Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
File:                     yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft (raw, json)
Hash identifier:          IEC1349P1/fUZ6pCXgHsz/VTGYMZJjzjNsAqaxcQTnQ=
Subject key identifier:   82:C1:F1:17:72:D2:46:F4:80:E0:67:EC:1E:D4:5D:02:46:C8:17:EB
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Certificate issuer:       /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial:       01A132FE28DE4877C37FDE43133E707D01F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
Manifest number:          17FD
Signing time:             Tue 13 Oct 2026 02:01:19 +0000
Manifest this update:     Tue 13 Oct 2026 02:01:19 +0000
Manifest next update:     Wed 14 Oct 2026 02:01:19 +0000
Files and hashes:         1: 2Rt9Gwr4sjkr8DA_k8J0_h0v0S4.roa (hash: tqZC3K8qhKl5fCuSFTCvvWh/uoUIwg2YeD8aanIXDKI=)
                          2: G6JvpqCYvPpC7VM1ZZPSfJgdNhc.roa (hash: D1iE+lUItdHWGUL+J972PCDTzMoGyX6bUifXJiUpjwY=)
                          3: ivio5KeVWRux6XlRxWuFL231juo.roa (hash: Em/PVIA83JxuedRO9ip2PoK/WCsTEwUOVUS8akfMdh8=)
                          4: lUtDTycr7tmHl8som-NIOGSL4hQ.roa (hash: bob91L00C+zBJmnNvfIjHOpV1SfQVQs/iVPuHdwEzf0=)
                          5: tWOuO39d71f5m4fAGnZWNgBEmoQ.roa (hash: 9CQk4BPxr4B6xZlS3j9hWqhPr4OQvnm1ZyCmYYoOxCM=)
                          6: yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl (hash: mMtGAU46I1J6rw/01rAsIvvEWZdAZQY4ZgdUokbx37M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 02:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:fe:28:de:48:77:c3:7f:de:43:13:3e:70:7d:01:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
        Validity
            Not Before: Oct 13 02:01:19 2026 GMT
            Not After : Oct 14 02:01:19 2026 GMT
        Subject: CN=82c1f11772d246f480e067ec1ed45d0246c817eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:8c:ed:3e:5e:d4:94:e1:a8:43:dc:2e:b9:
                    9b:ad:59:09:30:5e:ae:e6:39:f8:42:6c:10:54:a7:
                    59:fa:8d:9c:e6:99:61:0b:c1:a3:01:49:52:0c:ca:
                    3f:49:5c:a9:b0:b0:d8:9d:b7:c6:ee:f4:a6:4b:14:
                    44:7d:20:d7:a8:13:3b:ab:9b:ea:96:0f:f5:d4:fc:
                    d8:6a:bd:38:a0:c4:27:88:ec:66:1d:26:96:7b:5e:
                    fa:d6:d1:ac:0e:f4:c6:cf:11:8c:ec:5c:a3:83:e4:
                    b6:71:be:20:41:e5:cc:23:3d:9b:66:b3:2a:6d:1e:
                    9e:12:9f:8a:54:1a:e2:d4:0d:12:d7:7f:21:08:71:
                    ca:5d:3d:e2:d6:f8:83:2f:ec:1e:a6:6d:7f:48:f9:
                    46:43:05:95:88:b3:73:f1:14:45:80:ef:ea:46:12:
                    b9:74:6f:10:78:0c:8f:41:9d:72:6f:f6:91:39:15:
                    89:a1:5f:38:49:78:66:31:99:76:fd:60:16:e1:b6:
                    8f:bd:eb:21:ff:b1:a6:8f:39:58:d8:0e:88:7b:01:
                    54:c8:84:67:3a:c5:c4:ce:16:9f:9c:98:9f:f2:37:
                    86:d8:09:8b:c7:5c:28:85:69:0d:2e:2d:e7:b6:f4:
                    de:ca:a1:2f:0b:a3:86:71:66:06:5b:ba:c5:7a:aa:
                    33:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C1:F1:17:72:D2:46:F4:80:E0:67:EC:1E:D4:5D:02:46:C8:17:EB
            X509v3 Authority Key Identifier:
                keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:46:57:8b:47:70:94:81:a1:90:68:49:00:2b:a4:ad:4d:b5:
         77:ba:a8:8b:5d:05:cc:78:7d:2b:64:dd:af:8f:21:c5:20:8b:
         f4:74:f1:d4:1f:25:55:f4:d5:c6:e9:9b:68:9d:50:ca:a1:c0:
         ef:69:0a:09:47:14:03:93:12:f1:41:d9:da:51:35:8c:f0:31:
         32:67:ec:86:34:f2:fe:3b:bc:f8:c6:6a:cf:11:bf:b3:8d:e3:
         44:8a:cf:4f:23:e1:71:7b:d5:50:63:ab:a7:67:57:e7:8e:e8:
         f5:50:38:36:a1:91:e9:66:e6:07:a8:5f:16:8d:25:37:b9:27:
         92:31:2b:cd:09:0e:cb:7f:d4:5e:1c:f0:e9:05:67:0c:8c:65:
         66:9b:f0:95:e8:02:dc:bc:97:8a:d3:bc:c0:6b:53:c8:0e:59:
         39:ff:96:32:53:c5:47:b9:84:1f:16:e0:66:94:3d:a8:2c:f8:
         4b:00:80:0c:4f:a9:df:a5:8d:87:15:54:db:3c:85:a2:a4:0e:
         3d:79:0f:cf:00:06:ea:52:d5:16:0f:5c:8e:4b:7e:4e:65:b6:
         b6:fa:a1:f9:b9:17:33:61:fe:b1:5e:8d:ba:81:05:46:36:26:
         83:9a:cf:9d:d4:0b:4c:82:9f:05:f7:d7:c1:94:32:dc:b7:45:
         8d:c4:53:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:49:52 2026 by rpki-client