Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.mft
File:                     FcYXfT3cgV334SIF-LaCqvS3GTU.mft (raw, json)
Hash identifier:          QGmEzhf49WL2NsmvK7juOMWbUbqYkgUSfr0SVxznDiw=
Subject key identifier:   21:92:A6:6C:7E:A9:75:7D:92:13:3B:2A:25:AD:8A:CE:4C:D8:0E:21
Authority key identifier: 15:C6:17:7D:3D:DC:81:5D:F7:E1:22:05:F8:B6:82:AA:F4:B7:19:35
Certificate issuer:       /CN=15c6177d3ddc815df7e12205f8b682aaf4b71935
Certificate serial:       01A176276ECF5FAFCA19ED8247916748FA5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcYXfT3cgV334SIF-LaCqvS3GTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.mft
Manifest number:          013B
Signing time:             Mon 26 Oct 2026 03:00:57 +0000
Manifest this update:     Mon 26 Oct 2026 03:00:57 +0000
Manifest next update:     Tue 27 Oct 2026 03:00:57 +0000
Files and hashes:         1: 24oyFCZ82CeeIceGWeut2w2WwuM.roa (hash: HrBB+WmjLXbJwhb8253Qsk+ZcaUjm9aaPB5tcu3NZh8=)
                          2: FcYXfT3cgV334SIF-LaCqvS3GTU.crl (hash: uQQbXv7hyj3fI9G+pSdBVflKAxTj209QeovHGbtz/5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcYXfT3cgV334SIF-LaCqvS3GTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:27:6e:cf:5f:af:ca:19:ed:82:47:91:67:48:fa:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c6177d3ddc815df7e12205f8b682aaf4b71935
        Validity
            Not Before: Oct 26 03:00:57 2026 GMT
            Not After : Oct 27 03:00:57 2026 GMT
        Subject: CN=2192a66c7ea9757d92133b2a25ad8ace4cd80e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:f7:8b:7c:09:62:c8:ed:88:17:68:58:e6:
                    d5:d7:bb:2b:12:84:df:e5:b0:26:da:15:4c:75:a8:
                    f7:52:4f:ce:5d:af:63:05:f2:55:10:b6:6b:0a:d8:
                    80:83:62:dd:24:66:78:69:3a:00:32:8c:23:ab:1d:
                    68:50:9f:bc:f8:7e:f8:ed:89:41:b3:25:2a:31:46:
                    2d:eb:fd:f2:f2:b2:7a:cc:4f:f3:5f:9d:6e:c0:da:
                    55:64:c8:16:b3:c3:f0:b6:7f:09:d9:71:1d:52:e9:
                    66:19:aa:86:b5:5d:a5:47:82:4a:16:df:bc:66:a2:
                    a4:b5:e7:9a:0b:3e:1a:e1:3e:68:9f:66:cc:fb:30:
                    cf:39:c0:eb:0c:62:8e:18:5a:e5:48:74:ef:9e:67:
                    d4:b9:4d:a0:d5:0c:a8:de:9f:df:a3:91:59:3d:83:
                    02:9e:5c:cf:c2:56:fa:56:47:09:1e:ca:bd:e2:49:
                    15:a5:65:cf:be:05:a4:49:1e:92:53:71:d0:59:f6:
                    6e:15:45:e3:f1:46:c8:cc:40:a8:4e:05:91:c5:b0:
                    31:e7:b5:af:c8:2a:03:96:f1:a9:09:50:c0:26:0e:
                    75:2b:50:f4:5f:26:ff:d2:c2:5a:88:c0:f9:bd:45:
                    83:9d:c4:bb:2e:1c:ee:7c:8b:b4:65:e6:24:aa:87:
                    cc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:92:A6:6C:7E:A9:75:7D:92:13:3B:2A:25:AD:8A:CE:4C:D8:0E:21
            X509v3 Authority Key Identifier:
                keyid:15:C6:17:7D:3D:DC:81:5D:F7:E1:22:05:F8:B6:82:AA:F4:B7:19:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcYXfT3cgV334SIF-LaCqvS3GTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:43:28:1a:60:30:a9:2a:af:3c:50:9a:4d:2f:86:da:85:b6:
         aa:f4:60:56:b4:7f:54:ad:43:47:f0:d6:6e:cf:8e:2d:f6:d0:
         e8:bf:05:ca:b4:8b:16:a5:9f:3b:b6:5e:a4:b0:82:bc:c3:cf:
         75:2b:8f:2d:79:05:b9:c3:0a:3d:a9:c9:06:0c:da:bf:b7:f8:
         1e:06:ff:ba:63:3d:dc:1d:f6:2e:9f:e6:dd:83:8a:f9:53:f5:
         bd:6a:69:f5:03:af:50:b9:cb:e7:b7:82:00:b2:24:99:cd:47:
         69:5f:e7:9a:35:80:9c:b0:ec:e2:0a:8a:f2:e6:96:eb:9d:53:
         58:b2:5d:e6:a0:f3:aa:ad:b8:a2:a5:1b:cb:85:8d:f4:72:a7:
         e7:a6:0e:33:88:58:15:10:d7:b0:a6:77:71:83:40:bf:61:92:
         46:73:4a:84:d5:3c:4b:9d:c5:c0:2e:c4:70:f1:23:ae:43:23:
         2c:8c:80:88:c2:16:94:2e:63:6e:70:6a:1f:1b:cc:40:0b:31:
         ce:52:81:c2:44:34:3b:c7:8b:cd:bd:3e:c5:40:42:e7:f2:01:
         13:98:3e:98:8b:16:58:80:40:b3:4c:e9:23:90:9f:51:0f:55:
         06:1c:5d:fd:a0:bd:aa:9f:84:41:d6:fe:39:f4:2f:9e:af:7b:
         ad:e5:69:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:20:09 2026 by rpki-client