Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
File:                     _OoI6EId8vJFx8szPudqFKiILUo.mft (raw, json)
Hash identifier:          e148FQJg+QYHOOx7yNg+RBGHrp75mRaGZLOf0kAydsA=
Subject key identifier:   DA:30:C2:52:10:C1:9C:43:4D:09:B9:FF:7B:AA:7C:7F:7B:2F:A5:30
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Certificate issuer:       /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial:       01A17F62484FC338C5ED21C15E23704827D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
Manifest number:          1AC9
Signing time:             Tue 27 Oct 2026 22:01:49 +0000
Manifest this update:     Tue 27 Oct 2026 22:01:49 +0000
Manifest next update:     Wed 28 Oct 2026 22:01:49 +0000
Files and hashes:         1: 102NyqwI6NUjHs7bCvz-B7agUdM.roa (hash: 5hj0xFAny5+vtgd3t6VT//Hd2v6CocMrOduYjNO+NI4=)
                          2: 1nVHIu-5n51i9XhRUguwo5Agsgg.roa (hash: gfFsI93bvHGfawYL3os2AP8o+JuPoCqZf2VysVyBfmc=)
                          3: LAOAzix8Zi6Y7eROUhiHseM7d1U.roa (hash: Qhgem+rCCIPGj27tJdRK6lacEFlZtLP66ADVBe3CFfA=)
                          4: _OoI6EId8vJFx8szPudqFKiILUo.crl (hash: sAJPFlaJRQ4QtLMohIh6MvlODt2+GnCdd06SWsb7nCo=)
                          5: vtzoMlVsaR1SjsCwCY3vHw4SD88.roa (hash: l1imowCkVJ1ojfww3ZUzrxP/ubYhQS8cf2hc3Hjykbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:62:48:4f:c3:38:c5:ed:21:c1:5e:23:70:48:27:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
        Validity
            Not Before: Oct 27 22:01:49 2026 GMT
            Not After : Oct 28 22:01:49 2026 GMT
        Subject: CN=da30c25210c19c434d09b9ff7baa7c7f7b2fa530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:05:a6:7e:0e:e3:dd:cc:46:ab:2c:e1:ee:1c:
                    8e:02:eb:b5:82:3f:86:96:63:ef:ce:5f:6b:d0:d9:
                    7c:a3:e3:d8:51:21:80:b1:48:d1:36:c2:8e:03:3f:
                    78:ee:51:dd:85:73:9b:49:4b:cd:52:28:e5:5f:78:
                    61:a8:6c:bc:5b:09:74:1d:bb:1f:15:73:9b:b0:c4:
                    84:3a:36:d9:2d:32:8e:4c:0f:fb:66:45:11:bf:a5:
                    cb:00:3b:59:63:3e:00:38:33:05:af:8c:f4:e2:a8:
                    47:83:39:d2:ba:e6:48:c1:22:69:e9:a0:fc:4b:14:
                    98:70:c1:62:cd:0b:01:61:07:6b:57:21:14:38:51:
                    b3:c3:9f:7b:db:62:0c:f7:fb:eb:81:f0:15:38:7e:
                    62:6b:33:ec:11:c2:4a:b1:a3:1e:3d:ae:33:1b:b5:
                    6f:f6:ce:73:d2:5a:1f:e3:96:d4:50:29:b7:9f:11:
                    3a:d1:2c:6a:1b:67:07:6d:9c:04:d6:f6:f1:8f:6d:
                    08:0d:f4:9c:40:dd:e8:5c:cf:7f:f0:9b:f7:4a:4e:
                    10:62:69:67:16:da:0d:47:f8:1d:1c:4f:1b:15:7a:
                    ee:fd:9a:e2:ac:1a:19:05:2d:e6:ae:f5:0b:01:08:
                    bc:71:cf:e9:a1:3a:67:12:ec:af:a6:55:ed:fb:f8:
                    90:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:30:C2:52:10:C1:9C:43:4D:09:B9:FF:7B:AA:7C:7F:7B:2F:A5:30
            X509v3 Authority Key Identifier:
                keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f9:af:e0:b4:25:b5:8c:e2:ef:43:d2:d9:74:04:69:aa:1b:
         5c:67:da:58:be:16:da:cb:74:90:1b:34:70:27:c5:18:28:72:
         1c:b7:b3:a2:78:04:5c:08:6b:1f:cb:ed:ee:e6:e0:cb:6b:22:
         0c:cf:fa:c6:b1:44:c1:7a:3b:64:fb:00:15:2a:87:90:51:6d:
         8f:4d:cd:00:7a:99:20:80:c9:98:05:c5:b9:c6:00:24:0e:1a:
         fe:fd:3e:d2:c2:9a:cf:14:c7:8e:af:00:9d:be:38:e9:00:5a:
         eb:44:f1:b2:44:30:ee:df:24:3b:18:04:a8:33:a4:e1:b1:3e:
         0c:6a:0a:42:e5:10:37:63:73:4d:d0:12:2d:29:79:02:cd:05:
         e7:9e:d6:bb:66:d1:ee:92:08:03:3c:0d:39:6c:a1:6e:92:cb:
         67:65:20:28:b2:65:6d:69:41:14:09:6d:8b:6b:92:ad:86:f3:
         43:3d:1d:ad:4f:12:f2:40:a6:01:ff:8c:c2:22:cb:04:ef:ed:
         36:b8:f3:9c:c1:49:5c:8c:87:38:77:ee:fd:95:27:88:b6:b6:
         9a:33:af:2f:c1:7d:68:de:0a:34:72:89:be:4d:fb:90:8e:19:
         4b:59:d9:12:70:5b:a5:c6:92:67:98:9a:4b:ac:30:44:11:4d:
         6d:b9:24:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:16:19 2026 by rpki-client