Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
File:                     fRSfYkR4U2icEvsoiv62toHP68E.mft (raw, json)
Hash identifier:          Uh+iC13X4VSejZelFa8tZFqhxe+n0d0Ht4U0O3dJEh0=
Subject key identifier:   D2:07:E9:8A:B8:6D:18:5E:58:F9:AC:F2:CB:A0:8C:40:DF:F1:EB:EE
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Certificate issuer:       /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial:       01A127679D2D5B7BDFDA53742FB8E9D67889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
Manifest number:          1A3E
Signing time:             Sat 10 Oct 2026 20:01:04 +0000
Manifest this update:     Sat 10 Oct 2026 20:01:04 +0000
Manifest next update:     Sun 11 Oct 2026 20:01:04 +0000
Files and hashes:         1: 0iH43Q4bdkgLbnsEHNM0XIwWQ5s.roa (hash: bxo9OIZoi8IN/fQL03vCLDxAyd4172KoQ8X8ciK25Oc=)
                          2: 1-GwXcfVzYR8Z7ckHLVToL1Uaqps.roa (hash: d7SmTyDFUP/oRw3phzJwlnO6V1d5N7DrOlrvStN61JU=)
                          3: 5IBvYreu6crx1ZEw8lgWXelcFW4.roa (hash: QsG1NiQkvSH7jCRwmv7r4phufcd3rAtf4NV7t9+hYtM=)
                          4: 6ItGULV6j8ktSiDJcisut4L2uv8.roa (hash: AVoyJJSbMIzWkWm7Zhb8Q8AM52J+C55gsBmt2DwDqHk=)
                          5: 7VcC4DMXIHbrZKPirD4v2PDxiTo.roa (hash: 1QvS1I6O1u7fOlkBKmW3HFU8tJj8BM1PL1GfKM5aNaI=)
                          6: 8azUINAdDrKjSOMgy-JPOT73XRM.roa (hash: ujWoSRBeAyaw5GwOHCWfKYVzWmHFO3uF5hNtrQu6Teg=)
                          7: ICrizZHzQ_4dOTzG5RjrMi2g3qE.roa (hash: 383sYSfBGHsf/cXc3Wodn3yKNQGJap1/pbI6fLtIstw=)
                          8: MDe6C8qEncFJW9Z_5GGUf8-NnXw.roa (hash: rK/554OfUglfPeqEoYZ9XaLl/qaRXFUHRWwU799kKDU=)
                          9: NN_M5XXnWkCmh6vokLB7v_qCgCE.roa (hash: fSLTWX8QP7uRT9K9w9UbhnW/7NpDslXCtNNC73VVI+g=)
                          10: Sl7-Gj6EnnbA3uXupRaztTXD_io.roa (hash: fezcKvQQu+h2ziI78m9/Di/EMv2lyq3BEYWNcQA5EA8=)
                          11: UgUlbA4Ymig1Dt7HwmQu6F99hKM.roa (hash: f9lP8pXxVTYPvjjr2VNmvzkO+lSuR++Kin/e+V01V5k=)
                          12: Uqw9Dlmoq1jySYJ2AjzEpmjf6Dw.roa (hash: Yj3I6/Qycmom0mdi7MnamZ5gOAsgybPCnXXKUt6eniM=)
                          13: dtGYKYc-L-yIv33hN65J3E-xajc.roa (hash: HGuRzP1yH6WASdpAyJlfci6458TQEkYZy6WuynkrmB8=)
                          14: e8VFBmIKoirMo9GQsY0TjoYVOaQ.roa (hash: GwJtd77us9EwOJjzXsDviq2QYdc35X858cXyCikITTk=)
                          15: fRSfYkR4U2icEvsoiv62toHP68E.crl (hash: sTKt9RLpA0El8C3T8EX4fxKnYJhw6zm9tslT1rQMH54=)
                          16: j8jqNDQZMqmi7QKl4s3v-vmRycc.roa (hash: EOZ1DSZzBL0cAYGwCaI3yGpoFvzn4nYkcA9KkiSGjio=)
                          17: nckzlZzEmCkRBssdIu4EBS5Mv74.roa (hash: eV7W/koRLQxtO7S8b9s+wve0BYE3rm3ca63LW1DOzxw=)
                          18: r11bcGJRp0vPeBHIlqtpRP8IAAg.roa (hash: sb2qptKF/F0Q5JMW4wFNUPyIiMZdlTEVq8ycqVtpVEw=)
                          19: r5WbEYryreML_gv4nbiLlHvTaeA.roa (hash: uF2RIp4vxohK6Rz9mwYK0ndrhtKPrP+zSBBfTaChG2o=)
