Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
File:                     fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft (raw, json)
Hash identifier:          nildxrNhT1g1bBtzyxPPGf+Fzrrp1Va2P5CCFVi9jM8=
Subject key identifier:   B2:0D:C7:C8:6A:A0:47:E0:03:CF:27:46:C1:15:F0:C9:C5:6A:EB:4E
Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
Certificate issuer:       /CN=7e3150f8c67063121027328954968d08d4cf329a
Certificate serial:       01A131EB316BB69F177C0404B28325A68A48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
Manifest number:          0538
Signing time:             Mon 12 Oct 2026 21:00:59 +0000
Manifest this update:     Mon 12 Oct 2026 21:00:59 +0000
Manifest next update:     Tue 13 Oct 2026 21:00:59 +0000
Files and hashes:         1: 1-jRYaUzINFrEnjfAdRPinSU_734.roa (hash: 3ooS3VmIZ0+eOUublxtT5ocb/PZYp04ILnN6aKePHuY=)
                          2: L3ziogpW32Oo5y9-j_O5Fw1MANc.roa (hash: 3NNkUrQRUGlsUPybkrxQu2Ta/Xn4K7RsuPJOAiCDs7o=)
                          3: YTidVoJ3o_e_tHyiulhdPBfY7Gk.roa (hash: M3PCGMQDK9b9yJ6Z4+VMcXEpqQGrsEFgiNapFNJuY8o=)
                          4: _vhX2x0MSW_lCM__SUwIoa5cOwM.roa (hash: RJcLvbkKer+dH4YPNNJOTYi3iU1xlbLYxn2gdUfEcwE=)
                          5: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl (hash: OQmKZT7vqqYoBEloq9P5RNU/rYhtoy5bFHLMVogfRzI=)
                          6: gAmFQhnqb3iPpVcDFRBYy6LTGVQ.roa (hash: q0DBQHQeo72WaD3xXDWqH5+bTdogOZU8lk6UJrMCqW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:eb:31:6b:b6:9f:17:7c:04:04:b2:83:25:a6:8a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a
        Validity
            Not Before: Oct 12 21:00:59 2026 GMT
            Not After : Oct 13 21:00:59 2026 GMT
        Subject: CN=b20dc7c86aa047e003cf2746c115f0c9c56aeb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:61:00:18:28:b0:ba:e9:43:57:6f:da:dd:fb:
                    7c:31:72:3f:70:bf:5d:5e:ce:7c:0f:46:82:68:49:
                    a1:45:72:db:38:90:70:c3:f6:df:00:36:b6:45:2b:
                    b6:db:0b:d4:c1:5c:28:d5:bf:0a:d1:a3:08:84:5f:
                    ef:2c:e1:f4:13:4e:49:0a:8f:d4:87:2c:63:aa:76:
                    5d:e4:92:b5:db:e0:4a:ae:4d:55:53:57:ce:d6:23:
                    6a:7c:c3:83:14:60:df:dc:1e:e0:e5:21:92:41:fa:
                    78:c5:cc:d0:43:ec:c7:64:e7:15:09:82:f4:4b:f8:
                    56:57:61:90:61:6e:69:b3:75:0c:7b:90:66:49:b4:
                    12:99:31:f8:95:6d:90:eb:df:da:95:e6:dd:ee:d0:
                    db:e7:77:3e:80:79:9a:04:db:7c:65:e5:da:48:1f:
                    9d:8c:dc:26:7a:e9:1a:c5:e8:09:ac:49:72:3d:db:
                    c9:ed:97:ba:c6:0f:2f:0e:69:a1:3a:e9:99:3c:29:
                    89:15:1b:19:95:53:d1:b8:85:3b:7a:22:ae:9d:00:
                    80:d9:77:c6:0d:d2:20:09:a1:bf:d0:e9:a3:eb:3b:
                    c4:0a:65:03:dc:02:e8:06:bd:a9:7e:de:85:84:cf:
                    8a:8e:eb:32:bf:f1:ae:0f:33:2d:fe:dd:bd:16:bc:
                    7a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0D:C7:C8:6A:A0:47:E0:03:CF:27:46:C1:15:F0:C9:C5:6A:EB:4E
            X509v3 Authority Key Identifier:
                keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:11:51:a5:75:5f:e1:45:0a:83:36:59:a3:7e:23:c6:1a:51:
         49:69:bd:1f:ac:29:0d:b0:25:e2:26:d1:63:ac:2d:7e:6d:33:
         03:d9:49:7b:0a:da:56:f9:60:7c:ff:71:d4:cf:6b:c9:3c:f3:
         79:1a:d9:5c:39:45:52:d0:20:92:d7:38:b9:1b:9d:db:3d:6a:
         53:82:45:a9:65:52:4b:10:07:7a:99:c5:46:37:d4:e0:5b:27:
         c9:69:52:7e:9e:57:af:15:7c:de:9b:9e:37:75:9b:83:87:70:
         ce:d7:b7:4f:9e:2d:6a:a2:57:65:ea:a5:a4:2a:51:c1:63:93:
         0a:ec:1d:70:54:b8:b5:23:9c:47:04:21:a1:74:3b:84:d1:4b:
         c5:ef:1b:8f:16:b6:cc:b6:18:77:69:6e:fe:dd:25:99:42:fe:
         ae:c9:1a:e6:d4:6f:bb:2b:49:4a:ba:a6:a4:0d:7c:8b:15:b2:
         6d:d6:b5:71:93:88:74:87:dc:4d:d5:d4:ba:15:e0:23:4b:68:
         58:9d:81:9d:8f:63:3d:41:37:45:06:f3:7d:ac:d5:f9:24:86:
         78:f2:08:7d:b3:0e:8f:bd:69:f9:5b:3f:fb:6e:08:10:6e:81:
         fd:3b:74:d0:11:2d:ed:75:49:66:b7:a3:dd:bd:96:69:99:4b:
         20:93:98:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:59:45 2026 by rpki-client