Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
File:                     Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft (raw, json)
Hash identifier:          FxB32YWMM9ao+QL02uRgYwo4ebFV25UVXF44iDOckNM=
Subject key identifier:   0E:B8:20:B6:43:1C:37:E5:BE:84:2E:94:13:EB:ED:E4:FE:CF:92:8C
Authority key identifier: 16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0
Certificate issuer:       /CN=169ea0275c765e17603eb59eef39e2fab5380ef0
Certificate serial:       01A17C5FDC7671CE6932AB0FC3CBCB4FC2E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
Manifest number:          0F3B
Signing time:             Tue 27 Oct 2026 08:00:19 +0000
Manifest this update:     Tue 27 Oct 2026 08:00:19 +0000
Manifest next update:     Wed 28 Oct 2026 08:00:19 +0000
Files and hashes:         1: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl (hash: jyXrIYPu+J0Fxoh3Jx7YhzlaZu7seocm2KUHAIghGKk=)
                          2: jPp4Av3P5IVYrkqxOGqhOqwt480.roa (hash: cRa8LYV5Wo5t1Qa11CdMWIS8CjSo634/LpDIUbcvW3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:5f:dc:76:71:ce:69:32:ab:0f:c3:cb:cb:4f:c2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169ea0275c765e17603eb59eef39e2fab5380ef0
        Validity
            Not Before: Oct 27 08:00:19 2026 GMT
            Not After : Oct 28 08:00:19 2026 GMT
        Subject: CN=0eb820b6431c37e5be842e9413ebede4fecf928c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:ac:af:ac:93:d2:3b:d0:e0:dc:42:25:46:
                    8d:68:5d:45:a0:eb:84:b0:ab:a3:04:e5:77:7d:a7:
                    fb:03:a1:e1:7d:ad:77:06:98:06:17:97:e2:c5:5c:
                    1b:14:a8:64:08:2e:f0:53:0a:9c:5a:4e:72:41:ee:
                    8d:de:d3:82:4f:c3:77:4e:06:98:df:9c:04:dd:f6:
                    03:76:06:f1:0e:93:32:19:38:eb:76:ec:7f:cd:ed:
                    31:6f:e6:2e:6d:14:bb:f8:0c:06:99:b4:34:39:aa:
                    3c:3b:ec:24:f1:fb:61:7c:f5:7b:38:da:74:8c:92:
                    44:65:34:ad:62:59:83:85:7b:dc:bd:6b:91:c5:9d:
                    55:46:7d:52:bc:df:45:c6:9a:5c:cc:44:33:4c:dc:
                    2e:86:48:57:e0:3f:5a:2c:3d:d5:f7:f9:3a:3f:a0:
                    2b:23:d8:cd:87:26:4f:a6:8d:44:7b:32:27:47:ae:
                    10:fe:6d:74:c1:e0:3d:0a:1c:ee:9f:bc:c4:61:6a:
                    f9:c3:46:a3:1a:5d:18:4d:56:77:2e:3c:d5:af:f2:
                    fe:c8:f1:f1:71:7a:ba:35:b4:c3:23:a8:38:9a:4d:
                    a4:9d:2f:b3:e2:4c:27:e6:a3:1c:c1:88:71:36:52:
                    05:0e:f6:85:67:7e:ad:e2:92:67:ed:40:7f:c1:86:
