Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft
File:                     ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft (raw, json)
Hash identifier:          FdksIXLu0uRCyHaKq2f2j8nSm4j2fdFUON9TX3mFL70=
Subject key identifier:   FA:3A:31:8E:F6:52:7C:71:19:82:44:53:07:0C:7E:C7:CE:B0:2B:A0
Authority key identifier: 11:3C:67:3A:25:F7:5C:8D:E0:C8:60:F4:69:18:3A:70:9A:17:1E:24
Certificate issuer:       /CN=113c673a25f75c8de0c860f469183a709a171e24
Certificate serial:       01A183AC2337744A257FC33338D905007C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft
Manifest number:          0142
Signing time:             Wed 28 Oct 2026 18:00:58 +0000
Manifest this update:     Wed 28 Oct 2026 18:00:58 +0000
Manifest next update:     Thu 29 Oct 2026 18:00:58 +0000
Files and hashes:         1: ETxnOiX3XI3gyGD0aRg6cJoXHiQ.crl (hash: QYdgtbDrppkaB30Dn57hOrBNNV/cKP4bBDPR+27BWp4=)
                          2: FKTTJ2_pJQ0c4167Z_9foASOfe8.roa (hash: 5QwyJIVruZ9DDqn9rtCcqANTOb2u+3Qm0t0OytggvZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 14:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:83:ac:23:37:74:4a:25:7f:c3:33:38:d9:05:00:7c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113c673a25f75c8de0c860f469183a709a171e24
        Validity
            Not Before: Oct 28 18:00:58 2026 GMT
            Not After : Oct 29 18:00:58 2026 GMT
        Subject: CN=fa3a318ef6527c7119824453070c7ec7ceb02ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cb:3b:ef:94:d4:f6:a6:dd:0e:6c:f0:a9:61:
                    d6:f2:74:f8:af:13:20:69:d2:29:f7:9b:d1:da:7d:
                    e1:02:ea:d5:f5:7f:fc:60:0c:fb:08:9d:4e:59:8e:
                    46:58:22:dc:8b:77:92:20:c3:09:5c:74:58:a6:c0:
                    3a:2e:87:03:04:f2:3a:01:3a:9a:3e:d6:50:3d:45:
                    b4:dc:ea:7d:20:10:04:f7:68:d6:49:8e:a4:d1:10:
                    9a:46:71:af:48:67:b1:69:52:b8:a5:3c:6e:b3:56:
                    c9:5a:61:88:8f:45:0e:b1:77:c9:2b:81:69:25:6f:
                    90:bd:1c:2c:e7:d1:7f:40:80:bd:2f:85:56:3a:71:
                    55:16:1e:91:b6:69:7f:52:a2:f0:10:55:6e:09:6f:
                    fb:cf:40:c6:77:d7:20:d3:aa:47:30:e4:92:b1:9a:
                    69:48:38:8b:10:02:02:e8:61:a6:e9:cc:85:d6:b3:
                    55:40:f1:74:c6:16:18:18:36:12:47:15:70:5c:db:
                    80:7a:a7:2c:ae:6a:10:5d:1a:f9:90:06:19:3e:5b:
                    2b:e2:ed:1b:87:ff:35:7a:aa:24:ca:11:18:e1:f5:
                    81:5f:06:7e:a6:1d:6a:42:48:93:95:63:b8:72:b4:
                    ea:e8:28:ec:a3:2c:23:3b:3a:5f:9f:88:73:20:c8:
                    ab:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3A:31:8E:F6:52:7C:71:19:82:44:53:07:0C:7E:C7:CE:B0:2B:A0
