Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
File:                     FFXKMFkjEziJJe4UQQCa0x1LtB8.mft (raw, json)
Hash identifier:          aXUl1dJ8R3QADXDRrQs3GKVcxzq6HAo7H2BMgGJDQ0w=
Subject key identifier:   F6:C8:8C:64:8B:AE:AF:8B:44:8D:7E:EC:13:F1:8F:CA:BC:CD:DA:A4
Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
Certificate issuer:       /CN=1455ca30592313388925ee1441009ad31d4bb41f
Certificate serial:       01A18488428B663B5B89A817324D4CDD9250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
Manifest number:          0529
Signing time:             Wed 28 Oct 2026 22:01:24 +0000
Manifest this update:     Wed 28 Oct 2026 22:01:24 +0000
Manifest next update:     Thu 29 Oct 2026 22:01:24 +0000
Files and hashes:         1: 8uH4NI4kpzD-NWWHOrX7k6DpF7A.roa (hash: hmLhJru6ia4iNlp5tWUf0dsIrrGpEkZHSBNpSmfTzzo=)
                          2: FFXKMFkjEziJJe4UQQCa0x1LtB8.crl (hash: 3mFFKF39PtvAMvN2lI72Mu63fFsY7veGka71aP41RFo=)
                          3: W-lf8hwpKZ_Qz4QyYmLJuZ0Q150.roa (hash: 0CCMus3U6y/Vhpkh6RFJf4seKPVSo2QOmMSt3f+sxgc=)
                          4: Zf8BnsxBEzPifxA8SqDN9EEVzfs.asa (hash: goCO6KEz7zNZ6e8+cBVkdYSWfsyiMbes0UHqaLp/+8w=)
                          5: cOH4c9izeDruRM_oCC75dpURBQ0.roa (hash: BRWXvah06JyjvQjw3gTuP/eCXiDs1cg2J5s+PEM/zAE=)
                          6: jJPSj-e-v9sgP4W0f2-frivwIRI.roa (hash: d3IaJBpWA8Z9+VCeILAHvc4L5h7XdsOdtTNLAQnWkOw=)
                          7: rxeHCgbEEAr72Cn-7K_YK3JmOA0.roa (hash: blL9+R95hFKXE5Y28tXQI9fJJTn42KVDOuX566lUJHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 22:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:84:88:42:8b:66:3b:5b:89:a8:17:32:4d:4c:dd:92:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f
        Validity
            Not Before: Oct 28 22:01:24 2026 GMT
            Not After : Oct 29 22:01:24 2026 GMT
        Subject: CN=f6c88c648baeaf8b448d7eec13f18fcabccddaa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8c:94:48:d1:b4:2c:69:97:47:43:00:9d:49:
                    5d:33:e7:0f:1c:03:72:d3:18:d0:cc:01:3c:04:52:
                    b0:c1:d0:92:5d:b5:7a:cc:69:2b:36:48:cc:25:3c:
                    b9:d2:52:45:87:90:d4:a9:dd:e4:92:db:61:4e:3d:
                    9e:89:4a:5e:18:27:b6:72:06:f2:c8:09:cb:a5:6d:
                    14:19:48:a0:e2:6f:c9:e5:b0:33:b1:e6:fe:47:dc:
                    f0:e7:95:d1:fb:5f:b7:73:83:fa:7e:4a:1b:25:87:
                    e6:ff:27:17:b0:c2:7e:7c:4c:15:f3:0c:ed:bb:db:
                    11:b2:a4:b8:3e:a0:66:86:19:16:7a:53:08:3f:e2:
                    96:13:ce:2f:00:5d:eb:f7:fb:24:fd:72:6f:d4:8a:
                    b9:2b:f7:b4:c0:3f:ed:82:96:ea:44:39:1a:16:ff:
                    a5:f7:d0:bf:7e:75:fc:8c:85:46:bf:29:39:db:86:
                    96:0d:01:92:4f:c1:e0:41:90:c8:c7:bc:fc:a2:6a:
                    5c:8d:cb:55:59:23:8f:fa:f1:21:c3:b5:8e:f9:11:
                    70:b2:e7:7a:9f:46:96:76:86:da:e1:c8:14:35:d4:
                    af:b5:0c:3f:a7:0b:36:ad:fa:d9:c2:51:07:9b:a8:
                    8c:0c:20:e2:ce:d6:73:92:e2:2d:a1:cf:01:8a:6c:
                    63:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C8:8C:64:8B:AE:AF:8B:44:8D:7E:EC:13:F1:8F:CA:BC:CD:DA:A4
            X509v3 Authority Key Identifier:
                keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:47:54:6e:5e:42:3c:c7:85:7e:b3:9a:9b:2f:af:08:17:3a:
         06:31:f5:1c:19:4b:02:3d:4c:c5:df:fc:9e:99:d7:43:45:4e:
         d9:31:ae:0f:3b:3f:e9:f1:4c:1f:f0:8d:1b:38:f1:13:8a:9e:
         d8:93:79:d7:2c:cd:fd:36:50:b2:12:bf:01:d6:08:f2:18:21:
         05:20:f3:74:92:ec:a3:77:75:9a:63:d3:e5:2e:78:eb:d3:e1:
         13:8b:d2:6e:00:01:c1:1e:af:38:88:fe:e1:06:2b:d8:b0:d6:
         59:8c:1a:c1:11:4f:38:dc:fc:bd:10:d5:b3:35:65:e2:43:d4:
         a4:9d:2e:40:e1:c8:93:bc:69:17:ef:5d:36:e8:51:89:f3:87:
         ec:3e:84:ed:bf:db:a3:1a:77:5c:c0:41:94:39:44:f7:a7:ec:
         2d:1b:ac:ce:5a:30:74:ee:f6:fd:60:cd:7f:29:3a:97:3e:0d:
         e7:87:75:2b:97:86:97:f0:1b:5f:b7:d1:a6:bf:80:e9:75:bf:
         87:3e:14:d3:0a:74:a3:43:da:e7:f3:29:13:a5:2d:a1:d0:e4:
         cd:ca:bf:a5:17:42:b2:d2:d8:f4:e7:c1:44:d5:b6:b1:c7:45:
         02:0d:90:15:72:c8:dc:4f:2a:f8:51:b6:cf:a8:7c:f7:b0:a8:
         8c:26:6f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 03:41:19 2026 by rpki-client