Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.mft
File:                     fYud7bGKYodS65sTq1OnsFxrvPs.mft (raw, json)
Hash identifier:          SQZLLk/j8Tx0xIwcIzvvWDuFmoDAnuem879263w2l7w=
Subject key identifier:   6A:54:72:C8:47:BC:C9:76:E7:EB:A5:7B:1F:EF:02:1B:BD:34:E9:9E
Authority key identifier: 7D:8B:9D:ED:B1:8A:62:87:52:EB:9B:13:AB:53:A7:B0:5C:6B:BC:FB
Certificate issuer:       /CN=7d8b9dedb18a628752eb9b13ab53a7b05c6bbcfb
Certificate serial:       01A17E17DE932CB77F90667FDC70FCB3107D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fYud7bGKYodS65sTq1OnsFxrvPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.mft
Manifest number:          013D
Signing time:             Tue 27 Oct 2026 16:00:55 +0000
Manifest this update:     Tue 27 Oct 2026 16:00:55 +0000
Manifest next update:     Wed 28 Oct 2026 16:00:55 +0000
Files and hashes:         1: DCgkXKWju9a74f-BD7pwB2qA-Ek.roa (hash: 0lPyy+XVCSUybo3UvnbvK+AwH8B8KKxXnQhU2cV9IB0=)
                          2: fYud7bGKYodS65sTq1OnsFxrvPs.crl (hash: KSOdpLR7lrOEtkUTnnwv6t/NrepKVBOthlt2PflcnRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fYud7bGKYodS65sTq1OnsFxrvPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:17:de:93:2c:b7:7f:90:66:7f:dc:70:fc:b3:10:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d8b9dedb18a628752eb9b13ab53a7b05c6bbcfb
        Validity
            Not Before: Oct 27 16:00:55 2026 GMT
            Not After : Oct 28 16:00:55 2026 GMT
        Subject: CN=6a5472c847bcc976e7eba57b1fef021bbd34e99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:0f:db:f4:8f:10:a4:89:44:f4:1e:e6:1a:5f:
                    20:40:1e:d4:25:47:ad:fa:7d:e6:ca:5e:66:45:0d:
                    3a:2f:28:2b:31:71:60:de:dc:11:a4:a5:d5:0e:0e:
                    5d:ff:e2:96:85:b0:6a:f8:a8:27:5b:ee:ea:c2:72:
                    64:a1:1d:6e:bf:2c:44:23:bc:c8:a9:2e:ab:8c:09:
                    67:f0:2f:5a:90:80:d8:96:a0:84:9f:3c:2a:c3:0e:
                    1e:f4:6d:98:d2:28:83:a5:cf:64:f3:e6:0d:03:3f:
                    35:56:53:cc:ba:c5:c7:9b:b8:c4:fe:cb:a4:ee:2c:
                    a8:89:4e:2c:cc:41:dd:e8:36:5e:b7:2f:b4:5f:33:
                    df:af:6a:3e:9a:13:34:e5:f6:ed:fb:f2:3e:1c:f9:
                    d7:fe:2e:f5:2d:21:6e:5b:f5:06:8a:e1:6a:e0:dd:
                    f2:df:1d:b6:1b:9f:ac:4a:51:62:16:58:07:cb:34:
                    fb:ab:a2:f9:30:70:b4:dc:4e:27:8f:9d:fb:88:b0:
                    74:33:bb:d3:c4:f8:35:eb:14:39:24:f3:48:a6:34:
                    2e:23:71:81:8a:4f:f3:c0:4e:b8:8e:20:e1:05:87:
                    db:19:77:b6:c1:59:34:62:3e:69:f0:56:cc:ed:61:
                    74:cd:2c:c0:a9:f2:e3:e5:3f:a0:2e:5a:7d:5e:05:
                    aa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:54:72:C8:47:BC:C9:76:E7:EB:A5:7B:1F:EF:02:1B:BD:34:E9:9E
            X509v3 Authority Key Identifier:
                keyid:7D:8B:9D:ED:B1:8A:62:87:52:EB:9B:13:AB:53:A7:B0:5C:6B:BC:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYud7bGKYodS65sTq1OnsFxrvPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:94:10:9f:f6:31:c1:e3:0c:0d:ff:4d:c9:98:70:2c:e9:43:
         a6:c3:aa:ef:0e:d6:d3:1d:e5:ca:b1:a6:81:ca:60:7a:d9:c8:
         bd:ad:4c:ff:a5:75:9b:82:c9:fd:53:9d:b2:09:5f:be:b3:8a:
         45:2d:80:e5:a2:a7:c7:1f:b1:78:21:d8:e6:66:b7:ea:09:6e:
         0b:59:2c:0d:1c:20:a9:c6:f3:e8:c0:c3:77:ce:8e:bb:f2:bb:
         16:e9:0a:c3:79:c7:00:3d:d9:4e:bb:51:52:5c:d8:c5:61:4b:
         58:d6:c5:c2:ea:28:f5:9f:84:48:03:fa:e6:8e:2a:1c:8e:5a:
         cc:3e:64:29:e9:02:17:2c:66:81:de:7c:2d:8a:9b:94:05:e3:
         de:ed:f9:41:7f:b1:ee:4f:c6:b5:12:19:9b:5a:89:7b:cf:1c:
         cb:49:29:66:9b:5d:94:a7:1e:b4:a8:c6:0a:e8:fd:fe:99:25:
         2e:de:fd:26:f3:0b:63:27:3f:f4:6f:29:55:40:be:34:db:e0:
         28:6f:ad:9c:c4:18:64:a1:e1:65:d0:84:a2:9f:dc:9c:53:92:
         66:87:5a:a0:5a:49:35:46:be:e7:21:e9:e0:3a:31:76:a8:d2:
         df:50:32:df:0b:91:cf:b1:1d:7d:10:42:73:57:5b:d8:ad:4a:
         b0:6a:14:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:38:20 2026 by rpki-client