Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.mft
File:                     f3ET_r3boeBrlTCDtmSO-qAx8fU.mft (raw, json)
Hash identifier:          7s0x7wAnF9FfzMfd5lCNaeQKt4uXuCRDxxiY9rgmDQc=
Subject key identifier:   F9:1C:14:B0:A8:91:92:6D:F8:DF:FC:57:6E:33:63:4B:B3:71:EA:4D
Authority key identifier: 7F:71:13:FE:BD:DB:A1:E0:6B:95:30:83:B6:64:8E:FA:A0:31:F1:F5
Certificate issuer:       /CN=7f7113febddba1e06b953083b6648efaa031f1f5
Certificate serial:       01A17BF28D74414CD8784D66A2C89547091D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.mft
Manifest number:          013E
Signing time:             Tue 27 Oct 2026 06:00:55 +0000
Manifest this update:     Tue 27 Oct 2026 06:00:55 +0000
Manifest next update:     Wed 28 Oct 2026 06:00:55 +0000
Files and hashes:         1: 1-OYpxvXf01l-3v81_JO0GhTw0U8.roa (hash: maP/DOqBfThrLU296WG85Zf4viQIPPYK5NJmpNuBrGg=)
                          2: Bo1w0lPI8Zz_e1rRQmIhlcO1HkU.roa (hash: cAz0BXExpLFECormHh+BtGBygCZH+t51hrNKrPat5QE=)
                          3: CH4cB5wInBV4cwxI5w3P2wuRLI0.roa (hash: 22NNWmSGS7QrfggnbNY17T1GU9k5KhX54GUORhCR+2Y=)
                          4: GcHZepKQ4jGPVr3OoRfdhaTHGeE.roa (hash: T6n6JXxwyvyhCyYpVrtVqkZOJ12HwYIjXtEa/2LOeWM=)
                          5: UW_iXDBzE4ni2ahiRj-9q9QoBPM.roa (hash: JRmODBb7OlHw1Za55dylor0a47b0qEs89+ukqYmHts8=)
                          6: f3ET_r3boeBrlTCDtmSO-qAx8fU.crl (hash: XbpFla/ARYKSKwgSX2J+gvrsUAF2IiJ1vRDnfhmqA0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:f2:8d:74:41:4c:d8:78:4d:66:a2:c8:95:47:09:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f7113febddba1e06b953083b6648efaa031f1f5
        Validity
            Not Before: Oct 27 06:00:55 2026 GMT
            Not After : Oct 28 06:00:55 2026 GMT
        Subject: CN=f91c14b0a891926df8dffc576e33634bb371ea4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:e8:40:30:75:c2:2f:ef:2f:91:cb:b1:db:
                    b2:fe:fa:f0:7d:34:5a:a2:c0:18:1d:f4:4b:fc:f2:
                    aa:9a:ad:76:8a:40:8b:97:89:ce:47:8b:b0:ed:97:
                    c6:b2:77:a0:fc:41:7e:74:27:2a:17:5a:7e:31:dd:
                    bc:ac:da:cb:3f:c3:0b:9d:f7:9c:89:64:15:a8:db:
                    d2:1c:fe:2e:33:c7:8c:c0:21:4c:53:c0:29:3c:19:
                    a9:13:3b:83:89:ea:69:da:46:07:dd:8e:53:e1:2c:
                    e8:7f:fb:75:d2:99:ef:1c:99:2b:18:10:d4:76:51:
                    56:82:f4:d6:b0:75:29:31:c9:4e:04:c5:f5:1b:1e:
                    f8:9c:df:1e:a3:91:c3:8e:01:79:17:91:5c:c9:08:
                    86:6a:d0:2b:ca:58:4a:30:84:23:24:a5:80:72:da:
                    ef:ce:4f:6c:69:3c:91:c5:b5:00:fe:07:22:b8:f0:
                    c7:7b:e1:65:69:4f:e0:da:32:fc:37:4d:0b:b4:33:
                    e4:95:85:29:6d:cd:ca:5a:94:ad:51:37:f1:0c:b2:
                    3e:8b:e5:78:d1:d9:52:9c:27:af:33:c8:9e:97:2c:
                    81:63:a9:c3:27:8f:23:3f:8a:03:cc:67:09:b4:80:
                    1f:70:20:18:6f:84:fb:63:73:30:5c:26:bd:ca:09:
                    15:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1C:14:B0:A8:91:92:6D:F8:DF:FC:57:6E:33:63:4B:B3:71:EA:4D
            X509v3 Authority Key Identifier:
                keyid:7F:71:13:FE:BD:DB:A1:E0:6B:95:30:83:B6:64:8E:FA:A0:31:F1:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c4:b4:ee:9c:7d:6f:62:5f:1a:79:d5:ed:82:98:a4:3f:65:
         b0:b0:fe:62:90:2f:92:77:18:1f:69:cd:86:7e:8c:96:24:7e:
         7b:2d:e3:9b:d4:59:9a:bd:30:cf:f7:db:6b:ec:6f:be:57:63:
         4b:f5:79:4c:47:f5:c1:c7:ba:da:44:7a:be:7f:67:39:f8:6c:
         6e:4d:e7:cb:6f:92:d0:62:c3:c3:ab:b3:ed:eb:a8:3c:c0:6d:
         60:ef:e1:e4:36:89:76:f6:a0:d1:62:a2:c4:57:ce:1e:31:41:
         3e:74:cf:49:d1:fc:4d:7d:51:2b:bb:39:2b:8d:31:81:ce:27:
         90:68:23:50:f7:5e:90:0c:65:ac:45:46:d2:47:5a:19:d5:6e:
         16:27:c9:b9:53:40:4a:4f:8f:e5:37:93:70:91:8d:7a:c5:5b:
         8d:d1:f1:eb:34:81:24:d9:7a:79:39:31:5d:5f:d0:61:77:c8:
         eb:04:b9:5d:6f:80:1d:64:8e:8b:b8:6a:97:f9:7d:e5:03:99:
         9e:f0:7a:83:ff:a6:c0:a4:67:5e:e9:4b:52:2f:01:93:1e:87:
         ba:68:f1:7b:dd:6f:1e:69:88:49:45:e8:11:60:3b:8c:94:9e:
         f0:26:ae:b8:00:3b:18:d6:1b:3b:ec:f4:c2:41:d8:23:c7:11:
         8c:d4:df:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:48:56 2026 by rpki-client