Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft
File:                     feM_CE7LgSODxwJ1w4XUYZstox8.mft (raw, json)
Hash identifier:          ll7v9YEiVRBI7iHH1Z1pyqHVV3E4oizSb6Rj3bh1aDs=
Subject key identifier:   61:BA:63:8B:B2:C6:9F:56:4E:EA:CC:3C:C9:86:2D:EE:2D:F0:1C:91
Authority key identifier: 7D:E3:3F:08:4E:CB:81:23:83:C7:02:75:C3:85:D4:61:9B:2D:A3:1F
Certificate issuer:       /CN=7de33f084ecb812383c70275c385d4619b2da31f
Certificate serial:       01A17F985644DBFC2B9353193DC226587617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/feM_CE7LgSODxwJ1w4XUYZstox8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft
Manifest number:          01D3
Signing time:             Tue 27 Oct 2026 23:00:52 +0000
Manifest this update:     Tue 27 Oct 2026 23:00:52 +0000
Manifest next update:     Wed 28 Oct 2026 23:00:52 +0000
Files and hashes:         1: 5Scl3zXAEvT9Imonr9uJSjo6tG8.asa (hash: 2kTmN9J7DNO7vHCgKZRb1obKROe/qCTKWR7Gio+rcvQ=)
                          2: feM_CE7LgSODxwJ1w4XUYZstox8.crl (hash: BqYL+h1UP5/CB47hjDcP0WfiDfXuu+kvG6wNOfCV+Uw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/feM_CE7LgSODxwJ1w4XUYZstox8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:98:56:44:db:fc:2b:93:53:19:3d:c2:26:58:76:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de33f084ecb812383c70275c385d4619b2da31f
        Validity
            Not Before: Oct 27 23:00:52 2026 GMT
            Not After : Oct 28 23:00:52 2026 GMT
        Subject: CN=61ba638bb2c69f564eeacc3cc9862dee2df01c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:29:a0:35:c9:90:75:21:78:ac:15:e8:24:
                    d8:f8:49:6a:92:37:20:cb:06:57:f5:c6:de:e3:27:
                    95:a1:3b:21:23:ce:15:a9:2a:8e:a4:21:1e:32:29:
                    96:96:55:4d:c5:81:47:4d:89:0d:0d:7f:39:37:b0:
                    40:65:e4:03:dd:b3:74:4d:17:6c:39:5c:ed:21:32:
                    2f:02:1b:b4:02:a4:e9:c0:1e:3f:93:ef:c2:4b:6f:
                    d2:6f:6d:ce:02:88:71:c4:7f:91:10:2d:4e:e8:83:
                    cf:74:ef:7b:53:62:bb:49:04:d9:73:10:64:ba:9b:
                    ca:89:e4:f9:c8:f4:83:18:52:7e:e0:24:7d:ce:15:
                    a1:82:27:9a:a7:83:58:95:36:84:8f:0f:b6:a8:bf:
                    0b:85:99:ec:19:b1:06:0e:e4:bb:23:2f:3a:bb:b0:
                    e4:6a:9a:f6:9c:02:08:9a:aa:68:32:e6:d5:aa:64:
                    73:d2:3c:66:a6:11:1b:68:9f:0a:2a:f1:d6:61:9d:
                    14:09:61:37:29:2a:99:d7:5a:94:1d:5a:ad:9d:88:
                    82:7a:03:73:77:8a:98:d6:cb:ee:59:c5:94:fa:98:
                    86:a0:17:5d:61:fd:a0:bb:30:29:86:f7:65:a3:70:
                    ee:dd:6b:fe:c1:f6:d0:d8:bc:02:9d:7f:d2:6a:e4:
                    35:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BA:63:8B:B2:C6:9F:56:4E:EA:CC:3C:C9:86:2D:EE:2D:F0:1C:91
            X509v3 Authority Key Identifier:
                keyid:7D:E3:3F:08:4E:CB:81:23:83:C7:02:75:C3:85:D4:61:9B:2D:A3:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feM_CE7LgSODxwJ1w4XUYZstox8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:60:fe:c3:48:98:06:0c:9d:83:cc:aa:d1:d1:be:5b:d6:29:
         38:93:00:8b:d9:c1:b3:d9:07:ec:db:ac:a5:00:53:3d:6c:ba:
         2f:f6:55:67:6d:44:19:17:a2:8c:cb:8f:8a:03:ec:ae:b7:d5:
         40:a1:0a:fc:5c:4e:7d:a8:e4:b2:49:ee:21:e2:f2:6a:ed:0f:
         d9:43:b0:11:c4:55:98:c1:b4:47:a3:78:e4:a4:22:b6:e6:0f:
         52:90:8c:30:1d:e7:71:1e:ed:12:0b:0d:1b:5a:1e:d0:3e:5c:
         98:32:53:0b:6c:6e:73:4b:a6:aa:47:18:22:1f:39:c6:69:07:
         fd:b0:76:50:f0:de:5c:83:9f:55:fd:b2:68:79:87:33:8a:6d:
         35:34:4e:c4:9e:9e:38:97:29:45:f6:2a:7c:42:2d:62:64:39:
         2c:92:7c:45:80:bb:47:8e:45:7b:85:39:ec:0a:e5:db:b0:23:
         48:5f:88:4e:0a:e4:f4:1a:b2:be:8d:88:d8:2c:b1:66:e0:6c:
         4d:72:8d:90:f6:29:55:1a:6a:09:e3:93:87:d8:51:e9:12:84:
         11:5b:69:13:db:0a:fb:43:89:97:4d:62:40:a1:8e:b6:04:69:
         d1:48:4f:cf:28:fe:c5:d6:2c:dc:e4:9f:5e:b4:73:db:db:18:
         57:99:e1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:20:39 2026 by rpki-client