Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
File:                     Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft (raw, json)
Hash identifier:          T47/z7aXym3K/JzuhT8CwQll8SxY4qE0ap1PwK6pLvQ=
Subject key identifier:   84:87:79:FA:38:3B:87:C5:DD:5B:5D:EA:37:D4:6A:FC:81:36:C2:42
Authority key identifier: 16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0
Certificate issuer:       /CN=169ea0275c765e17603eb59eef39e2fab5380ef0
Certificate serial:       01A17E4EEDB608F81AD3623C9F0D6E4C0423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
Manifest number:          0F3C
Signing time:             Tue 27 Oct 2026 17:01:04 +0000
Manifest this update:     Tue 27 Oct 2026 17:01:04 +0000
Manifest next update:     Wed 28 Oct 2026 17:01:04 +0000
Files and hashes:         1: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl (hash: ZAC8LYiSimFKhOCEi5r4WM5vyZNARhTVyVCwox61VzU=)
                          2: jPp4Av3P5IVYrkqxOGqhOqwt480.roa (hash: cRa8LYV5Wo5t1Qa11CdMWIS8CjSo634/LpDIUbcvW3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 17:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:4e:ed:b6:08:f8:1a:d3:62:3c:9f:0d:6e:4c:04:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169ea0275c765e17603eb59eef39e2fab5380ef0
        Validity
            Not Before: Oct 27 17:01:04 2026 GMT
            Not After : Oct 28 17:01:04 2026 GMT
        Subject: CN=848779fa383b87c5dd5b5dea37d46afc8136c242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:54:7e:ab:6e:76:14:9a:60:35:c8:4f:ed:
                    a7:a8:f5:63:d7:66:57:e4:46:0d:71:f8:ef:55:e5:
                    e4:1a:c3:63:7c:e4:b9:34:ff:d2:c4:7e:69:62:71:
                    bc:7a:88:3b:8c:6a:6b:3b:ed:40:b6:be:9b:81:a2:
                    eb:a9:26:8c:cb:be:97:ca:50:ab:e1:f0:3d:59:c9:
                    06:b2:3f:f1:79:ce:2c:d5:0d:a2:16:84:17:84:79:
                    cc:5c:3d:44:31:38:f3:e6:12:38:3c:00:af:94:9f:
                    ec:c5:0c:d0:34:cf:90:c3:bb:ed:99:c9:61:12:4d:
                    be:29:87:6d:28:d9:c4:91:1e:85:8f:68:32:47:0c:
                    5a:9e:c0:82:bc:83:8e:b2:e3:c5:10:af:d1:c8:a4:
                    49:b1:39:29:d9:4d:58:fd:4f:a0:59:5d:b2:35:ab:
                    ec:29:4e:63:ee:85:02:ec:57:2f:ef:d0:aa:e8:b8:
                    dd:e9:7b:68:ee:3d:75:5c:62:08:a9:2e:da:a7:d0:
                    11:60:4d:12:b6:3a:73:aa:83:e6:13:1a:88:0a:01:
                    6b:34:7d:71:00:1c:df:63:ea:01:10:b2:36:f8:bd:
                    a5:1e:e3:2b:fd:d8:1c:c2:27:33:1c:fb:3e:40:ce:
                    b4:28:ce:f5:0a:1b:64:72:88:26:14:a4:25:ca:66:
