Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
File:                     FTCm61I5adqSyIRMDftA7YIL1sQ.mft (raw, json)
Hash identifier:          tkNKx2UvqVsuYeuDoVXu3kQasDWjGq4PjxANNRudBZg=
Subject key identifier:   4F:B5:3F:F2:E6:53:CC:4D:B9:C5:FB:36:80:9C:D5:2B:80:11:B4:C5
Authority key identifier: 15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4
Certificate issuer:       /CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
Certificate serial:       01A17E4ED40BCB581461ED0F56F79ADE0E2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
Manifest number:          10C2
Signing time:             Tue 27 Oct 2026 17:00:57 +0000
Manifest this update:     Tue 27 Oct 2026 17:00:57 +0000
Manifest next update:     Wed 28 Oct 2026 17:00:57 +0000
Files and hashes:         1: FTCm61I5adqSyIRMDftA7YIL1sQ.crl (hash: D3pwkCMkYFxnvR/naecZ8QVhn88foGj2WTGlh9drDAg=)
                          2: i1ntvJBaezDHPAZpp8Y-JI_0JNA.roa (hash: bf8Yh8/U34LlJItn2Vcebf7126J5F9Ajxt2zbhlA70Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:4e:d4:0b:cb:58:14:61:ed:0f:56:f7:9a:de:0e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
        Validity
            Not Before: Oct 27 17:00:57 2026 GMT
            Not After : Oct 28 17:00:57 2026 GMT
        Subject: CN=4fb53ff2e653cc4db9c5fb36809cd52b8011b4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d2:5c:46:c2:fc:9f:01:32:67:87:ae:93:58:
                    62:a0:b1:ab:8c:f9:6b:2e:a5:9c:f1:39:85:55:3e:
                    f4:91:d0:61:6c:da:c5:52:02:f1:35:6b:47:3e:3d:
                    f1:67:08:95:88:a6:99:bb:c2:93:03:d9:86:b9:e4:
                    2c:0a:c5:e0:16:6a:f5:72:fc:8b:75:9c:cf:8c:e6:
                    28:bd:e1:2b:6e:39:59:00:36:ce:59:f6:db:53:0d:
                    a3:de:89:10:61:7c:1c:69:57:7d:29:3e:ac:4c:aa:
                    be:1f:7a:47:7d:93:e0:67:4f:1f:1b:f2:59:d8:d5:
                    b5:5a:7f:67:0e:3b:a3:f9:dd:89:1d:1b:d5:9c:44:
                    a3:83:b1:ef:43:9c:45:4f:e6:c7:2e:21:4d:46:9e:
                    08:48:a8:2d:fb:3c:3c:1d:41:58:34:4e:e2:5f:8f:
                    31:2e:c9:c7:fd:cb:b9:c3:6b:1a:b9:3f:fa:a3:56:
                    33:48:3e:be:2d:03:0c:6e:db:bd:b0:fb:d7:77:55:
                    b5:20:85:45:61:dc:bb:3d:5e:d5:4d:ee:63:db:02:
                    d8:2e:06:b8:06:76:bd:53:59:23:d5:1f:4f:30:a1:
                    40:1d:33:0d:d7:1e:b8:52:fb:e7:34:8d:aa:4d:62:
                    c2:b6:0a:b0:f2:b4:04:2a:5e:2d:f2:6c:22:7b:f7:
                    2d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B5:3F:F2:E6:53:CC:4D:B9:C5:FB:36:80:9C:D5:2B:80:11:B4:C5
            X509v3 Authority Key Identifier:
                keyid:15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f9:8c:c6:64:98:4e:2d:40:7b:49:ad:d8:4b:4c:8e:4b:5b:
         ee:71:15:45:59:7f:c4:cb:09:65:e1:3a:42:75:5b:c4:cb:d5:
         a0:fa:a7:1a:58:7d:f9:c6:71:9a:67:96:bf:f3:4b:62:8c:57:
         b6:0e:e4:95:3a:30:6a:8c:87:28:ff:ac:0b:78:5f:2b:51:50:
         c3:b5:48:32:82:2d:70:58:a3:d6:d1:9d:32:ff:23:e8:17:73:
         1a:17:32:57:cf:88:c1:56:cb:57:d8:e0:ea:c3:45:23:a0:7d:
         04:fd:aa:c6:5b:a5:bb:c0:95:e4:a6:b6:62:82:e7:37:a5:b4:
         45:4b:10:a8:96:ec:92:95:9d:f3:0c:84:20:8f:15:88:02:48:
         d2:aa:76:e5:a9:a0:ad:0c:7c:dd:4f:9f:3e:95:76:a3:b8:75:
         47:1d:67:95:09:84:aa:f0:0b:f7:4e:65:64:8c:77:70:6f:46:
         76:f8:23:bd:74:25:ea:13:c1:99:47:ca:6c:f5:7a:24:46:3d:
         88:ca:f3:f6:6a:a2:d0:40:e7:d9:e5:44:fd:91:8a:0d:ad:fa:
         74:0e:df:6c:d7:70:57:79:e7:0d:7b:3a:a4:fb:87:75:92:54:
         2e:2e:c7:ae:f4:61:01:b8:33:1b:cf:59:da:27:bb:d5:49:9a:
         b0:a9:26:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:26:30 2026 by rpki-client