Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
File:                     F7i-tVXa-oLD1qozaQmuWt41qD0.mft (raw, json)
Hash identifier:          eZQcmRd2ifcPVhjb/zkbYGqgqbHZSl9oiGc0bZ1U6IA=
Subject key identifier:   AD:A4:2F:A9:1C:A6:95:48:DC:E2:03:82:AF:A8:22:38:6F:AC:50:6F
Authority key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
Certificate issuer:       /CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Certificate serial:       01A17EBCD03F756B05557F769D42F27104DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
Manifest number:          1ACA
Signing time:             Tue 27 Oct 2026 19:01:05 +0000
Manifest this update:     Tue 27 Oct 2026 19:01:05 +0000
Manifest next update:     Wed 28 Oct 2026 19:01:05 +0000
Files and hashes:         1: 9Z-Nuee6IL7IyQB_4XLrNhjGKS0.roa (hash: RKOygo9w6imutCVkXedMoV0bTqzrHFdgHbjSftosAIY=)
                          2: F7i-tVXa-oLD1qozaQmuWt41qD0.crl (hash: aBuwyOcfw8gHY4NJd3Tl/hHI5Gdu1+9LyqjuN2ya/CA=)
                          3: UfSYcax7hrnZsapdP8nX8CdA6ac.roa (hash: HfQ6PLxHcu26WVTPLuKbtbJcFW7jFqcjCu8B7qggBio=)
                          4: kNHeejH9UWVsvWWApLpc25wsTxE.roa (hash: fxr+p6jIf+XT5GupHuF/9yqj6BcoS+KmnsW6mYE/AOY=)
                          5: kRf-p4qBBa9Rvu5gFKi-QWl32VU.roa (hash: fVpCGOPHxxPr7Wk2f1pVCS7IR1cjhvdExLaBFxIvrYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:bc:d0:3f:75:6b:05:55:7f:76:9d:42:f2:71:04:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
        Validity
            Not Before: Oct 27 19:01:05 2026 GMT
            Not After : Oct 28 19:01:05 2026 GMT
        Subject: CN=ada42fa91ca69548dce20382afa822386fac506f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:05:9a:65:2d:78:d9:cf:49:d0:06:f6:40:
                    8d:7f:38:84:ae:53:3a:5c:ab:ac:96:16:e4:26:81:
                    80:4f:d5:64:61:56:3c:77:12:66:3e:42:0d:7a:1b:
                    64:ea:1d:60:8d:b2:5d:26:fc:a2:a1:97:5f:89:67:
                    60:f3:70:1c:d1:b8:5e:45:42:48:50:43:d0:a7:18:
                    4e:9a:d4:69:be:5c:c0:bf:b4:5f:88:0b:40:87:e5:
                    46:74:a8:25:a5:e6:7e:b1:a4:26:c2:14:09:78:71:
                    75:9f:66:b9:f0:c3:1e:99:7e:84:37:17:00:29:bb:
                    03:62:bc:2e:d7:3f:fe:c1:be:7e:d9:27:16:9e:c9:
                    bc:54:65:fb:32:5c:41:00:4f:e6:2d:34:83:4d:15:
                    d1:1c:ac:91:2b:57:40:b9:62:5e:05:12:c7:d6:dd:
                    db:11:39:ad:5c:81:24:4b:82:cd:63:ff:2d:35:fe:
                    4e:c2:17:4e:a5:a6:52:a2:6b:66:7a:d0:70:df:f0:
                    10:01:bc:ea:d6:a3:9a:d3:d6:60:67:c9:af:f1:5f:
                    e3:7c:0d:80:d1:ba:92:06:cf:4a:e7:9b:6e:ff:3e:
                    3d:97:91:b0:42:49:bf:16:a6:3e:ac:43:a4:0d:1a:
                    9b:b8:71:ea:20:cb:c5:f7:a3:75:3c:d6:53:80:2b:
                    d9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A4:2F:A9:1C:A6:95:48:DC:E2:03:82:AF:A8:22:38:6F:AC:50:6F
            X509v3 Authority Key Identifier:
                keyid:17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:52:24:76:a3:b9:d3:ab:62:3e:14:70:d4:05:9e:f1:47:65:
         fb:73:c5:f7:4a:d5:99:2d:78:30:7a:37:b0:35:95:07:f2:9b:
         ba:6c:1d:46:80:d0:dd:30:a2:c2:dd:3d:e2:0f:5e:c0:69:48:
         5e:4e:f7:f0:b9:a8:35:d0:68:67:8e:d6:ed:d2:ea:af:97:a2:
         33:69:a6:d2:6d:60:a0:a5:82:e5:1e:07:ae:5d:bf:62:37:35:
         42:3d:f7:8b:20:f8:1f:29:33:36:b4:7c:6c:09:68:a9:09:81:
         b2:57:b2:41:9e:d2:c8:14:eb:c4:b7:53:5c:97:67:44:28:88:
         bd:c4:e9:0f:52:2f:b2:c0:34:94:76:37:26:d5:4b:52:70:c8:
         12:d6:fa:dc:a6:c3:4c:f6:1f:08:ee:13:8e:45:e0:40:0a:ba:
         25:57:d0:8b:4c:83:33:38:25:55:02:77:7c:c1:7b:6b:75:6a:
         6a:74:62:1c:f7:69:90:07:96:07:f4:65:09:f5:8d:ce:b6:ca:
         06:4f:c4:c7:1f:b5:14:3d:61:fb:7b:b3:19:cb:76:c3:99:03:
         96:ce:36:ce:bc:8f:80:a7:31:23:be:69:db:fc:08:c3:2a:58:
         5f:c5:3c:20:11:9d:84:cf:c5:dc:9e:d8:f7:e9:c6:a9:33:09:
         3b:40:fe:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:19:42 2026 by rpki-client