Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
File:                     F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft (raw, json)
Hash identifier:          eD8UZTIDnEB/ZPE2Sn6G2/m4MYYRmU+ejJk/O3hlM70=
Subject key identifier:   8B:E8:41:1D:81:0B:FB:99:42:D2:CE:8E:E5:30:B3:29:75:87:BA:94
Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
Certificate issuer:       /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Certificate serial:       01A17BBB8E98E71F9EACA4B15E6B678966A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
Manifest number:          1AD7
Signing time:             Tue 27 Oct 2026 05:00:51 +0000
Manifest this update:     Tue 27 Oct 2026 05:00:51 +0000
Manifest next update:     Wed 28 Oct 2026 05:00:51 +0000
Files and hashes:         1: F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl (hash: EDnAYrv7O8LnF4JMJ7jbLI8ZkF8u8SlO0hPtli7Dryk=)
                          2: O39MJv57TWbmh-043GG_Y3SPcR0.roa (hash: 8nJD+DxVo3QJVLDsiX2c2YfhjphmaMQZAM0s+wFgUgA=)
                          3: OJRfagybnKNPJgB2VgQCHXK6_wA.roa (hash: +CkaUNxuBjvbD77nG/V3XHJG2xGpZ2YKXMRrO/6Sytc=)
                          4: ZJtFdEDxmsbcX4jDsw2u8r-Xj7k.asa (hash: cTM4PiZVFZLUAQhA+MhDIodHuslGKdYGZeWEgzK7nsA=)
                          5: ihmrebXRZJfViRX4wxqlQD4yY5w.roa (hash: zbtiR4hVHidDupnjoUs6IoiKzo0tQZSkjWxtKWEtK+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:bb:8e:98:e7:1f:9e:ac:a4:b1:5e:6b:67:89:66:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
        Validity
            Not Before: Oct 27 05:00:51 2026 GMT
            Not After : Oct 28 05:00:51 2026 GMT
        Subject: CN=8be8411d810bfb9942d2ce8ee530b3297587ba94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:00:ca:77:2d:bd:32:43:0a:ca:3d:ec:a3:6a:
                    73:5e:17:f2:6d:75:cb:64:09:7e:cd:17:10:b2:27:
                    9f:60:5b:16:dd:45:cf:b9:5f:67:43:5a:74:68:c8:
                    1a:c1:dc:40:0a:ef:55:79:ff:7e:d9:95:0a:f3:4c:
                    4b:64:6a:85:e5:2e:56:8f:33:b8:90:33:20:72:e1:
                    37:9d:c1:3d:a2:7f:18:bb:08:4e:5e:78:49:d0:36:
                    c0:d0:fd:b7:1d:c7:2a:84:91:ec:a9:5e:8d:62:74:
                    3e:a3:b2:0a:24:7b:16:2d:5d:27:8d:7f:18:70:60:
                    64:ec:64:e6:52:b2:f4:50:d3:81:9f:be:b4:ba:d8:
                    8b:57:49:0f:67:c4:23:81:0c:29:b5:20:88:ff:5e:
                    45:d4:b6:05:7f:db:dd:02:a4:34:12:60:cf:7e:7f:
                    cc:7b:6a:69:f6:60:2c:6e:c4:fe:d3:a7:f5:4b:36:
                    d8:14:68:03:3f:91:81:26:c1:6b:28:e0:59:41:e8:
                    2e:12:e3:e0:fd:44:fe:c1:10:26:d3:66:d2:0e:e2:
                    3d:2d:c9:69:0c:a6:a1:19:d2:80:62:8d:65:82:b2:
                    0f:68:52:8b:51:05:3e:44:ec:0a:d8:93:4f:d7:8e:
                    d4:7a:e0:c3:73:0d:dd:68:82:c6:55:c6:92:8a:74:
                    fa:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E8:41:1D:81:0B:FB:99:42:D2:CE:8E:E5:30:B3:29:75:87:BA:94
            X509v3 Authority Key Identifier:
                keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:03:a3:72:d9:73:70:e2:80:95:0f:55:94:db:51:af:f9:3c:
         13:e1:7d:e8:94:5d:fc:f7:99:1c:aa:de:79:49:d3:e7:d1:d1:
         0c:d0:ae:d4:7c:c9:a2:10:ac:a7:3e:02:93:58:32:da:0c:87:
         fd:21:8e:cc:55:99:59:42:42:42:95:9e:23:fc:a3:79:56:fe:
         05:87:8c:97:33:2a:08:0f:15:0c:fa:b6:c6:6d:db:0e:f5:3c:
         1f:18:1e:cd:bb:d3:36:f7:65:af:75:6e:3f:e4:81:d5:b7:63:
         35:d5:a8:4a:42:09:75:c6:eb:52:6a:51:31:06:77:6a:35:35:
         14:d1:79:7d:1b:f6:72:78:1e:93:a8:7d:6b:68:cd:d9:d9:ac:
         2f:eb:81:75:82:48:59:40:2f:18:d6:3f:83:c3:aa:1d:15:9e:
         e4:fe:f0:08:05:80:10:fe:26:34:3a:92:2a:71:c4:29:00:44:
         df:bd:15:18:97:16:73:d7:48:c0:2c:82:a5:26:bb:e2:bc:f2:
         80:b3:f2:7d:53:a3:f5:aa:a1:55:16:13:a1:a5:1a:00:4f:d2:
         0e:90:31:aa:1b:9b:e4:e3:49:4c:1a:d1:3e:e0:e6:0d:53:17:
         99:29:06:4d:4e:67:00:c5:09:45:a9:64:83:ef:38:41:92:18:
         a3:8b:18:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:44:50 2026 by rpki-client