                    d2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:87:79:FA:38:3B:87:C5:DD:5B:5D:EA:37:D4:6A:FC:81:36:C2:42
            X509v3 Authority Key Identifier:
                keyid:16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3c:78:c6:08:8c:f6:2a:f1:32:f9:99:5e:5e:a9:4b:9b:7d:
         de:d0:db:da:55:f2:4b:a4:ff:d1:3a:18:20:4e:9b:ef:6c:70:
         57:bd:1c:bc:a4:5f:17:20:fa:5b:65:7d:84:22:1f:31:0d:62:
         24:b3:04:ac:72:5a:62:9b:f9:6b:70:38:6d:ed:13:df:9f:55:
         5d:f6:d7:aa:5b:ac:e9:3f:36:dd:81:12:68:d9:d2:97:24:10:
         71:9b:10:c0:34:85:df:31:85:84:53:ab:5d:13:e6:12:12:e9:
         7e:76:97:a3:d1:33:df:01:e1:f2:10:d7:56:0e:aa:3a:10:e3:
         29:20:cd:c5:3f:4a:c0:19:d3:7e:d3:3b:c8:f2:57:3b:68:07:
         fb:ea:ad:e0:65:07:dc:b1:41:9d:23:a0:fb:95:5d:f3:7b:83:
         7a:65:05:4a:dd:a1:61:67:91:40:5a:8c:80:92:b6:3c:67:58:
         42:15:ec:e4:a0:8a:bd:1a:53:df:85:6c:e4:a9:27:fe:5e:a1:
         a4:a5:b4:cd:3b:9a:3c:67:e2:37:e3:9f:3e:44:3c:7f:39:e3:
         a4:0b:41:6c:cb:40:79:5d:76:8a:29:38:fd:2a:c7:79:7d:18:
         30:7d:01:26:6e:2b:f8:cf:a9:53:bb:d4:74:7f:65:bf:f7:d6:
         e7:a2:c3:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+Tu22CPga02I8nw1uTAQjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OWVhMDI3NWM3NjVlMTc2MDNlYjU5ZWVmMzllMmZhYjUz
ODBlZjAwHhcNMjYxMDI3MTcwMTA0WhcNMjYxMDI4MTcwMTA0WjAzMTEwLwYDVQQD
Eyg4NDg3NzlmYTM4M2I4N2M1ZGQ1YjVkZWEzN2Q0NmFmYzgxMzZjMjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAdUfqtudhSaYDXIT+2nqPVj12ZX
5EYNcfjvVeXkGsNjfOS5NP/SxH5pYnG8eog7jGprO+1Atr6bgaLrqSaMy76XylCr
4fA9WckGsj/xec4s1Q2iFoQXhHnMXD1EMTjz5hI4PACvlJ/sxQzQNM+Qw7vtmclh
Ek2+KYdtKNnEkR6Fj2gyRwxansCCvIOOsuPFEK/RyKRJsTkp2U1Y/U+gWV2yNavs
KU5j7oUC7Fcv79Cq6Ljd6Xto7j11XGIIqS7ap9ARYE0StjpzqoPmExqICgFrNH1x
ABzfY+oBELI2+L2lHuMr/dgcwiczHPs+QM60KM71ChtkcogmFKQlymbSawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISHefo4O4fF3Vtd6jfUavyBNsJCMB8GA1UdIwQY
MBaAFBaeoCdcdl4XYD61nu854vq1OA7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YTU0ZmQtYmJlYS00MTVhLWI5Njkt
ZDY5ZWY0MjJjMTY3LzEvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80YTU0ZmQtYmJlYS00MTVhLWI5NjktZDY5ZWY0MjJjMTY3
LzEvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjx4xgiM
9irxMvmZXl6pS5t93tDb2lXyS6T/0ToYIE6b72xwV70cvKRfFyD6W2V9hCIfMQ1i
JLMErHJaYpv5a3A4be0T359VXfbXqlus6T823YESaNnSlyQQcZsQwDSF3zGFhFOr
XRPmEhLpfnaXo9Ez3wHh8hDXVg6qOhDjKSDNxT9KwBnTftM7yPJXO2gH++qt4GUH
3LFBnSOg+5Vd83uDemUFSt2hYWeRQFqMgJK2PGdYQhXs5KCKvRpT34Vs5Kkn/l6h
pKW0zTuaPGfiN+OfPkQ8fznjpAtBbMtAeV12iik4/SrHeX0YMH0BJm4r+M+pU7vU
dH9lv/fW56LDVw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:52:26 2026 by rpki-client