Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft
File:                     FK__4H7yluyM0lK8sgiLG6qPur0.mft (raw, json)
Hash identifier:          6gH/X7nzTBqRfUvvrOuzi5+/5/GtLCuuAUp/4GvePSc=
Subject key identifier:   CE:25:38:8C:F3:6D:A4:06:84:2E:29:23:E6:3B:13:0D:FB:E3:82:CF
Authority key identifier: 14:AF:FF:E0:7E:F2:96:EC:8C:D2:52:BC:B2:08:8B:1B:AA:8F:BA:BD
Certificate issuer:       /CN=14afffe07ef296ec8cd252bcb2088b1baa8fbabd
Certificate serial:       01A140F13289CCF440716BC475C9A8C60CB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FK__4H7yluyM0lK8sgiLG6qPur0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft
Manifest number:          021E
Signing time:             Thu 15 Oct 2026 19:01:51 +0000
Manifest this update:     Thu 15 Oct 2026 19:01:51 +0000
Manifest next update:     Fri 16 Oct 2026 19:01:51 +0000
Files and hashes:         1: FK__4H7yluyM0lK8sgiLG6qPur0.crl (hash: n/mlV3ALoMoRDCWgJVEPBAACINLxsAqWAORT0rduFlw=)
                          2: QpgRqR4ONpEAldJV9RdLVieuB30.roa (hash: O7WrNb/BN4tdedokbnfczoEsP+osybSj8/C29gRLRWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FK__4H7yluyM0lK8sgiLG6qPur0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:f1:32:89:cc:f4:40:71:6b:c4:75:c9:a8:c6:0c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14afffe07ef296ec8cd252bcb2088b1baa8fbabd
        Validity
            Not Before: Oct 15 19:01:51 2026 GMT
            Not After : Oct 16 19:01:51 2026 GMT
        Subject: CN=ce25388cf36da406842e2923e63b130dfbe382cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:63:d3:e1:5c:cd:f8:13:67:19:60:30:ee:
                    46:30:77:f5:e1:f6:8f:59:f7:ed:ac:91:26:0c:4f:
                    84:20:bf:ea:bb:da:f6:cf:7c:c3:71:70:30:10:f7:
                    55:fb:eb:bb:0c:29:b7:43:b4:e5:7a:99:c0:c8:6f:
                    2b:d1:7e:92:01:3b:93:6c:e1:ff:ce:a9:15:b8:2a:
                    52:e2:1a:86:0b:e7:e7:b7:63:cd:b3:c0:9c:51:f6:
                    4d:8a:e5:2c:5d:c6:79:7b:7e:39:a5:d3:59:39:ee:
                    e1:d0:f5:fb:52:54:6f:a8:3e:a7:11:63:79:5e:56:
                    f5:56:61:ac:7b:52:3b:36:da:ec:8d:20:99:fc:60:
                    13:49:77:42:48:17:7a:9c:3b:dc:4f:90:79:d0:cc:
                    19:86:d1:15:0d:33:af:15:0d:16:85:67:20:dd:f6:
                    02:7d:7f:ba:f0:a1:2b:ca:d9:46:b8:c5:c4:fe:31:
                    28:70:f5:c2:15:64:e2:83:96:56:14:c1:b4:1b:7c:
                    78:c4:c7:c0:26:5b:be:e0:60:a6:41:63:97:88:95:
                    f0:89:24:9b:f7:69:a5:50:14:9e:27:df:f5:f7:e4:
                    66:79:ef:cf:11:1c:3b:54:71:63:8d:07:03:46:0d:
                    94:16:05:b3:17:ed:79:24:a5:7f:05:a8:5f:09:9f:
                    d7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:25:38:8C:F3:6D:A4:06:84:2E:29:23:E6:3B:13:0D:FB:E3:82:CF
            X509v3 Authority Key Identifier:
                keyid:14:AF:FF:E0:7E:F2:96:EC:8C:D2:52:BC:B2:08:8B:1B:AA:8F:BA:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK__4H7yluyM0lK8sgiLG6qPur0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:92:49:6b:4f:a8:b8:64:50:2a:f3:f8:c0:d8:7c:71:05:9b:
         bf:47:85:97:d5:64:c9:45:95:e0:05:f2:b9:ec:e1:5c:54:db:
         d9:da:9d:50:61:5c:83:d8:1c:31:c8:b6:98:9e:6e:e9:5c:48:
         a6:80:c7:4a:5b:8a:c1:94:59:6e:77:7d:ae:98:4b:eb:aa:a8:
         b1:56:2e:a4:28:1e:96:6a:2a:7d:3b:17:cd:b3:04:8c:b8:5b:
         fd:ef:a7:81:50:e2:e3:1a:92:61:5a:db:62:9d:1d:c1:f6:29:
         d1:50:8b:31:1a:e4:30:63:a4:79:c7:1b:b2:a2:d2:55:2d:76:
         c9:ff:fd:66:12:f2:92:5f:3a:42:7a:c3:26:5b:b2:80:a6:b2:
         4a:2e:b2:98:42:8c:be:25:5c:5f:cf:61:43:d8:56:64:f5:56:
         75:30:27:7e:b2:00:09:92:18:5d:e7:d6:c3:7a:29:74:03:0f:
         19:b5:a6:e2:43:0e:74:a6:27:65:33:dc:ff:7d:3d:a6:5f:26:
         43:4b:51:ad:d9:54:36:36:9e:a6:51:2e:20:e7:31:e8:bc:19:
         fa:46:70:30:5a:8c:12:e9:b8:52:1d:16:7a:96:18:76:d8:37:
         43:32:95:2c:fe:39:3e:16:5e:8a:bd:61:22:8f:63:73:5f:3d:
         27:aa:a0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:19:36 2026 by rpki-client