Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/6f4b4d-8d5d-47d3-8bfa-0956d330b7c9/1/fdaRTKUodtKjLVzQKjCRSCIookg.mft
File:                     fdaRTKUodtKjLVzQKjCRSCIookg.mft (raw, json)
Hash identifier:          MXutMUtaLUA58GSHwytREdHkM/5F3OauNGgm+oiY7RI=
Subject key identifier:   35:A6:3C:35:E4:67:D1:97:29:37:D6:3C:20:03:82:2C:50:83:2A:77
Authority key identifier: 7D:D6:91:4C:A5:28:76:D2:A3:2D:5C:D0:2A:30:91:48:22:28:A2:48
Certificate issuer:       /CN=7dd6914ca52876d2a32d5cd02a3091482228a248
Certificate serial:       01A173944D44E426F58EB02C394372C72560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fdaRTKUodtKjLVzQKjCRSCIookg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6f4b4d-8d5d-47d3-8bfa-0956d330b7c9/1/fdaRTKUodtKjLVzQKjCRSCIookg.mft
Manifest number:          39
Signing time:             Sun 25 Oct 2026 15:01:01 +0000
Manifest this update:     Sun 25 Oct 2026 15:01:01 +0000
Manifest next update:     Mon 26 Oct 2026 15:01:01 +0000
Files and hashes:         1: c1ydoglMWFgWvIRevPuAcsR8CY8.roa (hash: /nUo9Wl3WkXYx1Y2BXmFyMS5IQo2PU0gmYoBjjrk/2A=)
                          2: fdaRTKUodtKjLVzQKjCRSCIookg.crl (hash: 9dD0xnxl4dnoIv6r+Aae2IXN+YSlTNyTvPOQK/EkGRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/6f4b4d-8d5d-47d3-8bfa-0956d330b7c9/1/fdaRTKUodtKjLVzQKjCRSCIookg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/6f4b4d-8d5d-47d3-8bfa-0956d330b7c9/1/fdaRTKUodtKjLVzQKjCRSCIookg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fdaRTKUodtKjLVzQKjCRSCIookg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 15:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:73:94:4d:44:e4:26:f5:8e:b0:2c:39:43:72:c7:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd6914ca52876d2a32d5cd02a3091482228a248
        Validity
            Not Before: Oct 25 15:01:01 2026 GMT
            Not After : Oct 26 15:01:01 2026 GMT
        Subject: CN=35a63c35e467d1972937d63c2003822c50832a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ee:10:fa:52:58:47:20:48:a6:ea:94:6e:a1:
                    b4:08:95:e7:9a:d5:26:95:72:fa:b5:b9:67:e7:e4:
                    47:64:70:a6:c5:6b:7d:cb:7b:76:13:e0:51:fa:6f:
                    53:63:86:6d:28:16:a3:bc:27:54:15:ab:5b:53:d1:
                    05:6a:dd:c2:fc:36:10:9c:bc:74:3c:04:6c:a8:50:
                    6f:63:50:5e:ed:9f:76:16:a6:d0:8d:b5:e4:1a:32:
                    fd:6b:2f:a7:32:04:6d:51:0d:83:e2:30:b0:a6:e1:
                    7e:4c:56:40:c2:1e:49:10:aa:52:67:f9:98:cd:a2:
                    9f:af:e6:3f:08:13:6f:9b:05:b8:75:85:63:0d:9d:
                    08:b6:ef:1b:75:00:ea:f0:44:e5:9e:ed:87:61:d3:
                    2d:07:f5:c9:d3:55:53:c1:b6:3b:de:5d:f6:d0:80:
                    31:b0:0d:78:69:83:5b:59:87:a7:4e:a8:7f:cb:9b:
                    25:2f:51:87:8d:60:e6:1d:ac:b8:3b:e0:d9:f5:29:
                    13:7c:41:d4:9a:73:5e:0d:f0:e4:7c:63:a4:24:5d:
                    be:0b:5e:b2:40:2c:0d:30:e7:ae:a4:1d:74:2e:2e:
                    7f:36:dc:91:96:34:73:46:87:c7:6b:cd:0e:db:f4:
                    e0:a1:30:2c:49:33:89:1a:f6:9b:cf:e0:04:a5:90:
                    77:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A6:3C:35:E4:67:D1:97:29:37:D6:3C:20:03:82:2C:50:83:2A:77
            X509v3 Authority Key Identifier:
                keyid:7D:D6:91:4C:A5:28:76:D2:A3:2D:5C:D0:2A:30:91:48:22:28:A2:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdaRTKUodtKjLVzQKjCRSCIookg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6f4b4d-8d5d-47d3-8bfa-0956d330b7c9/1/fdaRTKUodtKjLVzQKjCRSCIookg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6f4b4d-8d5d-47d3-8bfa-0956d330b7c9/1/fdaRTKUodtKjLVzQKjCRSCIookg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:32:ef:90:75:0b:74:88:e0:f4:c1:9a:dc:e2:69:27:ab:7e:
         36:64:bf:c6:7d:c4:b4:3a:02:de:55:e4:66:ca:d8:11:53:05:
         56:35:80:66:9f:29:8a:1a:3f:45:64:ee:f8:c1:04:c1:32:b1:
         30:3d:66:f4:95:a3:90:cb:98:6a:54:1e:4f:83:89:d9:d4:5a:
         3e:72:0c:d1:16:4d:f4:3c:df:4f:aa:0b:5d:18:68:77:60:bc:
         f4:8d:a3:01:56:58:43:e4:24:33:13:a7:7e:3c:2c:6a:63:14:
         99:76:b8:0b:58:ac:2c:88:75:f4:f4:c6:af:2b:ba:79:9b:99:
         22:36:8e:e7:8e:e6:a7:76:e4:64:5d:30:25:c4:4b:55:cc:42:
         0f:7a:da:9b:2a:5f:95:b8:d0:49:5c:e6:c6:69:90:7c:af:fa:
         19:e1:50:4c:d5:04:fb:3c:0d:b8:53:0b:f2:d8:c5:12:43:8b:
         71:05:9d:36:97:b5:5e:16:54:84:36:65:98:7c:92:ed:7d:59:
         87:da:df:0f:50:1f:5b:99:44:47:f2:e3:35:de:e2:90:0b:36:
         ee:53:7f:ad:00:9e:5d:ce:d7:0a:08:9b:db:c4:0c:3b:13:77:
         54:f3:b7:3e:c5:ba:d8:e2:b3:5e:4c:e0:c7:15:9f:0d:99:26:
         4e:c1:9f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:31:28 2026 by rpki-client