                          20: xUsfdtgD1j1T7j6n66HdbJOfPDs.roa (hash: U4IhStPfUvQ+RWTW7WTK40Ox8axplO5trMxYdWn3hz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:27:67:9d:2d:5b:7b:df:da:53:74:2f:b8:e9:d6:78:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
        Validity
            Not Before: Oct 10 20:01:04 2026 GMT
            Not After : Oct 11 20:01:04 2026 GMT
        Subject: CN=d207e98ab86d185e58f9acf2cba08c40dff1ebee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a0:b3:ca:3e:6e:fa:7b:14:64:b7:d8:81:59:
                    02:dc:b1:f0:f7:1c:6c:84:d0:fa:24:af:c6:43:d1:
                    9e:71:7d:d2:e6:72:a3:2a:fb:19:24:3a:4c:93:2f:
                    2d:2b:57:91:e9:5d:2b:80:ba:97:ae:5f:72:13:0a:
                    06:36:f0:2f:b5:94:c2:e5:2a:16:7d:60:47:09:31:
                    65:86:a6:82:60:af:c8:81:12:1f:18:37:10:24:d3:
                    97:f6:ea:73:64:f4:1e:49:9e:62:d9:2a:6d:58:d9:
                    5b:4d:88:41:32:14:a9:66:7a:11:d9:02:39:3b:92:
                    05:6c:13:e8:81:ba:aa:f3:84:61:44:98:6d:27:72:
                    fc:c6:6f:e1:80:46:82:04:74:56:1a:5f:98:ca:97:
                    a6:8e:f0:7b:76:69:0e:e0:a6:92:d6:cf:fd:5d:c0:
                    c5:47:ab:29:cd:72:11:94:bb:75:c8:8c:e1:8d:6a:
                    10:2b:7a:99:d6:60:55:da:47:41:96:65:3c:38:d6:
                    e0:d0:b9:23:24:d9:9a:10:cc:99:eb:da:2a:79:d4:
                    84:dc:19:99:d8:79:1d:1b:7d:63:51:66:75:d2:d0:
                    5a:4b:bd:08:58:08:c3:fb:30:95:dc:5b:84:c3:9f:
                    7b:0d:3e:1b:ee:ab:c1:67:b3:33:ce:c3:48:bf:ca:
                    28:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:07:E9:8A:B8:6D:18:5E:58:F9:AC:F2:CB:A0:8C:40:DF:F1:EB:EE
            X509v3 Authority Key Identifier:
                keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f8:1e:dc:7b:b6:33:5f:cf:46:3a:ed:64:11:eb:55:a1:3e:
         cd:f9:c5:f0:b9:c2:96:b8:3e:e6:87:3a:ee:a4:e8:48:96:f2:
         c7:db:52:4b:a4:0a:d5:f2:43:8e:a2:39:fd:33:59:e8:ac:b6:
         f6:4b:18:7b:81:ed:52:54:73:df:69:b7:9c:02:e5:f8:7c:6c:
         52:67:78:49:f0:3b:06:49:a3:a0:ba:11:20:b2:d5:c9:a5:13:
         cd:53:ca:db:69:46:12:ca:e5:4f:33:ef:21:af:60:33:a9:a8:
         72:90:8e:94:8f:34:cd:df:c6:54:c2:3d:b7:06:99:72:d8:5c:
         c6:fa:f9:41:7b:49:14:6f:31:02:5d:d3:59:27:84:5a:0b:ea:
         b1:d7:fe:9a:99:7c:26:92:b0:d6:6f:03:cb:75:ab:ae:07:07:
         b3:c9:cd:e8:d0:76:db:61:5b:cf:36:ff:95:2f:1c:f0:fa:dc:
         d8:3e:b0:8b:08:4e:62:68:5b:33:0a:75:42:e2:ad:58:ef:ef:
         a8:4e:d5:01:10:51:94:2d:f6:6f:af:8c:90:cd:9a:58:e8:d2:
         fe:fb:0d:19:3f:7c:25:88:1a:ea:39:36:c1:d6:0e:c1:be:81:
         2d:01:f2:88:39:89:5c:b6:1d:53:26:eb:cb:f4:fc:bc:29:6a:
         c2:78:1f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:18:37 2026 by rpki-client