Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File:                     1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier:          zXwrXv8pGwKIGsaHipw45kDeCcgnUwhbBP8ICEu3IJ8=
Subject key identifier:   8A:B3:DB:6F:E0:5B:A3:7B:F9:1A:2C:D9:58:DE:77:05:21:50:12:E9
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer:       /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial:       01A13E94C63187B2ECD2660CF26CC404A525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number:          06A6
Signing time:             Thu 15 Oct 2026 08:01:39 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:39 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:39 +0000
Files and hashes:         1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: r6+x0MyZRPRNTYLCOMxHW7wz00TrMUHmA+3kjigech8=)
                          2: J1pVACF6PeMRaHASpAzEk72R1og.roa (hash: w+tfbD6b+VC1EgseTOng/yA5kapR5uE7759IAX7+VLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:c6:31:87:b2:ec:d2:66:0c:f2:6c:c4:04:a5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
        Validity
            Not Before: Oct 15 08:01:39 2026 GMT
            Not After : Oct 16 08:01:39 2026 GMT
        Subject: CN=8ab3db6fe05ba37bf91a2cd958de7705215012e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:29:50:85:5e:76:07:1a:dc:83:84:57:49:
                    8a:0a:6c:5e:2e:da:dd:af:35:29:20:29:d8:aa:07:
                    80:0e:39:6e:03:bc:9f:08:f8:7a:fd:d7:59:12:1d:
                    7d:90:a9:28:fe:cd:05:20:1b:06:f2:d1:9a:3e:95:
                    5d:00:99:4d:66:cc:cf:d8:13:56:f4:1e:cd:35:9e:
                    02:ec:32:a6:ef:7d:c0:8e:c5:72:2c:25:24:47:23:
                    b5:28:7b:f5:17:32:a5:9d:70:7e:fb:60:83:64:9b:
                    de:cb:b6:4e:17:28:b2:76:26:45:ad:31:82:80:8b:
                    7d:37:61:2e:b0:40:3c:43:1f:ce:3e:48:a7:92:bc:
                    60:2f:1a:dc:f1:71:11:4b:3b:45:93:46:cb:a2:d7:
                    ad:f7:76:d0:b5:95:47:aa:39:70:d3:14:0b:34:e7:
                    69:27:3f:61:6b:dd:fb:62:c5:5a:bb:af:e5:dd:db:
                    bc:a6:de:31:63:28:36:a7:59:8c:1a:27:9e:7a:0a:
                    24:ae:26:f8:a4:eb:ee:31:47:c4:ec:c7:85:13:ef:
                    db:4e:c9:66:e5:98:78:e9:00:30:07:0d:5c:52:c7:
                    15:c7:e1:1c:0c:ce:bd:b1:bc:13:d1:6a:65:68:f9:
                    22:2d:af:8c:1f:c0:6e:03:41:be:cd:10:ca:00:83:
                    af:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B3:DB:6F:E0:5B:A3:7B:F9:1A:2C:D9:58:DE:77:05:21:50:12:E9
            X509v3 Authority Key Identifier:
                keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a0:d6:a0:2c:cb:91:f9:4c:bd:81:c6:9e:43:73:64:93:cc:
         1e:5e:71:12:22:4a:16:57:95:67:b2:43:3f:45:70:9b:9e:ea:
         a7:07:dc:5d:fc:ff:df:7c:ff:e0:e4:c4:c4:e9:a7:c0:bf:26:
         0e:85:38:26:8b:fd:64:09:48:23:ea:c8:b1:dd:98:ac:e0:1d:
         92:af:98:b0:5b:90:ac:c4:dd:64:68:75:be:25:e2:5e:bc:e9:
         f1:54:47:14:95:7c:c9:8b:44:7c:ed:89:21:bd:c6:9c:f8:40:
         4a:a6:48:6f:ca:28:9c:31:2f:6e:c3:24:32:f6:9b:df:72:b2:
         b8:c3:c0:31:76:1a:70:24:21:0e:8e:cd:4f:81:42:ed:79:76:
         56:68:e1:f9:56:c1:68:42:a5:f6:30:77:20:42:c4:4e:94:c0:
         e5:71:47:4c:ef:5c:a5:9b:82:d1:10:f8:bb:30:ba:fb:7b:29:
         9a:72:40:d9:2e:66:11:d4:db:de:b7:66:30:15:9f:7b:f0:0e:
         d0:fa:a7:48:53:a7:7a:30:e3:2a:45:1a:75:34:59:6e:4d:4c:
         8c:f8:37:9b:1e:75:df:28:74:93:44:df:76:d3:d0:0f:94:f1:
         4b:66:95:a1:aa:4a:15:8e:a0:5d:7b:db:37:d5:bd:89:c6:ce:
         81:59:e0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:36 2026 by rpki-client