Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
File:                     X7piVd7aoaG2sXy46pHgLUErhxg.mft (raw, json)
Hash identifier:          T+iiOcKEkcckA1lfxj/2yE9HJ0FYfUiul//2TxSdq6Q=
Subject key identifier:   24:17:FA:BB:11:C0:FC:A8:C7:31:AF:9C:AC:73:7B:5A:2B:25:BB:7D
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Certificate issuer:       /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial:       01A174A76778F812051FA4583060AEECBD3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
Manifest number:          0FB6
Signing time:             Sun 25 Oct 2026 20:01:30 +0000
Manifest this update:     Sun 25 Oct 2026 20:01:30 +0000
Manifest next update:     Mon 26 Oct 2026 20:01:30 +0000
Files and hashes:         1: X7piVd7aoaG2sXy46pHgLUErhxg.crl (hash: YALofz/rz89unNLOiM/a33ftjGMvRWfoTpnm38FMVfU=)
                          2: at5a5rELRNEAw0rbmlFozDBKmf0.roa (hash: fph6BRKPR1DclmnZB61WzWIE1l0c6loKAE1iu+Pb6gg=)
                          3: fN1BCGt6X78bmo40K4mqUHAHyNE.roa (hash: 4u131ZUFsLjOVWZz34pEcO0mSEYVLQJpztQcoDh3/Iw=)
                          4: o__yenjb_byTDMgOBxUzVji8MJk.roa (hash: i3sG4QUVi7SpGaea2GgrwUuE6uMpXt1hzOEHLJcR4vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 20:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:a7:67:78:f8:12:05:1f:a4:58:30:60:ae:ec:bd:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
        Validity
            Not Before: Oct 25 20:01:30 2026 GMT
            Not After : Oct 26 20:01:30 2026 GMT
        Subject: CN=2417fabb11c0fca8c731af9cac737b5a2b25bb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:d3:fc:5c:19:0e:5d:ee:08:32:c0:2f:81:
                    77:97:18:40:48:ff:f5:f7:3e:75:22:4b:04:2b:71:
                    ca:94:23:09:85:3e:83:f0:25:12:36:6d:af:e7:1e:
                    71:c9:25:e2:2a:a0:ce:b5:44:8a:02:b0:99:9a:8a:
                    8c:f7:86:8a:15:6e:aa:f1:18:93:42:ce:90:5c:36:
                    da:8c:88:88:77:d7:98:bd:12:4c:c0:c2:d6:60:92:
                    f2:f0:28:2c:f4:4f:9a:21:bb:10:24:b1:7b:f8:6b:
                    dc:4f:6f:3b:8f:12:47:c9:12:43:05:4e:db:fa:d8:
                    bb:20:8e:22:44:39:94:14:13:2b:2b:1d:9d:65:eb:
                    49:95:55:79:79:a0:89:e2:f5:6c:ca:39:ae:70:c6:
                    7b:24:bc:c5:7b:2f:5a:82:7c:44:3f:36:30:75:f2:
                    f5:12:c4:37:3a:88:d8:32:82:78:6e:d9:ac:ae:4f:
                    37:9c:6e:92:cf:8a:4c:17:6d:ae:d4:90:94:69:0d:
                    e5:53:24:1d:6c:8c:e3:df:81:5e:fe:c6:c9:26:1e:
                    59:0f:c2:50:d9:08:0a:d8:56:56:58:ec:1a:b9:c9:
                    11:9e:c1:5f:0c:15:cf:d4:44:40:8e:07:f0:61:be:
                    4e:88:ca:8e:3c:1c:24:4e:a8:e5:dd:21:db:4e:db:
                    8b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:17:FA:BB:11:C0:FC:A8:C7:31:AF:9C:AC:73:7B:5A:2B:25:BB:7D
            X509v3 Authority Key Identifier:
                keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:47:0e:eb:2b:b3:e2:df:f6:ff:82:96:ab:95:13:4a:97:2b:
         4a:1d:48:8d:7e:29:4f:58:40:30:af:0a:ab:de:fa:eb:81:f4:
         15:39:a5:01:f3:2b:ae:75:c4:8e:97:57:16:d8:cc:40:1f:8a:
         13:54:2a:9d:cc:36:75:39:1d:2f:04:12:66:88:cc:23:16:4a:
         a0:de:ef:44:a7:aa:c6:84:e5:29:18:90:0b:fd:23:74:4f:2a:
         87:8f:1c:8a:42:f4:d8:7b:83:6c:ac:0a:52:f6:bb:94:7c:95:
         39:43:32:bd:98:d9:e2:06:c0:c1:07:bf:ca:71:02:cc:f4:e1:
         5a:27:0f:dd:44:70:c0:23:eb:82:7d:2d:96:80:a1:ee:79:8d:
         d8:ae:e0:a1:3d:1f:46:c5:50:31:b3:15:7e:c3:9b:0b:c9:e9:
         f8:d8:62:72:3e:3b:f1:ce:10:dd:a3:7d:73:76:be:3a:e9:38:
         8b:75:5f:54:54:ac:3d:4e:e0:08:2c:de:55:eb:ec:84:36:b2:
         97:2a:7b:48:de:24:c6:ae:b3:5e:1b:66:c5:54:ca:bb:ac:d0:
         30:c2:6c:0f:6e:7d:ba:26:41:04:80:5f:a1:1c:39:ab:a6:32:
         cd:4e:42:f8:70:e0:d5:a0:7d:df:1f:a1:8e:f2:78:cd:ee:de:
         98:66:f1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:34:43 2026 by rpki-client