Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
File:                     Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft (raw, json)
Hash identifier:          pnVR8HWZiXrwCiXWnxnyc8OYhYV8MvJgqoAhCFuBdnI=
Subject key identifier:   44:A5:3F:43:49:BE:63:BD:04:F3:F5:79:23:1E:2F:04:04:82:CC:76
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Certificate issuer:       /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial:       01A1532DB4476ACAE1FB07054CB729DEE584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
Manifest number:          17FC
Signing time:             Mon 19 Oct 2026 08:01:06 +0000
Manifest this update:     Mon 19 Oct 2026 08:01:06 +0000
Manifest next update:     Tue 20 Oct 2026 08:01:06 +0000
Files and hashes:         1: AE9Lfl-4UbNnNijYfCBA7Dotnk0.roa (hash: 4272KJRiaDFrIJ1v9/e6Ri/6Hq4jjOw6FRmI0faWzNk=)
                          2: AjYgA83fEMBqjUVh5HogDvcF4y8.roa (hash: HmdReTlwO7q9dM9EymrF4uah3KgbjfgTzrb6znj83rY=)
                          3: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl (hash: ZyAANXI1YEi7GHlD4Nb2Ld2jExI9rHwYTzZW+68LSFo=)
                          4: Un6YiMPdPmnXJEAfLjnF4ejn4-U.roa (hash: Vvj30zXhMxPg9hIHuIBZfVJuw/gM4ZcLB86Kjx9twm4=)
                          5: UziBeF9vZhF9BgfMO9asPeRvxQs.roa (hash: b93bcZj29ys10OmZ+k4Z6n8bU3xxStbAH0qnq54JvrM=)
                          6: XRdK0Q38L08ZiH0X_7usVjWgOqU.roa (hash: NUYv2BvkNVVgRi3KArH9hMTA+2Ow1tmbVRQjMS4xPYw=)
                          7: kHpTZdJdGSTy5cL36tdDAiifHMM.roa (hash: t+ZN1J9Tad6u02+/g5NMqtaDNj7REzYTAjeN7U4LYyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 08:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:53:2d:b4:47:6a:ca:e1:fb:07:05:4c:b7:29:de:e5:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
        Validity
            Not Before: Oct 19 08:01:06 2026 GMT
            Not After : Oct 20 08:01:06 2026 GMT
        Subject: CN=44a53f4349be63bd04f3f579231e2f040482cc76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:30:87:0f:a7:9a:ef:d5:9c:85:c8:ca:f7:
                    cc:ea:38:01:6b:01:b5:7c:14:fb:af:3e:25:5e:ee:
                    43:8f:2c:b2:20:30:bd:2d:2c:33:fc:99:fe:ca:90:
                    45:55:f5:92:29:f2:9d:95:20:56:31:51:67:df:27:
                    f7:bb:5b:78:2d:ca:f4:84:94:7c:8c:05:f2:ee:3e:
                    b5:24:1e:5c:fb:47:d8:a3:bc:04:bc:f1:1e:23:fa:
                    5a:fa:65:13:f2:df:e1:47:60:b9:8b:b8:42:9b:97:
                    a0:01:7e:e9:0c:a7:35:29:9e:59:57:06:4b:77:8a:
                    62:01:14:d6:15:4f:e3:f3:84:90:5e:75:15:5d:05:
                    2d:b2:df:85:5c:1c:7d:d8:65:94:3f:d9:ba:39:09:
                    da:59:4a:64:b9:2a:8b:f2:5d:ea:31:9f:36:54:fb:
                    cd:69:a0:eb:96:b6:41:43:b1:dc:bc:b5:35:bb:5d:
                    95:30:34:ae:63:6e:0e:23:de:d8:80:61:f1:4f:14:
                    f0:4b:e8:44:96:8b:a6:a8:f1:e5:42:8d:a0:c7:65:
                    5e:78:dd:56:1f:81:e1:c3:98:4b:6d:a0:94:ca:45:
                    87:e1:64:57:70:4e:19:92:a4:16:1b:f1:24:05:d3:
                    f3:d7:bb:ac:b9:ff:7c:ee:5f:87:e1:ad:4c:3b:4a:
                    6e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A5:3F:43:49:BE:63:BD:04:F3:F5:79:23:1E:2F:04:04:82:CC:76
            X509v3 Authority Key Identifier:
                keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c4:8c:05:eb:85:30:c0:07:23:57:7c:00:25:4e:ca:16:d2:
         e2:50:48:eb:d5:7c:0c:5a:63:00:38:15:18:69:be:0e:b9:64:
         f5:f4:df:a8:ab:e6:e7:d9:73:23:dc:70:7e:45:2f:76:00:13:
         39:6b:21:1a:6c:20:29:c2:61:c7:d6:60:4c:67:d6:3a:c0:68:
         b8:8c:fb:ba:35:1c:90:79:31:61:9b:a8:f5:84:52:d9:44:51:
         27:2f:c4:64:a5:e8:17:ad:e1:e4:a6:2f:17:1a:c8:d7:fd:bc:
         d9:7e:ec:10:1e:7b:3c:3f:30:4a:a1:0c:52:b8:d7:5b:93:72:
         65:29:4d:55:48:34:2b:04:51:fc:c0:12:ae:4d:05:bf:d6:c9:
         0e:c4:0b:19:dc:dd:19:49:97:6e:66:35:f4:1f:e2:d3:73:82:
         fb:c1:d1:c9:5a:6a:cb:3e:96:53:ba:73:ab:4a:60:2f:98:14:
         56:26:1a:56:ef:2a:39:44:47:f4:e3:b1:35:03:5f:4a:a1:15:
         0c:b1:9a:88:de:0c:70:52:4d:10:ca:f5:aa:ed:13:0e:4c:0f:
         cb:6e:16:6d:6c:49:15:df:ad:59:a7:51:c9:ec:f9:1b:35:fe:
         47:a5:94:df:56:d8:fa:1d:95:18:7b:48:3a:e6:c5:5e:36:66:
         3d:c7:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:43:51 2026 by rpki-client