Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft
File:                     fRXP7bmuq0K_isWyTLGu7CpmCUM.mft (raw, json)
Hash identifier:          TsTKjU2gvy3WGT2sb2U3UOl6wvhLXCwuI7OFmyC6BUU=
Subject key identifier:   C4:24:03:23:CD:C9:FA:27:A4:F5:65:B1:2B:A9:03:F4:F6:DD:C3:1F
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Certificate issuer:       /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial:       01A11718DF60BF703EF49592185A5BCA47D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft
Manifest number:          1A95
Signing time:             Wed 07 Oct 2026 16:01:08 +0000
Manifest this update:     Wed 07 Oct 2026 16:01:08 +0000
Manifest next update:     Thu 08 Oct 2026 16:01:08 +0000
Files and hashes:         1: ARagD-2ICVLe_xeRZ5O-24eY_xo.roa (hash: u5J0KIV+qxov6dV4cS/d+pTdetrDBApe4mSwgJ5NKPU=)
                          2: LfVnxAgXtVEvJgCus51DV85uql0.roa (hash: ClR1z6z7TPastgWI2d+GsWfoZzv7l12W4bHdbjqvyKk=)
                          3: Xq_RWfaCi568G5XqSjGiet-3ESg.roa (hash: 1dWVkDzGdeaRRfX6M5oEf40LZlhh6Ek8g5TtCgeyNek=)
                          4: fRXP7bmuq0K_isWyTLGu7CpmCUM.crl (hash: t1ILFkIBVZ0Kpd2+1X05sWRhqqgQ0yvE966QdImDsII=)
                          5: ogdUuLMLGXWAE97ep_6xE6pGauw.roa (hash: /8ETMtUNYvyW0sg04nFVftmDWf2q5zsPGKV2h1Meulg=)
                          6: t_YD_TMrdsOA2W1FycZvgBgKvl0.roa (hash: aKXaaEglxUURDjTbsuHChlw8EkR2WNC0oRTNkZ/SbXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:17:18:df:60:bf:70:3e:f4:95:92:18:5a:5b:ca:47:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
        Validity
            Not Before: Oct  7 16:01:08 2026 GMT
            Not After : Oct  8 16:01:08 2026 GMT
        Subject: CN=c4240323cdc9fa27a4f565b12ba903f4f6ddc31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:10:eb:fb:fa:8e:a9:60:54:e0:49:05:59:
                    bc:74:d3:03:7f:4e:c3:6f:25:c5:a2:76:bd:1e:7b:
                    24:e7:1c:7f:0a:8b:f3:21:c7:4a:bd:57:a6:0b:bd:
                    ad:3c:76:55:03:95:68:9c:e8:87:5a:c0:77:ab:d2:
                    59:d5:23:40:f1:76:f2:37:d8:3b:dc:14:6a:50:e7:
                    28:6d:ce:eb:ed:4f:82:0e:68:b0:e5:08:d4:2e:27:
                    4d:6f:80:62:12:86:b5:59:41:b4:dc:96:a6:d8:1b:
                    14:2e:e8:6a:8c:bf:bb:e8:6b:1f:02:41:3d:3e:0a:
                    64:aa:cd:0c:f7:7c:11:c6:bf:6a:ec:8b:8c:5a:26:
                    ca:00:1e:af:57:ac:16:b7:59:5c:11:b4:fe:ec:d0:
                    cc:f6:48:1c:7b:d4:e2:a5:c9:30:cb:29:37:ab:19:
                    bc:82:5e:1c:ae:74:02:ec:cd:25:1f:d6:c3:29:c6:
                    5d:11:1f:c4:7d:89:50:e1:df:c3:85:61:f8:f8:47:
                    82:7e:4f:d1:e3:44:ba:5b:6f:98:c7:88:e3:1c:23:
                    78:b6:4e:61:d2:8b:db:20:c1:79:a6:a5:b0:48:09:
                    91:27:e1:df:9c:19:52:67:94:52:59:7c:17:4e:67:
                    df:12:35:c2:21:da:21:ba:fc:0b:c8:b3:ef:8b:8b:
                    45:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:24:03:23:CD:C9:FA:27:A4:F5:65:B1:2B:A9:03:F4:F6:DD:C3:1F
            X509v3 Authority Key Identifier:
                keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:61:8b:18:47:de:d1:12:f2:c0:0d:2c:eb:cc:1b:dc:10:dd:
         2d:53:8c:2a:c1:a6:ee:9f:47:23:e9:57:6d:fe:71:8a:c1:9d:
         ef:aa:02:0b:cc:ff:10:2c:62:db:a6:61:88:76:48:ae:84:56:
         21:6d:98:c8:0d:63:63:5a:10:58:f1:4e:5d:5e:6c:f1:2c:64:
         71:8b:51:61:b0:bb:e2:f7:76:18:b8:6d:4f:5d:1b:67:75:df:
         9e:d8:13:b0:3e:f2:ba:56:07:b2:ee:21:5f:4f:83:65:cc:ac:
         4d:a7:ab:b3:f8:3c:0a:f6:0f:55:64:ab:79:d9:db:36:3f:8c:
         44:e0:4a:56:83:50:7b:d2:0d:51:fb:08:c4:b5:36:c3:a8:57:
         42:03:51:57:b2:0b:d2:85:f7:d4:b3:89:5e:40:b9:d8:12:f8:
         f0:fe:94:2a:b1:21:90:2e:2f:b3:c7:40:14:8f:35:78:29:70:
         84:6e:fb:77:81:b3:0b:9b:ba:91:94:44:32:7b:cb:74:d0:b7:
         2d:e7:02:91:82:3a:a2:89:00:87:14:87:b9:8a:8e:7d:13:ad:
         3d:e1:06:6f:47:7e:c1:fd:90:8f:c0:5f:8c:6e:f0:8a:d5:04:
         2c:e6:e7:74:2d:c2:af:6e:08:65:13:8f:f9:b8:48:17:71:fe:
         07:58:13:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 21:45:19 2026 by rpki-client