Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File:                     FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier:          R4WoN9ofcN34Wq9oQl90GzOcUer0mr9c8cO6UWuQvrQ=
Subject key identifier:   3B:43:DE:4F:6D:B7:14:2A:16:E6:9A:EA:E4:3B:31:C6:BB:DA:67:82
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer:       /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial:       01A176952CD9A045F7E6829A19AF5D4C9CCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number:          0B1E
Signing time:             Mon 26 Oct 2026 05:00:50 +0000
Manifest this update:     Mon 26 Oct 2026 05:00:50 +0000
Manifest next update:     Tue 27 Oct 2026 05:00:50 +0000
Files and hashes:         1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: V67oeWaJ2AKsH9xF6y2QkY6JjnILacRsTrOAtBrJ53c=)
                          2: H89M_EzTc8StQKIth4lnEHjKKN0.roa (hash: IDhPLp9HDBcx8Hw7u+pzfwTPs8upVVlGQyX+6R34mN0=)
                          3: Kk4HsfGd30im4loLCXTsCFiytPU.roa (hash: oKLzpVpeAoy3QzeCxsxeoWZkV7KJYmzZC8B43Ea48cY=)
                          4: ekGCZNDc9ZOt8-ot2-lgD0_VB3o.roa (hash: FwlalKxI5Tx7qsPfQIKwmFy4fzG691p8g1JAVi3TkPw=)
                          5: mNfJbT_LAkQ7oHjPzi5gOUmJf2k.roa (hash: crQWmizM31tyk+JqRaLmmMrPZUf827PwrlcRDlFZANc=)
                          6: semdbfvd3TfnGahfQ-_MnPsyXVY.roa (hash: K9glb2D2qochPPxOstvTUytekMPlr9ObTuDnHNr8nXk=)
                          7: tDI9go-g4CqghW05S71dg1-pcIU.roa (hash: ziudTSLoj2qHvEkRBq06kMjV08QbQZjdB8rDgu7yyDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:95:2c:d9:a0:45:f7:e6:82:9a:19:af:5d:4c:9c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
        Validity
            Not Before: Oct 26 05:00:50 2026 GMT
            Not After : Oct 27 05:00:50 2026 GMT
        Subject: CN=3b43de4f6db7142a16e69aeae43b31c6bbda6782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3a:46:6c:48:e6:e1:79:9a:e0:d8:80:cb:9e:
                    c0:6d:15:d5:14:25:f7:c4:bf:26:e6:fc:21:fc:e1:
                    d5:ec:c8:8d:df:38:09:83:f9:38:fc:cf:47:84:e8:
                    bf:33:28:6a:dc:5e:a9:a4:71:2a:ed:34:94:a9:ab:
                    f0:46:90:68:0d:ae:8a:77:88:58:a8:1b:76:17:ad:
                    a3:09:cc:f3:a4:f3:f8:06:8a:b6:1e:d3:05:01:79:
                    38:4e:94:d6:6b:40:c1:52:58:53:be:e7:05:52:9d:
                    c2:3f:0f:2b:d1:a8:db:6a:4f:d1:c0:d3:9a:2d:7b:
                    a0:b3:bc:ca:02:ba:02:08:70:6d:fb:a2:ab:7e:a7:
                    b9:ee:4a:55:d2:7c:0e:78:98:e4:ec:20:37:a7:ae:
                    cd:96:63:6f:1e:4f:f5:4f:87:69:cf:66:db:8f:f5:
                    5c:e0:16:3a:de:57:4d:4d:c7:fe:b5:79:88:20:20:
                    bc:01:cd:c9:19:cf:76:a3:5e:95:4f:a2:f9:a9:e4:
                    bd:38:9c:13:f5:2b:03:2e:96:76:6f:4b:cb:5e:8b:
                    d3:d6:26:5c:02:ac:39:d4:ea:c4:83:ba:c8:09:a6:
                    fe:0b:c2:d7:43:94:e2:45:2d:26:84:de:01:df:4d:
                    ac:86:d5:46:3c:a3:f5:6d:69:8d:3b:fe:cb:e2:87:
                    28:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:43:DE:4F:6D:B7:14:2A:16:E6:9A:EA:E4:3B:31:C6:BB:DA:67:82
            X509v3 Authority Key Identifier:
                keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ab:33:b2:0e:6f:13:ea:12:41:cf:2d:cd:53:d7:f8:d8:76:
         41:f5:b0:48:c3:48:31:e4:bc:3e:c2:0c:a9:02:3a:04:66:1a:
         32:cb:17:d7:db:c0:6f:51:b2:4c:e8:09:a7:62:3d:d6:00:c6:
         55:23:c9:ba:ac:ca:fe:e5:2b:b0:d6:a4:53:f5:e7:a4:ac:7a:
         5b:5b:b2:17:a7:8e:53:5e:1d:f2:63:c3:cd:fa:9d:87:8e:5d:
         00:41:99:61:ad:4a:b6:bf:04:75:9a:9a:60:46:1b:63:f9:93:
         c4:f0:65:39:59:54:39:f5:2e:62:ca:40:8a:9e:58:8f:68:62:
         3d:29:c1:fb:ed:74:55:33:62:8e:64:bb:9e:a8:fd:d7:94:b1:
         06:4e:b1:b7:38:72:b5:7b:5e:8b:b0:c4:ba:c2:0f:e4:6c:51:
         47:cd:e9:c5:8b:37:ce:d3:0b:8a:12:01:8d:30:ed:df:33:15:
         62:ab:3d:f6:c7:a4:08:26:dc:d7:82:81:97:b4:e0:4f:ff:8b:
         c7:b2:77:e8:97:de:5c:5c:32:ae:78:69:39:91:c1:0d:f9:1b:
         00:38:5d:ae:26:1f:9f:2d:ab:50:58:ae:4e:0f:0d:2c:88:de:
         39:92:16:f2:a6:3a:46:db:8c:e4:7e:a8:77:36:57:a1:8a:0d:
         2d:c1:3a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:28:17 2026 by rpki-client