Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
File:                     fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft (raw, json)
Hash identifier:          5om4BTAA7KaOYr9Z7HdS3NyNLi0BtI9S7Snxn3aQ0q0=
Subject key identifier:   BB:88:44:F7:C7:5A:92:C5:99:94:AF:74:8B:55:40:B6:97:4F:17:E5
Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
Certificate issuer:       /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Certificate serial:       01A133A2C68B403097B93C6B0AD0BB924153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
Manifest number:          1AB4
Signing time:             Tue 13 Oct 2026 05:01:08 +0000
Manifest this update:     Tue 13 Oct 2026 05:01:08 +0000
Manifest next update:     Wed 14 Oct 2026 05:01:08 +0000
Files and hashes:         1: 0TxBgKR0-mFBVPmaWWvTm14Pm-Q.asa (hash: cth+Rrm+HpFKrwXy4qDgKJSR8yMF6YAu4ac25E9vD8Y=)
                          2: J5-ZZxYB5xyEptEXT9fLN2-O3Q8.asa (hash: gEhzebzSmpk72W4Pzu8OHqW1CkeeMsXnRgMFcOTGIfo=)
                          3: f5hSjXuegoqQZTKAeHGAZTXQXRE.asa (hash: YGMhmV8NhjoGaMlAsTrNHjXtjuVZ2lqEixNHOIMRTNk=)
                          4: fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl (hash: FiUC++avCtdZbujzgbYU8z4/JngCQU56fCCNnaKoupo=)
                          5: jRge2qkWoaSsXp1Zw8j0h3Xqueg.roa (hash: WWZ6cjlbPPONc3JCBCxXuaN0x8z9x2JVs4zwmdInc+0=)
                          6: uyc7cEaIaFZ6Wo7I4FQYXkhPq8o.roa (hash: 5v9xHENhT3YHIH/MViJc/eB0Q9ZL8gBRplwjr1xeJHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 05:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:33:a2:c6:8b:40:30:97:b9:3c:6b:0a:d0:bb:92:41:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
        Validity
            Not Before: Oct 13 05:01:08 2026 GMT
            Not After : Oct 14 05:01:08 2026 GMT
        Subject: CN=bb8844f7c75a92c59994af748b5540b6974f17e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:05:9d:cc:fe:79:5d:62:59:30:e3:f8:23:fd:
                    86:44:57:fb:df:6f:4b:d9:de:70:95:88:2c:fa:c8:
                    78:69:91:69:c0:29:7c:06:b8:b9:b5:1c:8f:5c:65:
                    57:fd:08:12:65:c9:ae:ea:da:7c:83:b2:0a:3a:5e:
                    9e:c3:a5:1b:c5:57:06:d0:a8:fc:9e:6e:37:41:01:
                    da:6f:0b:8e:5d:c0:c5:d2:ef:78:2a:d3:2e:09:28:
                    cc:f5:49:f5:84:13:0c:fc:a0:78:04:07:89:ea:16:
                    36:c1:81:10:e3:d2:56:49:25:3b:19:34:92:58:f5:
                    d8:f0:6a:e4:0a:b8:55:66:a9:55:28:fd:39:9b:30:
                    21:63:38:1b:af:44:72:b6:65:71:0a:87:b7:eb:66:
                    29:0c:bb:e8:64:8c:46:64:c0:d2:11:63:1f:9b:b7:
                    21:6e:92:32:1e:21:5e:47:04:19:03:a8:2c:eb:77:
                    3b:a4:43:2d:94:9d:dc:00:39:b0:8b:61:37:b2:36:
                    9d:47:ae:9a:1d:bb:c3:38:cb:e5:ac:a6:73:04:c4:
                    87:23:3d:20:5c:10:5c:c2:1a:f9:4c:79:15:35:2f:
                    e8:34:1b:4a:9d:ed:d7:02:8d:be:e4:28:f3:c1:1d:
                    a8:00:10:5e:58:fa:e1:ca:c8:99:11:b3:a6:f4:b1:
                    41:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:88:44:F7:C7:5A:92:C5:99:94:AF:74:8B:55:40:B6:97:4F:17:E5
            X509v3 Authority Key Identifier:
                keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c3:d8:26:a7:e4:c8:10:05:b4:b7:5c:77:51:1a:83:4d:c3:
         c9:c0:2f:da:77:a3:ed:ed:5d:23:b7:c1:cb:75:81:15:bc:31:
         2f:d4:7b:13:2e:40:44:75:0c:6f:bd:0d:17:ed:4c:ec:56:28:
         af:86:01:8c:55:8f:27:e0:c0:a4:d2:5b:88:28:6f:ba:3c:49:
         aa:d5:7a:44:ca:c3:3b:3a:9a:e5:8f:e9:5e:f5:5f:41:a4:53:
         37:45:0d:29:b0:1c:e1:04:73:97:1a:11:33:dd:22:6b:c9:8b:
         66:f2:e1:9e:f4:5b:7c:c9:68:f4:5c:eb:7e:92:73:80:ed:5c:
         bc:04:31:76:a1:02:1f:3f:02:55:3e:e3:80:e8:1b:b0:37:e8:
         05:c8:5c:c1:02:cb:2a:66:2b:32:0f:e3:46:f6:f9:58:75:0d:
         99:7d:8f:0f:25:63:70:ad:2f:b6:de:7e:5f:b2:1f:62:9d:98:
         1d:38:25:fe:3f:57:51:fd:93:61:ee:d2:97:21:fe:a1:28:dc:
         b0:c7:db:d4:cf:3d:db:c1:b3:21:aa:0e:7d:13:19:b2:44:ad:
         03:be:7d:18:2a:a1:e7:f3:b2:a2:1b:30:17:08:b3:13:ff:9f:
         9b:55:85:8e:2b:61:26:6b:78:78:f3:79:db:cb:7d:1a:37:d5:
         c6:2c:3d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:47:34 2026 by rpki-client