Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
File:                     fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json)
Hash identifier:          4LrZqUzwn6uesRTKNtyflDm70NF1p/F8SVGliuRbc2E=
Subject key identifier:   24:F5:2E:18:D7:FF:35:42:23:A2:B9:5E:44:29:E5:CD:CF:EB:7F:EC
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Certificate issuer:       /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial:       01A17B842E54093165D67C0E632345BBEFFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
Manifest number:          0EEB
Signing time:             Tue 27 Oct 2026 04:00:22 +0000
Manifest this update:     Tue 27 Oct 2026 04:00:22 +0000
Manifest next update:     Wed 28 Oct 2026 04:00:22 +0000
Files and hashes:         1: 08gQk2AeldcK_y6tYivNi31VDhw.roa (hash: iDSr2+dL188PsGjLi4V4pKrhdyzfHy95/dG6MIkWF8U=)
                          2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: MQIPJmXg46Ny8DLadAZeoWdQDdmy18LitgQjaEVkEjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 04:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:84:2e:54:09:31:65:d6:7c:0e:63:23:45:bb:ef:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
        Validity
            Not Before: Oct 27 04:00:22 2026 GMT
            Not After : Oct 28 04:00:22 2026 GMT
        Subject: CN=24f52e18d7ff354223a2b95e4429e5cdcfeb7fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:24:1c:67:8e:9c:45:6d:4d:2f:c0:ec:12:
                    c3:76:38:d0:75:ea:97:75:15:0c:db:8c:1b:9e:7e:
                    c9:5b:09:7e:d3:4b:b1:ac:c3:0f:80:04:11:a7:be:
                    36:b4:29:c3:36:63:cd:07:89:a7:39:bd:6f:dd:78:
                    58:5b:42:7c:7b:36:43:2c:e8:98:bf:ee:78:ee:16:
                    22:ac:e3:fc:5e:e2:6d:7f:59:c3:55:cb:31:93:d8:
                    49:1e:0b:8d:53:a8:ab:85:a8:4a:45:f1:3a:68:17:
                    a3:08:39:c3:ac:b1:59:3a:a6:9b:80:72:8a:0f:5e:
                    b1:1b:4e:b9:6a:7a:1d:89:b1:80:7a:b3:4c:7e:76:
                    50:d8:99:f4:bc:b7:0c:35:1e:27:b2:bc:4e:7c:ce:
                    9c:38:9f:e4:48:df:0f:0c:aa:89:56:43:f2:40:ab:
                    bb:57:d1:44:2b:1a:12:a1:f2:f8:d3:1f:d9:b1:2c:
                    16:b2:7c:d4:57:e2:93:6a:9c:7f:63:73:f7:f3:28:
                    f0:f8:5f:ff:aa:ab:b3:ce:97:64:b0:09:37:1a:8b:
                    ca:f6:06:92:f1:e7:33:22:65:14:96:0f:03:e6:b9:
                    6b:5c:39:39:7d:ae:c3:78:d6:a5:58:51:5e:8a:61:
                    5b:59:6f:bd:4d:f1:9d:06:66:07:fc:57:bc:e5:c1:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F5:2E:18:D7:FF:35:42:23:A2:B9:5E:44:29:E5:CD:CF:EB:7F:EC
            X509v3 Authority Key Identifier:
                keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b1:25:9b:b5:03:59:a1:1a:df:21:72:2d:7a:87:8a:0f:89:
         20:30:c1:f6:22:c9:3a:da:92:a4:f8:98:28:e4:1c:4a:15:2d:
         82:ed:32:64:15:c7:33:37:57:dc:3a:32:8c:a7:c6:6e:4b:46:
         77:a6:a5:2b:0f:92:49:cb:1b:66:02:14:11:f6:0c:3f:de:e8:
         3a:98:e0:b7:d9:d3:ba:13:75:f8:22:98:f6:94:65:cb:40:cb:
         0b:6e:8b:d7:ba:78:30:07:55:d5:52:16:5f:80:d3:f0:bf:9e:
         5d:89:9f:45:5e:37:ee:ad:ea:21:6f:aa:72:bc:12:4e:57:b6:
         61:f1:97:b9:78:cd:ef:dd:86:ad:7b:df:46:dc:e7:ef:8f:d9:
         f5:8e:fd:7c:25:c9:c8:f8:8f:c6:26:6a:32:93:9c:c0:ab:35:
         7a:95:fa:77:69:16:24:88:6c:48:e6:cb:06:ca:74:e5:83:83:
         39:59:29:05:88:e9:8a:f2:7a:0c:0b:62:0b:31:c3:fd:b0:d0:
         cc:1e:86:5f:e2:6e:d1:e5:b8:8c:c9:31:5f:53:40:2b:fe:cd:
         22:7b:d6:2e:e1:e7:36:a6:de:3a:b8:2a:9b:ff:c8:83:3c:93:
         dc:48:e0:08:10:61:5b:c2:b5:f9:3f:99:d1:9f:f0:a0:a0:1c:
         ea:20:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:50:30 2026 by rpki-client