Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
File:                     fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft (raw, json)
Hash identifier:          R2WC6eZZrmcfUtPAsjieH0XXDmufKRRlAowqB/OTYYM=
Subject key identifier:   F6:31:77:CA:D8:1D:AB:0A:47:61:3D:B8:BD:53:C5:34:3B:95:7A:4E
Authority key identifier: 7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59
Certificate issuer:       /CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
Certificate serial:       01A135FF65B7BD9C5E673B527BD518127EA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
Manifest number:          0EC2
Signing time:             Tue 13 Oct 2026 16:01:32 +0000
Manifest this update:     Tue 13 Oct 2026 16:01:32 +0000
Manifest next update:     Wed 14 Oct 2026 16:01:32 +0000
Files and hashes:         1: 9k0dsqb1d6KW0H9rWBxGERBZOic.roa (hash: FhB4cjzWorn9MftYwNSX8WEXFBMVO6EYBKbMGx2rmWM=)
                          2: MXSLo6LQrIP-KSqVsT4Vi31Yu7Y.roa (hash: jmYre0cvNWduC7MGqKdKXsaIMO8Tset9JAHfEBid25c=)
                          3: fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl (hash: APz2odKaUzBQzYXcDozgPnn6ixUAnyJBtO6XSNa/OpM=)
                          4: mlq23mwn4gLppdq_n5N8dl-i1JU.roa (hash: mWWAMciQpKRURn7RkDiPvmb9dly+JR/rksPzC6qiQJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:ff:65:b7:bd:9c:5e:67:3b:52:7b:d5:18:12:7e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
        Validity
            Not Before: Oct 13 16:01:32 2026 GMT
            Not After : Oct 14 16:01:32 2026 GMT
        Subject: CN=f63177cad81dab0a47613db8bd53c5343b957a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:e4:0d:db:1d:33:20:c6:96:32:f7:dd:de:
                    79:f6:6e:cd:0b:84:4f:2a:59:fb:30:74:be:03:c0:
                    6c:06:00:23:e7:7e:66:b1:20:00:d9:10:86:18:98:
                    01:fd:8d:02:d0:0f:2b:04:a4:0a:bc:4b:60:13:e4:
                    45:8a:12:c6:c1:78:12:cf:70:a5:10:23:f2:1a:00:
                    40:25:2b:46:27:37:14:8c:d9:4a:ed:cd:68:f7:6c:
                    00:4f:88:42:e8:1c:c2:eb:d7:f0:61:ff:fa:61:91:
                    94:8f:a8:48:4d:fd:86:b5:28:7b:b2:4d:46:3d:d5:
                    5d:89:b5:a6:8a:90:f6:3e:a9:9d:6a:af:f2:93:a2:
                    c3:b6:8c:4b:4b:11:0e:be:21:f4:fd:a9:41:d1:65:
                    93:46:65:8c:7d:72:49:e1:0a:cc:35:2d:05:24:57:
                    46:4b:68:67:bd:8a:90:72:39:02:a2:84:33:dc:38:
                    b2:d5:28:b5:bb:96:fd:16:1f:3b:27:3f:70:7d:a4:
                    f8:a7:ff:c8:98:52:7d:8d:00:8a:63:15:ef:27:55:
                    26:be:4f:1f:2f:7b:d9:71:70:30:07:ac:a4:54:f8:
                    c2:b9:c1:ca:04:ad:9f:bd:de:fe:f4:5d:62:4b:07:
                    00:d2:40:ec:fd:28:3c:f9:11:30:85:14:a8:2a:c4:
                    c1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:31:77:CA:D8:1D:AB:0A:47:61:3D:B8:BD:53:C5:34:3B:95:7A:4E
            X509v3 Authority Key Identifier:
                keyid:7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:67:39:63:05:5c:59:3a:f6:6d:f5:d0:23:db:c6:cf:24:4a:
         81:fc:6a:96:2d:38:36:69:73:ef:3e:d7:dd:04:2c:14:2c:c9:
         9b:22:63:a5:5c:dd:ac:61:fa:6d:ec:6b:ed:fc:98:d2:a9:c4:
         5f:26:e0:08:de:3d:5e:05:16:ad:7e:55:ab:e0:14:af:3d:3a:
         b7:fb:fb:ef:f4:1c:e6:8b:2b:6a:7c:00:b8:44:87:61:41:fd:
         9a:a4:8e:39:cd:14:77:c3:e4:46:a6:0e:fa:b4:ab:83:30:b9:
         05:7b:2a:ce:10:8a:b1:c5:d3:a2:5d:0f:d6:de:2d:03:05:23:
         4e:20:b1:eb:8a:65:ce:bc:2e:d2:b9:34:75:fa:70:84:28:0a:
         e9:8d:39:34:46:5e:2b:ab:ac:7a:04:e1:68:3b:75:a5:0a:3e:
         7d:f3:fd:6c:b1:a5:ff:8b:16:63:ed:ca:7c:96:cf:3a:dc:48:
         d5:37:16:4b:bc:d9:4f:58:2c:03:b0:b6:9b:9f:2d:10:b1:4b:
         c8:70:75:2e:7c:2d:7d:02:9f:3c:7a:e6:fd:96:3e:5a:55:da:
         35:e3:cc:1e:0e:a3:c4:c1:d2:98:53:1e:c7:9b:b4:ca:1d:50:
         2a:8f:d9:42:7d:9d:49:a2:4d:31:20:c7:d7:fd:28:6d:c8:de:
         81:57:d6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:33:26 2026 by rpki-client