            X509v3 Authority Key Identifier:
                keyid:11:3C:67:3A:25:F7:5C:8D:E0:C8:60:F4:69:18:3A:70:9A:17:1E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ca:49:89:6f:e0:7a:52:04:62:b2:c6:7d:60:1d:58:eb:c4:
         4f:ca:45:f1:cd:b8:7f:12:b4:f1:de:19:83:0b:ff:26:fd:72:
         ca:c7:83:69:61:d9:79:3e:e4:be:21:a7:0c:32:10:3a:7c:f9:
         37:b1:e2:5f:76:4e:4f:74:00:76:41:15:67:a3:28:7b:40:37:
         e6:5c:3a:36:49:7f:fe:db:8e:a9:9b:92:77:94:55:ab:5b:2c:
         c4:4c:d1:dc:13:35:dc:9e:3e:87:79:56:4f:b4:66:ba:91:d5:
         45:a5:40:2a:77:d1:f7:0f:59:36:25:ed:20:36:29:0d:6e:86:
         d9:ee:3c:c9:8f:df:9f:e1:15:82:91:10:04:a8:a1:c3:d1:2a:
         95:eb:82:fc:38:ce:40:53:e1:90:24:bb:23:ed:04:13:49:d6:
         91:da:5d:08:16:fc:ad:41:08:e7:6e:02:b5:e4:64:b5:2a:89:
         d2:b1:8f:94:9b:93:26:7a:46:7e:84:57:57:e4:5d:56:c9:41:
         08:f3:8a:82:f2:63:06:30:0f:5e:ba:7f:db:96:88:c9:8a:f3:
         d6:67:03:6a:f9:cb:46:78:7d:59:16:1c:6f:c2:ef:ec:49:f8:
         41:dd:3b:60:2e:91:6a:eb:18:c6:61:47:a1:c3:f3:7f:28:07:
         36:83:85:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDrCM3dEolf8MzONkFAHwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2M2NzNhMjVmNzVjOGRlMGM4NjBmNDY5MTgzYTcwOWEx
NzFlMjQwHhcNMjYxMDI4MTgwMDU4WhcNMjYxMDI5MTgwMDU4WjAzMTEwLwYDVQQD
EyhmYTNhMzE4ZWY2NTI3YzcxMTk4MjQ0NTMwNzBjN2VjN2NlYjAyYmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjss775TU9qbdDmzwqWHW8nT4rxMg
adIp95vR2n3hAurV9X/8YAz7CJ1OWY5GWCLci3eSIMMJXHRYpsA6LocDBPI6ATqa
PtZQPUW03Op9IBAE92jWSY6k0RCaRnGvSGexaVK4pTxus1bJWmGIj0UOsXfJK4Fp
JW+QvRws59F/QIC9L4VWOnFVFh6Rtml/UqLwEFVuCW/7z0DGd9cg06pHMOSSsZpp
SDiLEAIC6GGm6cyF1rNVQPF0xhYYGDYSRxVwXNuAeqcsrmoQXRr5kAYZPlsr4u0b
h/81eqokyhEY4fWBXwZ+ph1qQkiTlWO4crTq6CjsoywjOzpfn4hzIMirXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPo6MY72UnxxGYJEUwcMfsfOsCugMB8GA1UdIwQY
MBaAFBE8Zzol91yN4Mhg9GkYOnCaFx4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVR4bk9pWDNYSTNneUdEMGFSZzZjSm9YSGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85NjFhY2EtZjQyNS00ODg3LWFmNGEt
Y2ZhMDYxMDMwMzQ2LzEvRVR4bk9pWDNYSTNneUdEMGFSZzZjSm9YSGlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85NjFhY2EtZjQyNS00ODg3LWFmNGEtY2ZhMDYxMDMwMzQ2
LzEvRVR4bk9pWDNYSTNneUdEMGFSZzZjSm9YSGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscpJiW/g
elIEYrLGfWAdWOvET8pF8c24fxK08d4Zgwv/Jv1yyseDaWHZeT7kviGnDDIQOnz5
N7HiX3ZOT3QAdkEVZ6Moe0A35lw6Nkl//tuOqZuSd5RVq1ssxEzR3BM13J4+h3lW
T7RmupHVRaVAKnfR9w9ZNiXtIDYpDW6G2e48yY/fn+EVgpEQBKihw9EqleuC/DjO
QFPhkCS7I+0EE0nWkdpdCBb8rUEI524CteRktSqJ0rGPlJuTJnpGfoRXV+RdVslB
CPOKgvJjBjAPXrp/25aIyYrz1mcDavnLRnh9WRYcb8Lv7En4Qd07YC6RausYxmFH
ocPzfygHNoOFAA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 20:03:40 2026 by rpki-client