Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
File:                     fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json)
Hash identifier:          V7XvpD/+IYXZHtb52jxmALxUy8dRwg4ZC0EwnkuSPSI=
Subject key identifier:   CE:99:B6:96:64:3C:6F:3E:E0:74:3C:53:D6:4B:D7:4F:59:AD:40:96
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Certificate issuer:       /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial:       01A154AE2DC8BF4EBC1C21155A1E1D722785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
Manifest number:          1AC2
Signing time:             Mon 19 Oct 2026 15:01:03 +0000
Manifest this update:     Mon 19 Oct 2026 15:01:03 +0000
Manifest next update:     Tue 20 Oct 2026 15:01:03 +0000
Files and hashes:         1: G0kBNcjhGFcxChx46aWWaNpRXhY.roa (hash: VJoqFME0N6dK/qBA61hfvkkTq2MVQMZWW93hxUvsK8Q=)
                          2: IhUUSRuZPQ93qmBEuCsX-VJJ8_Y.roa (hash: wQMNMlSi7ML40phwxmQnjfrhkgmt/fkZEJZEruvJetM=)
                          3: J7oFZC1CJk2GtQuj_-ICPxLHOsQ.roa (hash: oGKjzDdrrCM7vTukMw0Fba8efuuuaYKCVfCXlBR+Jpc=)
                          4: O_CD_5ALmuh68TK-xyESGxnHW24.roa (hash: A4M+FCTh23fTzIJAI9lDd9sc/Yc7QQultOVy81PYaSo=)
                          5: Y05YWTld1eID__luRs7pp8ewZwY.roa (hash: 02lMUa1OHr9cMSAHSJuLTXNV5rSyX1jxkq8ORZ0rugw=)
                          6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: vLaVNlVyHPqy0GWjJ+MkZI/QveTim8tXRfl+Zdyypns=)
                          7: oFmVPpAqArTolT86zoYzDNps-ck.roa (hash: vxR9GCqj5WIpQWRTxrTVSqLQRxXTFqzFObqIUCYCQMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:54:ae:2d:c8:bf:4e:bc:1c:21:15:5a:1e:1d:72:27:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
        Validity
            Not Before: Oct 19 15:01:03 2026 GMT
            Not After : Oct 20 15:01:03 2026 GMT
        Subject: CN=ce99b696643c6f3ee0743c53d64bd74f59ad4096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:59:54:cf:7e:c3:40:94:4c:d1:b2:8b:e0:4a:
                    23:fe:a4:b5:fe:63:ea:bc:17:b7:9d:af:2e:47:9d:
                    95:f9:b0:be:5d:4c:dc:e0:64:3a:54:b5:93:40:8c:
                    9f:24:38:1e:b9:c3:7b:fe:06:d1:fc:98:07:a1:35:
                    16:6c:d6:36:02:b4:79:cb:ce:77:32:95:3b:3a:9a:
                    75:7b:56:82:e2:b9:6d:70:1f:19:2f:ef:50:27:84:
                    1a:b0:93:08:3b:da:5e:ca:0d:3f:35:90:7c:32:70:
                    c7:23:eb:3b:97:2d:c4:56:15:77:8c:eb:7c:ea:06:
                    65:b4:5a:82:87:4c:61:a3:f3:0a:73:ba:37:26:a6:
                    b2:13:fd:ae:10:48:f4:89:ba:6f:80:b0:55:4c:03:
                    82:c0:36:ba:f0:b3:bd:8b:3a:e7:b5:66:3e:f9:81:
                    f2:d8:a1:12:1a:54:9e:de:27:06:c3:d2:c2:3d:0a:
                    81:2a:8a:c9:53:a2:b5:f2:28:01:0b:1d:d6:4a:6e:
                    b7:3b:d8:be:0e:e0:7f:93:54:3d:e7:ac:42:55:cf:
                    1c:01:41:dd:ca:78:7b:c5:8f:f0:86:7b:23:33:13:
                    90:17:a5:47:45:21:ed:6b:50:64:cd:9b:ca:95:35:
                    0b:2c:78:e9:cf:89:2d:53:45:64:33:e1:a4:f4:2d:
                    49:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:99:B6:96:64:3C:6F:3E:E0:74:3C:53:D6:4B:D7:4F:59:AD:40:96
            X509v3 Authority Key Identifier:
                keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:23:9e:9c:73:f7:7d:19:f4:67:2a:11:15:21:23:20:58:18:
         e6:a7:29:cf:cc:b6:58:21:48:77:6e:5d:68:b5:8f:4f:5f:c5:
         47:af:d0:ad:57:9b:9e:d4:8e:22:2a:29:aa:1f:40:6b:f0:8b:
         af:59:cd:bf:93:3d:41:72:a7:a0:69:f2:c4:8b:67:ad:30:3a:
         26:c1:8f:3c:ea:49:98:a9:41:43:7c:03:42:57:1d:db:0e:7e:
         57:39:97:2f:62:30:53:49:b5:e8:e3:73:33:85:81:1a:ce:2e:
         34:2b:8a:22:5a:09:df:a1:b6:f6:c4:28:d7:b0:b3:e0:ca:b8:
         0f:30:1a:16:1d:b2:75:78:7f:a6:c2:79:05:84:26:4c:01:85:
         be:0b:54:4e:a9:34:65:ab:d0:42:8c:ab:af:3e:52:39:8b:09:
         79:a9:6e:59:ed:6e:83:c4:03:92:ff:4a:98:54:61:a7:7f:71:
         3d:d5:e6:bf:4e:b9:d5:9a:dc:5c:4a:b5:0c:7a:70:ee:e9:4d:
         f7:c0:50:55:58:ae:0e:40:b2:27:eb:94:15:cb:61:40:83:35:
         74:58:70:34:00:ca:16:fc:43:d1:7e:38:c9:11:0d:5b:8b:5a:
         34:51:6b:35:cc:d1:55:c7:f4:a4:97:86:7b:de:41:1a:3a:67:
         65:1a:c2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:44:01 2026 by rpki-client