Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
File:                     fWG4N46PNorkmY1Rw6ms5kFI1s0.mft (raw, json)
Hash identifier:          N6hP/5r3XcEaJeH3/hWqlRfBhYadKyffxQeIcpZv5OI=
Subject key identifier:   7E:D5:FD:8F:40:34:B9:B9:9D:64:0B:2F:9E:F1:BF:63:7D:E5:C4:0F
Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
Certificate issuer:       /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Certificate serial:       01A180068354C0170BAB45929DC3631B7C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
Manifest number:          1ADB
Signing time:             Wed 28 Oct 2026 01:01:12 +0000
Manifest this update:     Wed 28 Oct 2026 01:01:12 +0000
Manifest next update:     Thu 29 Oct 2026 01:01:12 +0000
Files and hashes:         1: cE-3JlgsaW1G6uxzWM25DW-c8rQ.roa (hash: M9oUYIkckIDsB1IKjs8KpGweqbN0nhGBpxFT1OmCdQY=)
                          2: fWG4N46PNorkmY1Rw6ms5kFI1s0.crl (hash: fCGthZ2iAAyEg1Em17EwkKykw/MGazx9gprru1lsCAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:06:83:54:c0:17:0b:ab:45:92:9d:c3:63:1b:7c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
        Validity
            Not Before: Oct 28 01:01:12 2026 GMT
            Not After : Oct 29 01:01:12 2026 GMT
        Subject: CN=7ed5fd8f4034b9b99d640b2f9ef1bf637de5c40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:cc:e0:d0:4f:14:65:90:f6:b2:32:19:05:
                    10:33:44:d1:61:b1:18:c5:90:fd:26:ac:8d:2a:e3:
                    7a:95:54:f6:1e:c7:a6:c0:50:7d:ce:8c:3a:06:1e:
                    fd:31:7d:64:94:3d:24:3b:c6:64:0b:6e:b4:8d:2b:
                    03:9e:92:09:a5:02:21:f0:ec:5d:c4:71:cf:c7:e0:
                    dc:bb:52:ed:8e:15:46:1f:23:05:10:81:ba:fb:be:
                    e8:c8:a7:19:6d:e5:bb:50:6f:74:ca:b1:14:1a:3e:
                    e6:ac:4a:d2:33:2c:55:a6:ab:a5:4d:81:35:23:08:
                    ea:50:96:c2:58:43:0a:33:9a:7e:50:67:13:aa:6a:
                    96:f9:dc:90:0b:e5:7c:14:35:45:fa:16:20:b0:ed:
                    ad:7e:9d:08:52:55:65:7d:06:1e:e5:6f:e4:da:07:
                    f1:1a:0a:6d:15:73:78:a3:e1:6a:61:80:40:c2:a5:
                    01:ce:d5:cb:2a:9b:94:c6:83:8f:9c:d5:1d:99:38:
                    75:72:4e:2e:2e:71:b5:2d:84:56:98:93:43:5d:d0:
                    f7:25:61:e7:5a:f7:7a:8e:12:be:8a:09:5e:3d:e6:
                    e9:99:3e:78:52:ba:d9:9a:ae:ec:dc:29:66:a0:dd:
                    9a:ec:43:a5:93:ab:23:fd:0e:06:88:0b:72:9d:cc:
                    94:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D5:FD:8F:40:34:B9:B9:9D:64:0B:2F:9E:F1:BF:63:7D:E5:C4:0F
            X509v3 Authority Key Identifier:
                keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:99:2d:9d:2c:df:ee:f5:f8:28:c9:42:b7:46:a9:bd:20:f4:
         e4:3e:05:3f:b1:ef:8f:36:54:d8:a2:01:3e:f1:74:61:b7:47:
         25:ef:f1:bf:f3:6c:87:d9:79:91:5a:e8:c9:fe:43:6e:48:60:
         24:b4:96:25:ba:cd:00:c9:27:f3:9a:a1:d4:50:22:cc:f3:de:
         d6:44:cd:13:19:e6:ee:36:0c:2d:0d:7d:4b:d4:e9:b6:ef:4c:
         2f:de:4e:9a:a3:75:53:c0:19:6e:31:41:bf:84:31:f3:57:25:
         7a:fd:4d:4c:b1:c6:7e:4b:80:ae:7b:18:62:46:66:fa:b6:0d:
         05:97:17:a3:f8:0b:29:45:99:4e:b2:7a:65:5a:c1:3f:67:9e:
         55:9a:81:53:df:3f:ac:0e:e9:aa:30:9c:95:37:0e:d9:df:d9:
         f3:a4:79:59:ae:f6:56:cd:ef:c3:dc:0a:be:78:f1:1c:98:56:
         b4:51:ad:02:24:02:49:3d:71:07:7f:21:62:fe:6d:22:ff:ed:
         1b:18:61:14:7b:80:7a:06:c1:33:6f:de:79:9e:54:d4:4a:ea:
         da:ca:82:1b:60:75:36:bf:97:e2:c9:fa:17:4e:fa:b1:b8:25:
         72:75:fc:40:89:5b:9d:1c:69:fe:b2:fd:18:a9:5d:d1:80:45:
         03:4f:37:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:41 2026 by rpki-client