Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File:                     CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier:          TeyKltAr97dJyq6qzvxFppxyKZpfaHiFH2cy+BCWKF4=
Subject key identifier:   D9:C8:FA:79:D5:A8:DF:B1:89:75:47:B7:1B:17:3D:70:0A:D3:ED:45
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer:       /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial:       01A13E26B1E49B63C7882313D3F20112D137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number:          166F
Signing time:             Thu 15 Oct 2026 06:01:25 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:25 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:25 +0000
Files and hashes:         1: 1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa (hash: OTTvBLhkOcop4Nbi1DHyFcQk24Pft/t6CQKmbEUIG7Q=)
                          2: An2l5nFXJ60Dmnc7ytV8xeoA-4w.roa (hash: XripkKF1BDgNijV9Sww4y4Pa3QzTCZtDgL7y8YpoE00=)
                          3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: hPHP8KP1VV2lCdkHjbDl4U902uWAxvNleSS6LQAdvxI=)
                          4: DtNjMaX-knG3kL803vSueqhEdMU.roa (hash: D5yJVp5o771p+zwhuuRghzaJUbXhIq0JcefHW8i9ex0=)
                          5: aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa (hash: /Iyi+dntnfLdprySjcri6ap8bjxvS/nEOkhR72Tr4I4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:b1:e4:9b:63:c7:88:23:13:d3:f2:01:12:d1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
        Validity
            Not Before: Oct 15 06:01:25 2026 GMT
            Not After : Oct 16 06:01:25 2026 GMT
        Subject: CN=d9c8fa79d5a8dfb1897547b71b173d700ad3ed45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:65:7d:ff:0d:c3:79:8a:9a:6b:43:c8:80:
                    b7:b8:42:c1:ac:b1:58:3c:ef:d8:5e:1a:6d:da:2f:
                    a1:9e:49:c6:81:ed:5b:9c:03:3d:2e:7c:52:33:87:
                    e8:65:93:38:fe:1d:21:ca:fc:f5:e1:0f:51:bf:a0:
                    11:eb:d7:6b:c6:a3:c8:9d:df:70:ca:84:ae:4f:66:
                    69:ab:3a:09:68:bd:f8:03:00:95:14:0a:8b:23:9d:
                    08:f3:da:5f:c0:6f:38:30:0c:87:f2:69:54:7f:e6:
                    8f:47:a7:70:fc:8f:b4:7a:f2:73:74:76:1f:14:40:
                    13:61:f0:6c:94:92:90:05:ab:af:02:da:b5:c2:6c:
                    94:b1:45:a2:48:70:d8:37:7e:40:3e:4b:6b:23:6d:
                    2e:de:cb:30:70:76:d3:2c:fe:77:f7:44:4e:08:a5:
                    10:d9:8e:1e:73:27:7a:82:9f:68:79:e8:84:ee:03:
                    fc:12:39:42:f7:8d:19:04:36:3e:6f:ea:e9:06:cf:
                    5a:8b:09:bc:e6:80:92:62:57:3d:8f:1a:eb:52:c1:
                    c8:43:11:65:5c:12:4b:32:14:ea:cf:6a:66:bb:b7:
                    5b:1c:61:ab:c3:f4:39:37:5a:1b:78:b9:92:f4:4b:
                    61:59:1f:25:d3:4e:6e:be:86:28:27:52:58:32:2b:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C8:FA:79:D5:A8:DF:B1:89:75:47:B7:1B:17:3D:70:0A:D3:ED:45
            X509v3 Authority Key Identifier:
                keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:6e:84:ec:76:77:9b:f9:85:9c:05:de:a1:74:79:1d:7d:50:
         15:16:ad:a0:3c:e7:81:74:a0:63:3a:8d:35:d1:09:72:2c:41:
         32:6a:3d:d3:83:75:af:ef:7e:c9:17:19:ff:9a:b5:1b:00:69:
         01:87:49:36:81:83:09:cf:45:83:de:3a:ad:b2:57:fd:a7:68:
         4d:2a:9c:24:28:30:38:92:45:97:00:72:bb:9a:3d:ec:11:d5:
         36:4f:73:0a:74:a2:c9:91:de:9f:15:05:36:8c:30:06:14:50:
         cf:f6:72:f5:81:b8:f7:dc:cb:df:14:89:29:c7:21:b2:a4:67:
         d7:36:ea:d8:bb:00:66:9f:98:8b:90:5f:ae:8e:9d:32:d6:94:
         21:13:70:40:6e:4e:5b:0f:2c:8b:41:44:8d:2b:d2:df:b6:1e:
         60:04:6b:3f:b7:a5:61:35:80:de:8e:dd:ff:c2:bf:07:c7:c2:
         ca:03:7d:32:8f:9a:49:34:6c:ef:ba:38:aa:51:87:f3:35:9e:
         1b:3c:c3:d5:d0:34:8a:2d:71:12:ee:f0:79:16:49:e5:63:96:
         19:5a:57:bb:e0:6f:c5:1c:ae:14:ff:17:23:0f:f7:1a:be:03:
         a1:f4:6d:a8:e6:5a:5d:9e:43:0d:af:ab:8f:b2:6b:de:7c:89:
         16:6e:ea:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:13:00 2026 by rpki-client