Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
File:                     8FAUfun2L5cEI8vYttUupfSg7aU.mft (raw, json)
Hash identifier:          bAjGywew7ZMv4I6AE3BsDUIQYzeUOS17YpUDBgyhG44=
Subject key identifier:   69:05:0A:90:41:38:97:E5:D3:18:0E:19:3C:77:BB:C5:48:3B:A7:AB
Authority key identifier: F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
Certificate issuer:       /CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Certificate serial:       01A1A6DDD3FBD309A6AE96DA781E94146630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
Manifest number:          0628
Signing time:             Wed 04 Nov 2026 14:01:57 +0000
Manifest this update:     Wed 04 Nov 2026 14:01:57 +0000
Manifest next update:     Thu 05 Nov 2026 14:01:57 +0000
Files and hashes:         1: 8FAUfun2L5cEI8vYttUupfSg7aU.crl (hash: xo5Hn/RBFxn8ZNMUzgIvYBjWHPG/9OPISZ2Dk+MdNAk=)
                          2: BrDWyRlSZn2CXtf4IPz2NecaGek.roa (hash: stEsjXO2Qw6gddDjn4syr8tHdGrYULyxkALHqMMCkng=)
                          3: UTz-CAu9udrXHC-2_mble0zxioE.roa (hash: khov/J99ODqiFOcvNEfOtWttZ4QbtF1bybuUhyPlZGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a6:dd:d3:fb:d3:09:a6:ae:96:da:78:1e:94:14:66:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
        Validity
            Not Before: Nov  4 14:01:57 2026 GMT
            Not After : Nov  5 14:01:57 2026 GMT
        Subject: CN=69050a90413897e5d3180e193c77bbc5483ba7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0e:7e:04:26:e3:c5:fd:f7:81:86:41:94:bc:
                    20:57:9c:8a:f3:a4:d0:1f:b7:94:c9:6c:ed:e1:ef:
                    c7:a2:7b:69:90:2e:36:4c:59:8b:5c:98:99:d2:92:
                    cf:17:ad:de:d1:1e:cb:93:21:ed:89:80:4c:91:0c:
                    f9:5b:c8:79:71:df:f7:7a:2c:cd:44:f5:2d:32:df:
                    92:dc:5d:8e:16:f9:36:66:5c:4d:2c:d0:3e:3f:4c:
                    9d:50:b8:99:c5:7f:46:11:85:32:60:79:f7:7e:7e:
                    a8:7a:f6:27:36:7c:57:bd:1a:15:65:a5:92:fe:f1:
                    d6:d7:c7:09:c7:bd:cb:48:fc:63:dc:aa:7f:b7:f2:
                    3e:e1:e1:51:ad:ba:14:d5:ce:3b:48:33:25:ae:2f:
                    02:1c:c0:f7:10:fa:a2:a3:52:36:68:83:f4:b5:4a:
                    73:00:6a:4f:5a:99:00:80:17:87:21:19:b7:0f:b8:
                    06:ea:e7:b4:f4:77:e2:02:f2:8a:62:00:c9:a4:4c:
                    3d:06:59:23:6c:c0:2f:f8:2c:db:c0:a2:f4:1e:25:
                    99:62:9f:1a:b8:6b:00:9f:dc:a5:be:f0:81:8c:57:
                    27:cc:5b:5d:85:64:78:55:57:4f:f3:7e:94:91:b4:
                    c7:6f:9e:21:e2:b8:66:d0:1a:ba:01:1e:66:8f:c5:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:05:0A:90:41:38:97:E5:D3:18:0E:19:3C:77:BB:C5:48:3B:A7:AB
