Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File:                     fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier:          lELBsKCDCs8/VXf1Q9cwQS/XMJRhHMKeEbDXp/ZjWjw=
Subject key identifier:   93:A1:36:D3:28:44:00:BE:1A:CF:B9:A3:5D:A2:C3:20:BE:4F:A7:1B
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer:       /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial:       01A19656D414FBF4262612B2760A990BE141
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number:          0A7E
Signing time:             Sun 01 Nov 2026 09:00:35 +0000
Manifest this update:     Sun 01 Nov 2026 09:00:35 +0000
Manifest next update:     Mon 02 Nov 2026 09:00:35 +0000
Files and hashes:         1: 7oxbulzY2boNaAxovnlWeEdnhvk.roa (hash: uX0ykLCKBF2SBolWYgvfJLXxPgVn9j68zHuR3GSzDLo=)
                          2: ImYdN1r7SuqmH4KCOghmFfGT43A.roa (hash: C3iHTDptRbcDAgsUC9QRyc1MkBmaJjNlKZ93XUJOKLw=)
                          3: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: oUwXX5zR90QhD+JjvyyW/frxSpx+D6ajCMB/oroNTug=)
                          4: mmK4BcjEIajvATTw8BCsnASXF-E.roa (hash: n3pCENYT8mZdK4x4Xmug43GNcd+EWFtMNaK1ThGL1zg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Nov 2026 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:96:56:d4:14:fb:f4:26:26:12:b2:76:0a:99:0b:e1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
        Validity
            Not Before: Nov  1 09:00:35 2026 GMT
            Not After : Nov  2 09:00:35 2026 GMT
        Subject: CN=93a136d3284400be1acfb9a35da2c320be4fa71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:98:f1:62:c1:2d:81:b9:8d:e7:ab:3f:e3:59:
                    d2:5d:59:d1:a5:5b:fe:79:2d:21:b2:da:70:1f:2f:
                    e0:e1:2e:96:bb:4c:ab:da:eb:00:d7:1d:30:ed:a0:
                    d2:ae:ee:a6:87:7f:1b:bd:2f:f8:80:b9:08:d0:76:
                    3b:73:05:02:48:50:14:42:58:44:63:7b:c8:0e:52:
                    de:1c:e0:d8:68:c3:83:bb:00:0e:34:a7:5e:c0:7b:
                    a2:c1:40:73:7c:68:64:5d:0c:a3:4a:3f:a1:c3:f6:
                    c4:45:b1:09:6e:ca:6f:66:a9:d2:20:c1:01:18:6d:
                    1e:31:0d:4a:58:b6:c3:61:b6:34:37:eb:79:eb:be:
                    6d:06:98:50:3c:b8:54:29:09:d7:5b:4f:38:91:f3:
                    4c:8e:5c:4c:a4:57:c2:2f:97:a1:49:be:f6:11:cb:
                    98:5b:62:9b:ad:fe:d3:a9:50:30:f7:76:54:8c:41:
                    b6:48:b1:32:07:31:29:48:03:8a:4b:fe:ff:ea:b3:
                    00:39:e2:2e:31:cb:54:fc:5f:2c:ce:61:f5:b3:75:
                    c9:ba:b9:35:b2:f8:c9:73:ac:d6:24:1b:f9:ea:d0:
                    d0:0e:04:5b:f4:22:9a:be:70:68:bb:7c:75:62:6a:
                    6d:04:78:ec:b5:0e:e3:46:5b:33:07:fb:7c:9c:90:
                    bd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A1:36:D3:28:44:00:BE:1A:CF:B9:A3:5D:A2:C3:20:BE:4F:A7:1B
            X509v3 Authority Key Identifier:
                keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8c:6b:db:6e:f3:e3:18:52:cb:e2:47:d8:88:c8:09:a4:07:
         4d:7e:85:90:75:d0:c7:66:b1:7d:44:75:22:36:5e:01:79:fe:
         61:68:e3:d7:db:aa:d2:8f:81:dc:68:db:33:31:d0:13:ac:34:
         bc:cb:b2:5e:76:84:23:74:e2:ce:75:db:ec:46:45:72:f2:f2:
         51:ba:49:5d:b1:18:58:c1:d7:f4:68:ef:65:db:33:21:9d:80:
         37:f2:80:9d:d7:8e:0a:05:01:9a:dc:33:ed:fd:38:ff:9a:65:
         d0:31:17:a5:45:89:3b:a2:8f:23:0b:0c:85:7e:11:9e:0e:5d:
         1a:b1:66:1f:b6:ec:52:9f:de:58:bc:53:0b:30:a2:d5:56:0d:
         16:5a:21:94:74:95:a8:18:d0:84:0b:f0:f9:f0:7b:9a:5e:58:
         64:d4:ad:7a:e2:03:9d:ff:ac:96:25:1e:a5:31:f3:d3:28:20:
         f9:9f:ad:35:ff:a5:24:13:01:6e:35:24:6d:b6:4c:1a:00:da:
         21:97:12:19:e6:f4:21:df:e0:6b:fb:46:cb:bc:39:95:0f:ad:
         58:ba:56:dc:98:6c:93:c2:3b:e4:10:2b:1a:1f:32:a8:19:d2:
         d5:b2:70:51:7f:64:35:51:f8:04:79:aa:5a:f4:32:d5:85:ce:
         d5:9d:66:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:03:37 2026 by rpki-client