Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File:                     FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier:          hJarWCOUh3Ocb+i+y+m2cxGg8lDPcMmDF9VgP9624dA=
Subject key identifier:   46:08:BA:14:FB:F6:09:2C:E3:1C:E3:72:C6:0F:B6:C6:12:54:BA:D6
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer:       /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial:       01A10248C618F6FA68809901C4503EE7F17E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number:          1A88
Signing time:             Sat 03 Oct 2026 15:01:26 +0000
Manifest this update:     Sat 03 Oct 2026 15:01:26 +0000
Manifest next update:     Sun 04 Oct 2026 15:01:26 +0000
Files and hashes:         1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: pqn/JR0Gl+b+oJGvov3u8RB0zLukz5emwzUfBj+uXk8=)
                          2: UTis-WRbY-GU5C280jtcweSQcGM.roa (hash: nSL7O1zv/Owqh3yoxdhgakgYNvWvR6WzZovijGhXAe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 15:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:48:c6:18:f6:fa:68:80:99:01:c4:50:3e:e7:f1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
        Validity
            Not Before: Oct  3 15:01:26 2026 GMT
            Not After : Oct  4 15:01:26 2026 GMT
        Subject: CN=4608ba14fbf6092ce31ce372c60fb6c61254bad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:15:2a:35:6f:0f:e7:87:e5:9d:c1:f8:98:19:
                    99:58:ac:5a:8c:cc:66:57:df:78:fd:61:47:36:ff:
                    84:41:67:3e:1b:71:99:f5:78:73:eb:d7:81:5d:33:
                    f1:2f:07:64:a8:8f:d4:99:0c:8b:a1:4b:63:5b:76:
                    7b:b2:9f:40:5a:a9:40:a9:17:51:1e:c8:a0:cb:a0:
                    00:d1:5a:1c:bb:62:cb:64:7c:9e:0b:96:ea:2f:4b:
                    e0:8e:d0:43:3f:de:73:0e:33:60:79:55:cc:93:dd:
                    0c:e2:65:e0:08:04:b4:03:10:c6:b8:8a:4b:9c:d1:
                    5b:57:ac:09:5c:9f:05:0b:e3:2d:94:03:9b:00:0e:
                    37:8d:c3:57:a9:1b:54:01:bd:00:0a:0a:2c:89:73:
                    9e:b7:1b:31:fb:8f:8d:06:26:b4:c4:63:01:20:7a:
                    e8:66:5b:85:81:dc:0a:e1:18:a8:d3:ea:84:bd:12:
                    3f:65:91:17:e4:2f:c1:dd:49:16:1f:56:cd:63:9d:
                    c6:a0:b1:95:49:7d:4c:af:49:8e:89:10:c0:fb:93:
                    59:79:68:9c:6d:20:73:dd:06:75:6b:9b:eb:18:5a:
                    c7:3c:e4:4c:9e:47:87:07:6a:23:45:1d:4c:a4:b4:
                    32:f5:0c:d4:19:6d:e0:b8:08:2a:59:01:40:b7:85:
                    96:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:08:BA:14:FB:F6:09:2C:E3:1C:E3:72:C6:0F:B6:C6:12:54:BA:D6
            X509v3 Authority Key Identifier:
                keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:4d:f5:ca:30:6f:44:38:df:56:ee:f8:cd:f5:71:f4:b7:e9:
         eb:a6:01:cf:da:3b:bb:36:3a:c5:27:2c:fb:78:2f:01:f2:1c:
         77:14:45:06:99:f8:12:5c:90:88:fe:a7:93:fb:b3:ef:c7:86:
         f3:51:5a:f1:5b:01:db:25:82:df:70:5b:8a:8f:bf:b4:e2:b9:
         59:0d:02:98:5a:8a:f8:ac:31:ab:62:f2:68:f5:d0:9d:45:92:
         d4:fa:85:b4:aa:2c:86:33:1e:9f:2a:bc:a9:bc:0d:7b:b6:88:
         73:60:04:44:f3:fe:c8:29:b9:2d:73:f8:e2:8e:10:3d:dd:54:
         3b:0c:92:d8:00:ff:64:00:77:02:a4:cf:65:f5:e6:89:40:3a:
         e3:8c:83:86:02:9e:bc:f9:26:4c:cd:9c:9f:b2:a5:bb:4b:da:
         2a:61:f8:fb:6b:52:f1:e2:9c:b2:4e:ea:8a:66:d6:24:91:8f:
         c8:db:c6:1b:b1:a6:cf:c1:aa:66:d8:63:2c:ec:f8:fd:17:a8:
         3b:48:29:6e:7b:f9:4b:08:39:43:f3:57:39:9f:26:ca:1f:25:
         e0:38:9f:80:9b:b4:f7:9d:56:19:c3:de:77:24:4d:e8:25:e1:
         ec:dc:a1:93:1b:eb:4d:95:0a:34:f8:1c:71:6c:a5:bb:25:1d:
         6f:06:46:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:50:53 2026 by rpki-client