Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
File:                     rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft (raw, json)
Hash identifier:          lWzkiBWCkzlZoyDgEK+4RzIjGHA4aELmvDLSOADPxRQ=
Subject key identifier:   BA:F4:79:DF:FC:9C:4F:86:A1:64:BE:A5:45:01:92:16:5A:60:60:80
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Certificate issuer:       /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial:       01A16FB763942D83E0C0FB0F6A4A0CFA1F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
Manifest number:          1849
Signing time:             Sat 24 Oct 2026 21:00:51 +0000
Manifest this update:     Sat 24 Oct 2026 21:00:51 +0000
Manifest next update:     Sun 25 Oct 2026 21:00:51 +0000
Files and hashes:         1: ErNXrycTzph6JSf18PtwwsQoz2w.roa (hash: JFPJWJTX9AS74O2qvrW7DFe57VW6uqTN8mG7Rp0yt+w=)
                          2: SZE5e1h7vVE1K8b37udvVnSNQcM.roa (hash: DCVuhDnUxaJKtTV6uLri/M27ey5GSqDohY5/pt5Ejsk=)
                          3: Z1IlhEZgiQwk8auaQbQKsQhfjGw.roa (hash: GuAHOBM9mGxQz1BFFSnguR68MvXbC1uYn6q2dEBSyQ0=)
                          4: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl (hash: v4mEgYiVi1jqpY76WMMxm/Rvo91Qzo5vcWhHsflvmcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6f:b7:63:94:2d:83:e0:c0:fb:0f:6a:4a:0c:fa:1f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
        Validity
            Not Before: Oct 24 21:00:51 2026 GMT
            Not After : Oct 25 21:00:51 2026 GMT
        Subject: CN=baf479dffc9c4f86a164bea5450192165a606080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:3d:a8:73:c9:65:1d:e4:f6:ef:e2:87:ec:
                    02:2e:ba:89:1f:7b:24:8b:cb:5f:86:8e:3c:61:f3:
                    7f:11:69:89:c3:71:18:a1:1c:92:cd:02:53:f4:0c:
                    26:1d:60:5b:78:db:c9:4c:9e:6f:95:01:16:2c:89:
                    3e:1d:fb:e2:e4:77:bf:2f:17:3f:cc:d6:8f:2e:67:
                    ec:5b:e1:6b:58:f2:3b:3d:7b:30:0b:48:5a:a2:40:
                    b4:4d:58:70:04:60:6d:6a:a0:a0:dc:59:ce:df:3a:
                    10:75:d3:19:76:29:69:3c:4d:d5:9d:de:06:2b:72:
                    89:23:dc:e7:90:80:a6:79:bc:f5:06:6b:e0:af:53:
                    66:c1:d3:68:02:5e:09:ca:20:79:d2:a9:7c:f6:81:
                    fb:98:20:01:9c:c0:c1:87:44:81:2b:8f:44:05:e9:
                    82:a2:07:7e:00:07:0e:2a:67:e1:df:35:58:ae:1d:
                    ef:42:f9:ab:cd:62:7b:3a:1a:5f:8d:f0:1c:e2:99:
                    d7:56:0d:f5:7a:f6:32:21:93:66:59:14:fb:2e:36:
                    6e:55:9c:52:7f:df:75:2a:fd:f5:11:87:12:48:a6:
                    d6:61:38:eb:35:ae:0f:52:a5:46:ce:ea:a5:19:78:
                    17:ad:cf:b2:17:a9:27:99:86:b9:81:6b:fb:dc:44:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F4:79:DF:FC:9C:4F:86:A1:64:BE:A5:45:01:92:16:5A:60:60:80
            X509v3 Authority Key Identifier:
                keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d7:65:a5:78:ab:90:40:f9:c9:e3:25:8a:7c:3f:7b:25:5e:
         95:5c:b6:98:10:fb:c7:f7:f8:d2:93:1c:7e:ed:b2:83:32:e6:
         56:7c:1f:fa:aa:2d:bf:c6:9e:cc:f4:13:30:ba:c4:1e:01:8c:
         de:4b:79:6b:3d:9e:a8:d7:b4:2d:10:9c:95:83:ed:58:25:a0:
         c3:ef:f0:56:26:30:dc:14:13:6c:60:d7:79:16:b7:b9:6c:98:
         fd:67:56:04:07:2f:e3:7e:df:3f:73:1e:c4:28:21:fc:f5:c6:
         34:51:f2:0b:8d:39:25:a8:3a:cb:c2:11:d1:bf:a0:96:df:6a:
         82:14:c1:89:47:85:92:48:ec:73:0c:ab:c6:d9:5e:57:94:01:
         dc:f3:4d:07:f8:b7:dd:99:98:ae:5d:7f:7e:22:98:a5:f7:97:
         96:47:ed:a4:c5:77:1f:bd:81:5e:4c:d2:db:8d:b2:d3:08:16:
         dc:da:55:33:0d:87:3c:d8:12:44:b4:78:65:65:0e:f4:4e:f6:
         fe:f3:95:89:d6:6d:a0:3b:40:fe:8a:75:a9:6e:76:75:57:6c:
         73:e2:d9:0f:92:17:a4:e9:d8:c9:e2:0b:6c:a9:92:a1:cf:6b:
         cd:75:53:f8:3c:40:b4:cd:00:20:02:ec:14:ac:63:83:03:d1:
         6f:dd:77:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 05:02:36 2026 by rpki-client