Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
File:                     _swL85GTOSd-rWuh2VXLX2w5jd4.mft (raw, json)
Hash identifier:          R1K6QpRwcLSEKxxRzkUFtm5cN/6+wxye5ObdwNYo+Lc=
Subject key identifier:   11:C8:4B:AE:0C:F8:D8:23:58:91:5A:22:07:B8:F8:D0:07:EB:2C:DD
Authority key identifier: FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE
Certificate issuer:       /CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
Certificate serial:       01A1A8CB5FB1F0743C3942EF33C6158B66DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
Manifest number:          0394
Signing time:             Wed 04 Nov 2026 23:01:02 +0000
Manifest this update:     Wed 04 Nov 2026 23:01:02 +0000
Manifest next update:     Thu 05 Nov 2026 23:01:02 +0000
Files and hashes:         1: MHpsCZyP0IVYMoHWzqfloOQWEZE.asa (hash: hTcP8Hkd9/FsM/qMperPFuWrlLFufrbGXDvfXB44n3Y=)
                          2: _swL85GTOSd-rWuh2VXLX2w5jd4.crl (hash: er0e73yBPwdZ8onHl0p8EKo3szSqRhjAJZj2T2BjKc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a8:cb:5f:b1:f0:74:3c:39:42:ef:33:c6:15:8b:66:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
        Validity
            Not Before: Nov  4 23:01:02 2026 GMT
            Not After : Nov  5 23:01:02 2026 GMT
        Subject: CN=11c84bae0cf8d82358915a2207b8f8d007eb2cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4f:c6:5e:b5:21:79:ed:ec:c5:53:cf:ed:81:
                    17:ba:f5:de:87:86:4f:a7:ba:01:4d:2f:2d:ce:5b:
                    ce:ef:c4:fb:4e:95:7c:b6:2a:46:51:25:b7:19:7d:
                    8d:03:f9:ae:de:d0:cb:cf:13:2e:8d:86:88:24:73:
                    9e:8e:0f:67:a3:21:9c:46:f5:41:de:f4:4a:e0:fe:
                    95:1c:c4:91:4f:84:b2:6a:9a:44:9b:86:52:64:a5:
                    9c:05:17:67:65:20:cd:f5:c3:2b:70:e4:ab:c7:b5:
                    92:f7:fd:5a:b6:ca:96:b7:86:fa:60:3d:ed:7e:23:
                    07:b3:92:41:dc:94:07:88:be:3d:77:53:96:75:20:
                    e5:fc:e7:96:ac:0d:c7:fe:b7:fa:19:c9:e6:30:84:
                    12:3f:f1:11:a5:06:a5:79:fc:68:a2:64:e3:29:d9:
                    71:21:6d:bf:e4:d8:b9:dd:a8:92:41:c3:93:00:ba:
                    98:e9:57:c8:ea:8f:9f:e2:4c:b3:b9:9a:4e:4c:00:
                    e4:e0:2a:4d:89:97:f4:35:96:e7:01:67:93:5f:b7:
                    f8:44:d5:25:dd:da:57:95:ba:4a:08:0d:f4:cd:65:
                    b7:57:d2:5f:47:d0:55:ed:df:bc:35:3c:b6:f9:39:
                    e8:dc:3b:f2:a0:9a:4e:2f:c6:9a:b1:0c:0d:96:c5:
                    ab:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C8:4B:AE:0C:F8:D8:23:58:91:5A:22:07:B8:F8:D0:07:EB:2C:DD
            X509v3 Authority Key Identifier:
                keyid:FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d0:f1:71:e6:08:81:4b:64:7b:89:59:0b:04:ec:9d:4a:ce:
         8e:42:ed:71:42:a1:aa:3c:cf:29:d1:84:e5:83:b9:2e:f0:b1:
         93:95:2b:3d:4d:4a:06:09:fe:38:f3:22:4b:fb:29:52:de:85:
         c7:c5:c6:c7:da:80:14:75:91:9e:06:d8:cb:a8:6c:4d:02:c5:
         ef:94:83:45:34:6c:35:67:bd:f2:ae:f3:7b:55:8a:90:15:b7:
         1f:ec:ad:d2:77:42:6a:d6:1b:fe:79:36:f7:a4:81:cf:24:1c:
         57:93:98:dd:35:2d:44:d2:ad:eb:2c:c2:7f:0b:d9:98:71:1e:
         6c:37:c8:ce:54:f8:37:f5:68:0c:0d:a5:5c:8a:59:17:ca:0e:
         b8:ef:a5:4c:b9:db:ab:31:a6:45:51:e3:dd:10:4a:fe:ff:39:
         15:9a:24:23:13:55:64:f5:11:25:f2:f2:65:7e:95:82:ab:c6:
         b4:e7:78:3f:12:62:1f:8c:60:f3:c8:fa:9c:59:be:7d:a7:0c:
         51:f4:66:2d:03:78:1b:fe:e8:b0:d3:13:78:5e:06:d0:6e:e1:
         9c:e6:0d:fd:9b:c8:d1:59:e5:94:e0:5a:e8:9d:2a:27:30:89:
         70:34:15:5e:f9:c5:49:80:96:2d:4a:bd:8a:d0:2c:9b:b4:89:
         41:20:69:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 06:14:47 2026 by rpki-client