Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File:                     fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier:          1yqYCn6TLZbFhq/idRlbyrN0/7Y1BRNJ+R2RVLu9Ob4=
Subject key identifier:   C3:7D:85:2C:C7:FF:31:1A:83:C2:46:D9:EC:84:09:14:95:80:C9:0A
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer:       /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial:       01A1927A984D9420884A2D5A475A2D2A5514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number:          0A86
Signing time:             Sat 31 Oct 2026 15:01:10 +0000
Manifest this update:     Sat 31 Oct 2026 15:01:10 +0000
Manifest next update:     Sun 01 Nov 2026 15:01:10 +0000
Files and hashes:         1: JuhHdC_-wskYknvP7LIY1ggd8So.roa (hash: Qx3w+8OYL4pNm6xzXbZj9QOdHwp0WRkNESd9pe1uoik=)
                          2: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: I9FzA3DF2F8XJVdk+hu6v6524cXVntZpR9F7ChVCwz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:92:7a:98:4d:94:20:88:4a:2d:5a:47:5a:2d:2a:55:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
        Validity
            Not Before: Oct 31 15:01:10 2026 GMT
            Not After : Nov  1 15:01:10 2026 GMT
        Subject: CN=c37d852cc7ff311a83c246d9ec8409149580c90a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:0f:9f:e4:5b:7a:eb:68:b4:2d:92:14:53:
                    34:33:57:fa:fb:c3:73:76:01:06:71:25:8e:9e:c2:
                    01:10:0c:a7:e7:26:2a:10:84:e3:a9:3e:26:cb:3c:
                    fd:73:23:9c:83:48:c4:f5:e0:fc:35:2a:39:ad:f5:
                    ab:95:83:62:a5:2f:e0:39:e7:ba:85:96:f1:b6:88:
                    eb:e8:19:8e:e7:fe:70:d4:05:dc:37:c7:af:44:c6:
                    db:8d:b3:8f:cf:85:4c:19:22:23:ab:ac:97:f1:46:
                    b9:72:cb:01:96:4f:28:06:5c:77:49:d4:01:95:b1:
                    55:7f:0c:8e:68:ef:3f:2d:24:61:86:79:8d:34:b5:
                    94:48:f2:65:92:51:ea:c7:96:fd:d2:0d:c2:e2:59:
                    ac:b1:54:e8:2b:9b:57:4c:b9:32:95:ff:b4:13:ac:
                    31:cd:cf:75:4e:51:9c:ff:96:60:46:2d:a5:2c:b2:
                    65:33:97:37:88:82:eb:75:e3:62:36:f7:d6:4d:0c:
                    37:e4:a1:d3:f0:4d:53:81:92:56:9f:6a:d1:ec:ce:
                    16:d6:bf:a9:2f:21:d3:33:5f:d2:cb:9b:a9:72:50:
                    af:6a:e2:f6:dc:35:a0:4c:ff:6b:d3:b9:19:d4:a3:
                    da:df:41:c7:d7:f1:bf:70:ac:f9:95:8a:b3:91:4a:
                    82:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7D:85:2C:C7:FF:31:1A:83:C2:46:D9:EC:84:09:14:95:80:C9:0A
            X509v3 Authority Key Identifier:
                keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b1:07:85:e3:68:e0:6e:e1:55:50:ae:33:e3:bc:58:fa:da:
         20:fc:97:b8:be:e6:f6:ab:89:e5:9f:1e:c3:57:09:dc:e5:a4:
         02:d3:6d:aa:39:bc:33:10:e6:4a:eb:71:21:93:35:38:40:e5:
         84:ad:b7:7e:3a:9b:e1:0e:23:f1:c7:66:47:c6:99:49:c8:99:
         b0:8b:0b:15:ae:c2:0b:bb:9e:5a:6a:55:42:0f:15:99:f6:d7:
         c4:dc:04:da:09:6b:25:54:8a:88:a7:4f:e7:a1:f9:6d:d2:38:
         b0:d8:03:34:fd:bd:52:24:82:3a:58:d2:05:29:b0:f8:3e:d4:
         a6:c4:c5:e8:62:67:1e:d1:54:7b:db:97:f4:10:89:a5:6c:89:
         28:28:69:91:ae:e1:ce:83:f8:0c:9f:69:4e:56:40:6b:13:32:
         4d:4f:62:8a:90:5b:19:7f:0a:af:45:2b:76:49:44:9d:29:ca:
         7b:55:6a:4c:1d:a4:ec:d4:25:a6:d6:bf:90:5a:9b:60:23:ff:
         bc:2a:5f:7f:29:c7:76:49:b8:3b:74:fa:ad:1e:67:95:ae:a5:
         41:ac:68:cc:7a:f2:a1:89:4c:8c:c0:8b:1f:91:2b:42:ee:4f:
         0f:c4:49:49:a2:89:35:05:7e:ec:46:3c:b6:d9:34:1a:1a:16:
         68:a5:eb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:58 2026 by rpki-client