Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File:                     FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier:          jvRa8R9Pr+yrJbSNvTHQSN4ngloIjD1vEFDICXWNtNU=
Subject key identifier:   29:F3:69:2B:46:04:B7:F4:1F:9C:EB:27:9D:BF:73:57:FB:C0:C7:6E
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer:       /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial:       01A1867611FE9511BC5E8FEF5C76C7C46C9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number:          13E0
Signing time:             Thu 29 Oct 2026 07:00:47 +0000
Manifest this update:     Thu 29 Oct 2026 07:00:47 +0000
Manifest next update:     Fri 30 Oct 2026 07:00:47 +0000
Files and hashes:         1: 9EY388q_8N1ByylpLUNJcoEQmNc.roa (hash: swwp7NtGKddr8ryZRv2cyRO8Q2e4qDuv+717NcJsQ10=)
                          2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: q10xY6vCZqNIyHX4x6r4NWeLWlMt1Q7WdDAzRbk3ujw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:86:76:11:fe:95:11:bc:5e:8f:ef:5c:76:c7:c4:6c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
        Validity
            Not Before: Oct 29 07:00:47 2026 GMT
            Not After : Oct 30 07:00:47 2026 GMT
        Subject: CN=29f3692b4604b7f41f9ceb279dbf7357fbc0c76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:d3:7c:6d:53:34:7b:36:1d:3e:41:0d:a0:
                    85:fa:b3:0e:3d:9d:25:b4:4e:9d:ef:db:fc:fe:12:
                    9d:04:f5:41:57:e0:44:75:4f:1d:5c:ca:bd:f1:0d:
                    6e:7a:68:cf:74:16:86:72:15:4b:fc:14:98:6f:4c:
                    15:21:79:b5:f1:58:35:c8:85:52:1f:38:a4:be:b4:
                    dc:d4:e8:65:9d:b6:5f:59:5c:13:d2:c7:9c:03:26:
                    b1:84:da:c4:8a:94:a9:ea:fd:30:29:8b:cc:49:25:
                    4f:2a:4c:11:e6:66:95:bc:60:a7:3e:71:75:3c:04:
                    84:8d:49:8d:2e:5e:ed:09:dc:e5:9d:e6:e8:cb:54:
                    ba:e8:31:18:80:ab:5e:07:93:b1:09:ff:ca:4a:bd:
                    ce:18:25:4a:b8:7a:14:cf:25:88:23:c2:12:f2:d2:
                    5c:8e:24:a1:10:2e:c8:b9:c6:b0:93:ae:ef:95:bf:
                    ba:02:47:dd:0d:52:35:f7:16:a8:88:d2:1d:f3:98:
                    b3:0f:dc:30:4d:46:e9:21:37:b7:18:91:d8:98:09:
                    e3:68:c1:ce:0a:c0:08:af:70:4b:59:15:2b:ea:08:
                    10:06:43:e3:7b:9f:75:68:ae:c6:5d:2a:b9:5e:a7:
                    8b:19:a2:15:84:a9:d7:41:dc:07:8a:1e:67:ac:a6:
                    e5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F3:69:2B:46:04:B7:F4:1F:9C:EB:27:9D:BF:73:57:FB:C0:C7:6E
            X509v3 Authority Key Identifier:
                keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b8:fd:a6:e7:f8:a9:ba:33:fa:38:72:d6:8b:43:da:1d:42:
         e4:06:5b:61:fa:e6:0d:c6:53:60:76:9f:ca:fa:78:aa:59:43:
         52:80:68:06:7c:04:e5:d4:4b:01:3f:af:92:e2:0b:78:80:4f:
         26:25:50:12:58:21:c8:6a:43:9f:d6:52:84:a0:c8:4f:53:5d:
         2b:5d:82:20:de:ee:1c:e9:83:bd:71:e6:c9:25:6c:c9:b8:2a:
         d6:7c:7b:7b:73:73:c1:71:22:27:f2:65:33:7d:af:c5:d0:19:
         44:1f:82:33:e0:ef:51:90:db:55:0c:4e:8b:41:00:e1:2e:bb:
         4f:78:a1:61:e3:4c:8f:56:0e:d3:1a:c0:e0:3d:e8:51:d1:bc:
         f1:f4:8d:e9:cb:be:cf:bc:02:d5:cf:f3:14:7a:27:03:5c:76:
         4b:c5:ce:b6:15:b4:51:5a:a3:02:d4:ed:19:2a:55:8d:18:ab:
         9f:a3:4d:46:2e:48:f8:57:8b:93:f7:1d:57:a6:f8:fc:06:2d:
         60:4d:91:19:7e:64:41:7d:76:eb:5d:56:3b:08:9d:88:e4:65:
         dd:54:3b:7d:4f:23:09:78:5d:ad:69:21:56:3b:ee:e9:22:3b:
         12:81:d6:f4:4f:b1:10:10:74:62:7e:db:1a:58:b4:06:d7:a1:
         44:35:77:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:52:29 2026 by rpki-client