Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
File:                     fUFb7iIlhfLRqvv_unlQMaRRKcc.mft (raw, json)
Hash identifier:          zb9OTL3M0yqe/NbKxKhJfo9UyPRU5Q9rtHS21zoaChY=
Subject key identifier:   51:FE:F7:CF:03:37:90:3C:63:87:31:45:A5:B5:EF:7A:F5:EC:1B:42
Authority key identifier: 7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7
Certificate issuer:       /CN=7d415bee222585f2d1aafbffba795031a45129c7
Certificate serial:       01A1773A24E1A8F505E76FD4574F7DA9F6F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
Manifest number:          03C9
Signing time:             Mon 26 Oct 2026 08:01:01 +0000
Manifest this update:     Mon 26 Oct 2026 08:01:01 +0000
Manifest next update:     Tue 27 Oct 2026 08:01:01 +0000
Files and hashes:         1: EpAV40Ub4Qhm2LrtJvF107eivE0.roa (hash: yMZ2WZA3sacKoy7tu2K5tKAGLGICOq7tZTEgNmenhaU=)
                          2: fUFb7iIlhfLRqvv_unlQMaRRKcc.crl (hash: ATm3944EbUnyqPu3fBDKI2spUo647LhKwUaddkt/jfc=)
                          3: rC6ulvU3Zg_g39MeOF_ZvCppV2g.asa (hash: BruTtkjjLZsZi4EaSPbqrz1TiQ0329ngvDzlxTQIcWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:77:3a:24:e1:a8:f5:05:e7:6f:d4:57:4f:7d:a9:f6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d415bee222585f2d1aafbffba795031a45129c7
        Validity
            Not Before: Oct 26 08:01:01 2026 GMT
            Not After : Oct 27 08:01:01 2026 GMT
        Subject: CN=51fef7cf0337903c63873145a5b5ef7af5ec1b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2a:df:8d:82:0b:29:a9:47:23:7e:92:32:a7:
                    1b:43:6c:b5:71:6c:ad:61:23:fb:46:9c:3f:de:b1:
                    88:71:ff:d8:45:4f:75:5e:b7:07:64:3a:8f:16:86:
                    b5:3f:81:4d:dd:20:08:b4:b6:aa:b6:5f:c9:6f:9d:
                    d4:c3:57:c6:6a:da:fd:2e:36:e9:8c:c6:03:e9:4f:
                    4d:46:58:a4:c8:4e:0d:38:dc:21:a8:dc:fa:09:26:
                    1d:05:78:07:dc:39:85:01:0a:f8:2a:1a:5f:98:d9:
                    a9:c2:16:d5:29:94:45:fa:45:32:a3:20:16:ab:52:
                    40:6c:95:e6:89:b8:3e:ad:f5:00:4d:ee:41:a0:4e:
                    63:91:c9:26:7d:6d:3f:7c:ad:b8:a9:a3:fa:3b:63:
                    85:78:7a:a1:48:72:2b:e8:06:f6:3b:0a:46:e5:e1:
                    ff:18:92:fb:6d:0f:42:09:88:27:de:59:85:e7:30:
                    00:2e:d9:ac:a7:29:e9:15:2a:e9:f1:b4:6e:8f:0f:
                    22:9b:9d:f5:00:6f:df:95:28:36:ce:01:03:4b:71:
                    21:c7:d5:87:6f:6f:d5:cf:aa:42:f9:f9:66:43:46:
                    4a:56:51:8e:14:67:11:12:c6:1f:d5:07:4d:db:13:
                    57:9c:f7:57:67:fd:5e:af:91:78:ef:d4:a0:cf:9e:
                    a6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FE:F7:CF:03:37:90:3C:63:87:31:45:A5:B5:EF:7A:F5:EC:1B:42
            X509v3 Authority Key Identifier:
                keyid:7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d7:86:04:fd:01:37:a6:01:85:7c:3e:ab:ff:3d:f9:a9:de:
         b3:3a:0c:bf:00:b8:2b:bb:40:2d:19:9e:22:f6:6c:18:35:d8:
         1d:49:31:36:67:09:4e:ea:86:a1:7b:8b:79:80:24:a8:03:e9:
         58:dc:84:12:08:a9:bd:e3:37:8a:8b:79:b7:6b:d0:39:e0:b1:
         d0:ae:46:97:aa:a0:68:d9:a6:5b:b5:19:e6:45:3b:ee:f2:38:
         fc:7f:46:55:90:62:31:12:99:75:7e:97:d7:4f:a1:9d:b6:6e:
         73:a8:e4:5f:20:a4:57:72:3d:19:15:92:b7:62:52:ba:f8:0e:
         b7:49:da:cf:0e:85:34:48:91:49:e6:3c:ce:8f:aa:fd:1e:bc:
         90:ed:10:0a:d4:ca:00:29:e2:53:76:f1:9b:8c:c3:f6:db:54:
         fd:8b:03:40:60:76:03:ca:1b:ff:1b:f8:a8:b3:69:34:7a:53:
         dc:98:16:16:80:27:d0:dd:25:ff:bf:6b:1a:a9:86:21:f5:49:
         87:4e:23:00:80:fd:20:b6:20:74:92:4a:ae:df:ba:b8:44:2c:
         2a:eb:c4:b3:5e:05:ad:08:41:39:d0:02:ca:6c:39:a9:99:91:
         3c:22:e0:b6:8b:58:44:c7:2b:bd:61:90:aa:b8:36:e0:77:e6:
         02:41:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:49:04 2026 by rpki-client