Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File:                     FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier:          oV0JgS2DuvlLNe9zQDjtbo31XIiWRWf5GL1T2hTWNfI=
Subject key identifier:   56:09:EB:62:BD:83:09:97:35:1A:CB:34:63:44:7B:57:82:04:D9:3E
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer:       /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial:       01A1938D44EE48199875C9B664CAD260E05B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number:          07D8
Signing time:             Sat 31 Oct 2026 20:01:11 +0000
Manifest this update:     Sat 31 Oct 2026 20:01:11 +0000
Manifest next update:     Sun 01 Nov 2026 20:01:11 +0000
Files and hashes:         1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: n8rkM07YuMvBWBQVr0nH51x4YKwR7hDRY6tZzaNY79s=)
                          2: Zrn84WYyrZEtX6PAfEnPVWtayZU.roa (hash: jSh/SHE78mPArHOipqPD4fmSLw8Ki+Bi/6/NXvqBAjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:93:8d:44:ee:48:19:98:75:c9:b6:64:ca:d2:60:e0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
        Validity
            Not Before: Oct 31 20:01:11 2026 GMT
            Not After : Nov  1 20:01:11 2026 GMT
        Subject: CN=5609eb62bd830997351acb3463447b578204d93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:96:6b:55:3b:f8:e4:5b:78:76:f6:13:29:
                    02:9c:55:6d:e0:f0:1b:89:80:7f:a2:90:ff:a3:c6:
                    f8:b3:6d:46:61:d3:66:d1:d7:66:2e:aa:14:5b:57:
                    4f:92:84:c9:4d:af:83:04:af:8b:80:48:00:52:f0:
                    f8:a5:de:86:1b:c9:80:53:73:c0:ad:04:df:e9:02:
                    ec:ba:e6:0d:73:e1:89:f0:72:a1:91:af:3a:5d:b4:
                    83:8e:d1:1f:c5:95:2f:3f:d9:8e:ba:4e:45:94:d9:
                    e0:8c:3b:a8:09:b8:c8:de:f9:a4:96:52:7d:2c:12:
                    c7:35:05:8b:b7:96:a0:76:c4:a4:93:94:0b:92:e3:
                    81:04:91:15:87:95:1f:74:90:0e:8f:1a:3b:87:ba:
                    1d:20:a4:a2:0f:fb:c4:25:01:16:dd:72:09:aa:d7:
                    29:7e:22:6c:01:00:a7:6f:50:b6:09:ed:09:e6:00:
                    41:29:9b:71:52:c1:53:e0:c9:16:e1:8b:f4:cc:cd:
                    11:59:c7:17:58:ee:66:8b:83:ef:18:18:c3:bb:e6:
                    75:23:b9:1b:cd:77:60:0a:3e:78:41:5a:be:dd:d9:
                    8e:6f:98:2e:87:c3:01:e6:63:33:3e:10:12:a5:54:
                    bb:30:3c:c0:dd:60:14:52:3b:c9:5b:70:3c:27:df:
                    62:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:09:EB:62:BD:83:09:97:35:1A:CB:34:63:44:7B:57:82:04:D9:3E
            X509v3 Authority Key Identifier:
                keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:71:41:0f:43:a0:1e:0f:ec:31:49:21:80:10:5b:47:da:3b:
         20:9e:56:dd:22:d6:6b:f9:cf:ae:fe:e7:49:67:29:ba:a1:d3:
         66:54:cd:4c:d3:73:9f:78:87:ed:2a:86:91:73:79:9b:a3:79:
         67:2c:99:c5:ff:48:0a:ef:96:ae:72:de:1d:89:46:1e:78:90:
         13:9a:e2:39:f5:0f:ae:6a:58:6c:cb:36:48:27:47:5e:ab:d6:
         d7:57:fb:ef:29:f3:b6:35:82:12:86:07:50:9d:3c:8a:7d:e1:
         44:91:76:a4:b6:12:bf:57:ae:d0:14:28:67:a6:42:a3:ec:b1:
         7a:ff:69:f2:51:72:94:a1:20:85:84:fa:8c:d5:2d:06:61:80:
         fe:3a:bf:dd:9d:38:74:41:6d:22:61:f2:33:31:32:d4:29:86:
         1c:86:dd:bf:1b:cb:31:8f:2f:1c:dd:b7:83:53:97:a8:b9:a3:
         2b:5a:22:e0:44:4c:27:8c:fb:2f:1f:16:b7:b0:e1:10:cc:bf:
         55:23:5d:b1:49:e8:e9:51:ae:ec:b2:1e:1f:4c:20:80:04:22:
         07:35:73:92:9c:1e:d9:97:c6:b9:18:fe:b5:c7:4e:27:02:c6:
         62:99:d2:71:86:bf:b8:24:57:8a:6f:60:76:69:29:8b:f4:ba:
         26:60:c0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:54:04 2026 by rpki-client