Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File:                     fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier:          iGfenTxvAEeedo2MsF89hCnCUw7SWahfkNpAf+aFe5E=
Subject key identifier:   A9:C8:68:43:8A:41:0C:61:3F:41:F1:BC:E7:8F:D5:6D:19:D0:F0:AA
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer:       /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial:       01A17ADF6AD42DCAB30FE24529879DF07E1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number:          1AD7
Signing time:             Tue 27 Oct 2026 01:00:24 +0000
Manifest this update:     Tue 27 Oct 2026 01:00:24 +0000
Manifest next update:     Wed 28 Oct 2026 01:00:24 +0000
Files and hashes:         1: CC5UwMnAe_xw2dxWGjuHWBZ2TiQ.asa (hash: xpf2R57bTXmJ1MaeU2UGoiTPgRcpAPP231jE/R1hn2Q=)
                          2: Dv3KZYdu5waqli9OHwbfNLsm1-w.asa (hash: 0JCADoaSayhKJcTjJwIBVvTlqp1OlBxFMWr11L68sJc=)
                          3: ZCv5zuLV4EnALGEFKxbgoYBM5nM.roa (hash: 7mctUcSEz1njIzV0x9gPxL3lMAdKKRXEaXa7ldGntA8=)
                          4: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: NlITG0p0RQRXEIxzdnWLfMiUp+naDW8opOwNH7/mksw=)
                          5: ieXmCAI8pK0_izV462-4Shdw2Os.roa (hash: LEsz2kBf52kXStUHt0OtF4M71jBqEUetYd4hXItJxmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7a:df:6a:d4:2d:ca:b3:0f:e2:45:29:87:9d:f0:7e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
        Validity
            Not Before: Oct 27 01:00:24 2026 GMT
            Not After : Oct 28 01:00:24 2026 GMT
        Subject: CN=a9c868438a410c613f41f1bce78fd56d19d0f0aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:91:73:d2:6b:3e:af:56:c4:90:eb:01:31:
                    68:d5:8f:2d:4a:25:e1:9d:12:11:ed:d0:ea:c1:de:
                    96:af:83:86:10:b1:d4:eb:45:f8:eb:df:1d:64:46:
                    6d:a0:34:81:43:72:60:c8:5b:28:a2:2e:0a:df:90:
                    f1:d5:e6:a0:74:e8:08:8e:49:f8:01:da:3f:2b:35:
                    62:55:98:95:0b:ec:44:4f:39:64:2e:20:c9:7e:4a:
                    b8:1b:23:d0:b6:0d:65:f4:6a:fb:43:60:c2:ad:e9:
                    57:83:48:d3:b5:6e:dc:f0:ee:54:26:a8:7d:fb:33:
                    24:65:1c:ba:5c:28:ae:2b:cb:cb:d7:e3:90:ab:3c:
                    dd:12:05:6e:01:f2:4d:24:fe:7d:6a:97:61:45:19:
                    6c:68:e0:91:ea:5f:65:3c:40:94:9c:a3:54:0f:2d:
                    2a:25:6a:4f:fb:37:42:b7:c7:47:98:53:b5:4a:53:
                    3e:51:92:f7:71:04:53:fb:3d:2d:ea:15:f2:e8:be:
                    af:15:6b:a1:1a:97:7a:48:9c:df:24:49:04:ce:ed:
                    ec:be:d7:a3:37:1b:2c:70:d8:3d:39:07:22:73:05:
                    39:b4:35:0a:cf:09:9a:f0:25:55:98:da:3c:d0:54:
                    09:a4:8c:99:54:72:78:f0:78:92:67:90:79:f0:71:
                    74:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C8:68:43:8A:41:0C:61:3F:41:F1:BC:E7:8F:D5:6D:19:D0:F0:AA
            X509v3 Authority Key Identifier:
                keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:95:0d:3d:48:0c:ac:2e:98:cd:e1:0c:de:96:4b:70:29:1d:
         7c:d4:15:f3:74:d2:cf:48:26:dc:4e:d2:ec:60:83:99:b3:10:
         b1:00:94:9f:f0:c3:08:56:ec:9a:27:0f:10:37:a6:b9:97:1f:
         70:b7:5f:47:84:d5:10:48:4e:85:4e:d5:b3:a8:fd:b4:2f:c1:
         ad:41:d6:86:6e:7f:65:11:5e:61:6c:97:bf:cb:ea:d6:66:df:
         b1:7a:17:58:cc:11:95:d2:3e:49:dc:59:de:1d:29:58:1e:3d:
         54:ff:22:5b:53:b1:6f:ff:05:44:a9:96:57:8b:66:c1:46:7d:
         4a:81:06:eb:f0:0b:0c:14:72:97:91:bd:6c:10:c2:a0:6b:52:
         99:f6:23:fc:e5:4b:a0:cf:d8:af:2e:67:87:80:17:6e:7c:0f:
         eb:e1:37:da:71:0a:d0:16:7d:8d:09:07:8b:f6:ba:c5:72:58:
         43:d1:24:a8:db:da:b5:3a:93:8e:9a:db:ce:8f:67:fd:18:fd:
         86:00:c3:27:3a:f7:d5:95:54:bf:07:2f:ac:f7:5f:c1:46:0c:
         84:c0:06:89:f5:d5:fd:43:b9:74:e2:01:2f:a3:c5:77:9c:ef:
         af:e4:d9:cf:77:e6:ed:ab:ae:a6:50:1f:a6:82:2e:e7:66:61:
         77:a2:31:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF632rULcqzD+JFKYed8H4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTAyZTJkMjRiMWYyMTY5MTMwODgyMDdhMjY4ZTY2MjZi
MGNlMzkwHhcNMjYxMDI3MDEwMDI0WhcNMjYxMDI4MDEwMDI0WjAzMTEwLwYDVQQD
EyhhOWM4Njg0MzhhNDEwYzYxM2Y0MWYxYmNlNzhmZDU2ZDE5ZDBmMGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywCRc9JrPq9WxJDrATFo1Y8tSiXh
nRIR7dDqwd6Wr4OGELHU60X4698dZEZtoDSBQ3JgyFsooi4K35Dx1eagdOgIjkn4
Ado/KzViVZiVC+xETzlkLiDJfkq4GyPQtg1l9Gr7Q2DCrelXg0jTtW7c8O5UJqh9
+zMkZRy6XCiuK8vL1+OQqzzdEgVuAfJNJP59apdhRRlsaOCR6l9lPECUnKNUDy0q
JWpP+zdCt8dHmFO1SlM+UZL3cQRT+z0t6hXy6L6vFWuhGpd6SJzfJEkEzu3svtej
NxsscNg9OQcicwU5tDUKzwma8CVVmNo80FQJpIyZVHJ48HiSZ5B58HF07QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnIaEOKQQxhP0HxvOeP1W0Z0PCqMB8GA1UdIwQY
MBaAFH1QLi0ksfIWkTCIIHomjmYmsM45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMt
NTFkNzU1NjhhOWUzLzEvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMtNTFkNzU1NjhhOWUz
LzEvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5UNPUgM
rC6YzeEM3pZLcCkdfNQV83TSz0gm3E7S7GCDmbMQsQCUn/DDCFbsmicPEDemuZcf
cLdfR4TVEEhOhU7Vs6j9tC/BrUHWhm5/ZRFeYWyXv8vq1mbfsXoXWMwRldI+SdxZ
3h0pWB49VP8iW1Oxb/8FRKmWV4tmwUZ9SoEG6/ALDBRyl5G9bBDCoGtSmfYj/OVL
oM/Yry5nh4AXbnwP6+E32nEK0BZ9jQkHi/a6xXJYQ9EkqNvatTqTjprbzo9n/Rj9
hgDDJzr31ZVUvwcvrPdfwUYMhMAGifXV/UO5dOIBL6PFd5zvr+TZz3fm7auuplAf
poIu52Zhd6IxFA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:42:18 2026 by rpki-client