            X509v3 Authority Key Identifier:
                keyid:F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:29:55:b8:b3:8e:8b:78:ad:5d:df:c3:5a:8c:f5:df:78:c3:
         31:bd:22:33:86:49:e3:da:f9:2c:1c:54:77:da:30:21:d7:e8:
         d5:d4:a3:c8:f7:70:83:e9:12:29:23:94:ab:4e:5d:58:e3:22:
         a2:ad:bd:24:02:ea:5f:71:36:91:6b:3b:c8:34:e7:e0:cf:ac:
         80:bb:59:f2:70:d2:1f:ac:f6:5d:05:60:16:d3:f8:b8:63:a7:
         fd:ba:3d:56:06:1d:d4:70:6b:0c:0a:ef:f6:f1:13:93:6b:a3:
         60:d8:f4:e3:2f:87:c6:94:1e:55:ae:96:7e:d7:cc:02:22:aa:
         28:08:ed:3c:b6:40:e3:0b:7b:00:9d:24:d5:38:f4:f7:71:56:
         f8:6c:6e:96:f1:9f:aa:b1:5c:a0:38:8e:0c:34:15:a6:18:67:
         db:13:ef:03:47:a4:d5:c3:0f:36:b0:7b:ae:df:16:8c:f3:82:
         7f:ec:d8:03:e8:19:34:ec:53:57:86:9c:74:9f:c1:bb:0f:a0:
         cd:99:a9:4e:26:a6:b6:26:6b:66:42:ac:3a:b3:2a:e9:a6:14:
         e0:24:c5:82:e8:a0:f9:7d:14:e8:30:0a:ae:59:e5:74:70:40:
         dd:6b:30:ad:e1:f6:78:ea:d6:ef:2c:9b:4d:5a:8e:31:d6:04:
         ca:bc:7e:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGm3dP70wmmrpbaeB6UFGYwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNTAxNDdlZTlmNjJmOTcwNDIzY2JkOGI2ZDUyZWE1ZjRh
MGVkYTUwHhcNMjYxMTA0MTQwMTU3WhcNMjYxMTA1MTQwMTU3WjAzMTEwLwYDVQQD
Eyg2OTA1MGE5MDQxMzg5N2U1ZDMxODBlMTkzYzc3YmJjNTQ4M2JhN2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw5+BCbjxf33gYZBlLwgV5yK86TQ
H7eUyWzt4e/HontpkC42TFmLXJiZ0pLPF63e0R7LkyHtiYBMkQz5W8h5cd/3eizN
RPUtMt+S3F2OFvk2ZlxNLNA+P0ydULiZxX9GEYUyYHn3fn6oevYnNnxXvRoVZaWS
/vHW18cJx73LSPxj3Kp/t/I+4eFRrboU1c47SDMlri8CHMD3EPqio1I2aIP0tUpz
AGpPWpkAgBeHIRm3D7gG6ue09HfiAvKKYgDJpEw9BlkjbMAv+CzbwKL0HiWZYp8a
uGsAn9ylvvCBjFcnzFtdhWR4VVdP836UkbTHb54h4rhm0Bq6AR5mj8XxsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkFCpBBOJfl0xgOGTx3u8VIO6erMB8GA1UdIwQY
MBaAFPBQFH7p9i+XBCPL2LbVLqX0oO2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZBVWZ1bjJMNWNFSTh2WXR0VXVwZlNnN2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wNzIxMDUtNDllZi00OTAzLTk2OTUt
ZWViODY1ZDEwZGJhLzEvOEZBVWZ1bjJMNWNFSTh2WXR0VXVwZlNnN2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wNzIxMDUtNDllZi00OTAzLTk2OTUtZWViODY1ZDEwZGJh
LzEvOEZBVWZ1bjJMNWNFSTh2WXR0VXVwZlNnN2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeylVuLOO
i3itXd/DWoz133jDMb0iM4ZJ49r5LBxUd9owIdfo1dSjyPdwg+kSKSOUq05dWOMi
oq29JALqX3E2kWs7yDTn4M+sgLtZ8nDSH6z2XQVgFtP4uGOn/bo9VgYd1HBrDArv
9vETk2ujYNj04y+HxpQeVa6WftfMAiKqKAjtPLZA4wt7AJ0k1Tj093FW+GxulvGf
qrFcoDiODDQVphhn2xPvA0ek1cMPNrB7rt8WjPOCf+zYA+gZNOxTV4acdJ/Buw+g
zZmpTiamtiZrZkKsOrMq6aYU4CTFguig+X0U6DAKrlnldHBA3WswreH2eOrW7yyb
TVqOMdYEyrx+zQ==
-----END CERTIFICATE-----
Generated at Thu Nov 5 02:40:22 2026 by rpki-client