                    55:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B8:20:B6:43:1C:37:E5:BE:84:2E:94:13:EB:ED:E4:FE:CF:92:8C
            X509v3 Authority Key Identifier:
                keyid:16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:96:54:f5:af:12:22:03:3f:c0:28:78:95:d1:63:b0:dc:19:
         d1:af:72:92:52:37:4f:77:92:c2:12:99:36:90:08:eb:84:89:
         2c:56:0a:34:a7:a8:09:21:e7:16:cc:4b:2c:e6:60:31:23:ab:
         ca:7a:0c:da:05:e9:3c:3d:45:9a:73:4b:17:ca:60:03:2b:09:
         f6:be:15:a9:68:01:84:0f:6d:a5:2c:92:60:e8:7b:ed:02:24:
         55:ce:ac:28:85:4b:4c:62:f8:71:28:28:ed:05:be:d1:79:0d:
         1a:2a:65:5d:1a:fd:b6:bf:79:7b:86:49:fc:be:d7:cc:8d:b8:
         95:b3:52:3f:fb:05:de:97:9d:9b:7f:24:4d:d0:9f:d5:77:c3:
         bc:00:27:77:fe:75:67:e0:aa:04:56:ec:82:1f:51:64:00:26:
         00:de:7d:fd:22:4f:82:92:fe:30:2b:ee:84:3e:95:ed:7e:9a:
         6d:6c:6e:1d:a8:f6:4c:b6:d7:61:a0:05:18:f6:7b:7b:0f:dd:
         35:f7:2a:47:13:c8:3a:b2:78:65:64:7f:b2:1b:52:b6:2f:45:
         72:29:07:18:c0:b4:0b:eb:b3:01:83:b4:17:20:53:92:04:65:
         02:33:85:26:eb:4f:41:53:bf:27:27:02:90:55:d0:41:09:bd:
         00:64:02:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8X9x2cc5pMqsPw8vLT8LhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OWVhMDI3NWM3NjVlMTc2MDNlYjU5ZWVmMzllMmZhYjUz
ODBlZjAwHhcNMjYxMDI3MDgwMDE5WhcNMjYxMDI4MDgwMDE5WjAzMTEwLwYDVQQD
EygwZWI4MjBiNjQzMWMzN2U1YmU4NDJlOTQxM2ViZWRlNGZlY2Y5MjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK2sr6yT0jvQ4NxCJUaNaF1FoOuE
sKujBOV3faf7A6Hhfa13BpgGF5fixVwbFKhkCC7wUwqcWk5yQe6N3tOCT8N3TgaY
35wE3fYDdgbxDpMyGTjrdux/ze0xb+YubRS7+AwGmbQ0Oao8O+wk8fthfPV7ONp0
jJJEZTStYlmDhXvcvWuRxZ1VRn1SvN9FxppczEQzTNwuhkhX4D9aLD3V9/k6P6Ar
I9jNhyZPpo1EezInR64Q/m10weA9Chzun7zEYWr5w0ajGl0YTVZ3LjzVr/L+yPHx
cXq6NbTDI6g4mk2knS+z4kwn5qMcwYhxNlIFDvaFZ36t4pJn7UB/wYZVawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA64ILZDHDflvoQulBPr7eT+z5KMMB8GA1UdIwQY
MBaAFBaeoCdcdl4XYD61nu854vq1OA7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YTU0ZmQtYmJlYS00MTVhLWI5Njkt
ZDY5ZWY0MjJjMTY3LzEvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80YTU0ZmQtYmJlYS00MTVhLWI5NjktZDY5ZWY0MjJjMTY3
LzEvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipZU9a8S
IgM/wCh4ldFjsNwZ0a9yklI3T3eSwhKZNpAI64SJLFYKNKeoCSHnFsxLLOZgMSOr
ynoM2gXpPD1FmnNLF8pgAysJ9r4VqWgBhA9tpSySYOh77QIkVc6sKIVLTGL4cSgo
7QW+0XkNGiplXRr9tr95e4ZJ/L7XzI24lbNSP/sF3pedm38kTdCf1XfDvAAnd/51
Z+CqBFbsgh9RZAAmAN59/SJPgpL+MCvuhD6V7X6abWxuHaj2TLbXYaAFGPZ7ew/d
NfcqRxPIOrJ4ZWR/shtSti9FcikHGMC0C+uzAYO0FyBTkgRlAjOFJutPQVO/JycC
kFXQQQm9AGQCRw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:23:31 2026 by rpki-client