f9:6d:34:
                    a5:75:6a:ce:73:c5:4b:e4:99:fc:1f:80:e2:cb:0f:
                    0d:b2:6a:3a:08:5e:73:bd:07:26:3a:f7:03:d1:af:
                    0a:0c:5c:9b:0f:5c:42:b6:99:62:24:75:86:8e:e6:
                    30:e7:c7:37:68:0f:71:d6:a7:eb:6c:61:b7:6c:21:
                    be:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EA:3E:AA:7D:F4:00:28:6E:CE:43:48:F3:05:1F:52:F7:13:86:04
            X509v3 Authority Key Identifier:
                keyid:14:40:CF:D9:42:B3:CD:E6:65:EC:F2:F1:A8:2D:84:5B:04:51:4C:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEDP2UKzzeZl7PLxqC2EWwRRTMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:5f:d8:ad:51:34:3f:3a:14:eb:49:e1:5e:8e:86:58:f4:c7:
         0f:6d:78:0e:7e:1a:23:c3:a6:08:ec:69:e9:5d:09:8f:ee:4c:
         d6:6e:7c:b7:46:f1:30:ba:11:4c:75:7a:5c:f4:fd:d8:28:53:
         bd:94:53:b8:79:9b:69:2e:e7:b2:4c:bb:52:f5:cc:aa:88:a2:
         df:9b:0d:bc:be:2e:78:d5:ce:49:b6:2f:f4:30:80:a7:db:05:
         16:6a:2b:94:65:14:f1:95:7e:00:fb:f2:b1:d4:65:7c:1f:df:
         1e:b2:0c:97:45:12:11:d8:fa:f2:cd:53:e6:a2:a5:f0:a3:cb:
         0b:43:76:43:2f:a9:e4:2d:61:db:c0:16:13:7b:d5:7d:19:57:
         81:8e:12:cc:dd:39:27:3b:56:94:ab:03:51:37:1e:d6:78:29:
         fa:d5:44:dd:68:79:88:d0:28:b5:8c:f0:15:b7:97:28:84:47:
         d9:f7:41:b4:fa:3d:b7:e8:ff:78:86:02:50:e6:0a:64:08:e8:
         a3:2d:06:6a:84:b9:b7:ea:89:39:2a:7c:6f:84:fd:a7:49:ae:
         32:1d:6e:e9:a1:8f:1b:8c:c1:26:0b:1f:27:22:1b:53:cf:4c:
         dc:b2:00:e1:a5:73:55:37:40:fd:c4:33:e6:cf:63:65:54:49:
         76:2a:02:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:15:30 2026 by rpki-client