Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
File:                     81TlIOe7fhP1Ms7PBagtK3l5UqI.mft (raw, json)
Hash identifier:          M6xfAAeyoYm9LnTJ+E7YpQx5WKjzmth5P2NwWJQOctA=
Subject key identifier:   51:9F:1D:D5:57:A4:6B:10:E9:77:95:63:67:9E:20:C9:0D:EB:48:31
Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
Certificate issuer:       /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Certificate serial:       01A119E227E5DF8F652F1024683102DD0AA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
Manifest number:          0FEA
Signing time:             Thu 08 Oct 2026 05:00:14 +0000
Manifest this update:     Thu 08 Oct 2026 05:00:14 +0000
Manifest next update:     Fri 09 Oct 2026 05:00:14 +0000
Files and hashes:         1: 28zXLFeRXoHKQibLR_FN7To5SA4.roa (hash: 0h5lbt3CG3w27XHBcRA+PH1NQ7TLUhzbv0Xa/y3+zNw=)
                          2: 81TlIOe7fhP1Ms7PBagtK3l5UqI.crl (hash: Spw6ED/kHnuxTikeo4xe/MaVs2hdRq2X+57MJA/P6Y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 05:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:e2:27:e5:df:8f:65:2f:10:24:68:31:02:dd:0a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
        Validity
            Not Before: Oct  8 05:00:14 2026 GMT
            Not After : Oct  9 05:00:14 2026 GMT
        Subject: CN=519f1dd557a46b10e9779563679e20c90deb4831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a2:f8:65:a0:fb:67:05:32:87:46:64:64:a2:
                    f8:b8:c9:bf:69:f6:89:1a:4b:40:14:93:b5:30:d9:
                    d8:d8:63:3d:c3:71:f8:b2:c4:d8:22:07:3e:bb:91:
                    46:0a:69:fe:5e:92:55:5a:9d:f9:88:fe:35:d5:e0:
                    e4:da:a2:ac:b5:0e:18:19:f2:e1:06:d0:71:3b:cd:
                    99:81:cd:ce:08:31:ce:10:6e:22:c9:85:c9:d6:37:
                    84:e7:14:ee:f0:bf:85:ff:45:11:11:81:c7:b6:7e:
                    b3:47:e2:9f:36:c5:fe:a7:71:ca:ad:b8:ce:68:be:
                    16:fc:ea:8e:cd:76:52:79:e8:c8:fd:eb:c6:6c:ea:
                    14:88:e6:da:a4:52:4a:20:dc:9b:ad:e5:f0:b2:0e:
                    52:46:c6:7f:2a:59:f1:a5:ce:96:f5:35:9b:d1:fd:
                    02:82:ac:03:0a:0c:58:ef:1a:be:83:5d:fe:3b:00:
                    0e:d5:00:c0:2c:8f:c1:65:8e:86:f6:fa:2a:71:d4:
                    88:4d:d4:84:71:0d:e3:e4:ac:9d:9e:55:e5:98:d4:
                    7c:01:95:e2:9d:d4:65:2e:43:8b:59:86:a8:25:a7:
                    c0:ad:2c:4b:23:44:c5:41:01:b6:37:56:02:fc:e1:
                    a7:ce:d2:54:8e:cc:a3:1b:7a:70:be:6d:4f:e6:7f:
                    64:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9F:1D:D5:57:A4:6B:10:E9:77:95:63:67:9E:20:C9:0D:EB:48:31
            X509v3 Authority Key Identifier:
                keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:1a:5b:ba:b1:99:86:dd:5d:22:c5:90:92:47:2f:00:f1:e8:
         ea:5f:cf:e8:e3:0f:51:5b:b9:12:dc:95:c9:f8:c1:fd:34:79:
         f9:7c:4c:c6:34:0d:fa:eb:4c:63:e4:27:84:eb:11:2e:11:de:
         74:30:a1:15:33:ec:1c:94:80:34:46:e7:2a:d8:69:82:a1:dd:
         04:81:51:3b:05:fa:bb:c5:ad:99:a3:73:d9:f9:74:0a:23:ad:
         05:08:07:fd:e0:6a:b7:4f:45:34:df:04:ca:cd:e2:d5:a9:8d:
         10:fc:f3:2b:bc:06:c1:96:af:24:44:5b:ca:b5:2a:1c:13:dd:
         59:88:46:55:58:cd:62:50:02:8c:96:35:4a:eb:f3:81:a5:15:
         61:15:5d:85:e3:80:cb:71:6f:fe:a8:d2:3d:36:50:f0:f6:72:
         3f:30:d1:a3:73:d2:6c:4c:5c:fb:93:d0:85:48:7b:87:19:4d:
         d7:00:3a:b5:3d:10:fd:ba:01:c0:f1:df:df:82:eb:26:55:13:
         f9:0c:ab:4d:a4:63:8a:47:fd:3f:c9:bb:68:f4:d6:54:78:09:
         16:5e:44:1d:12:ef:87:53:a1:28:48:83:6a:91:a2:8e:d4:01:
         73:ef:20:56:65:b2:2b:4c:77:fa:36:c3:c4:89:54:39:c4:ef:
         94:e2:f9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:59:58 2026 by rpki-client