Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
File:                     fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json)
Hash identifier:          9m26B/8KIwITP3blENcgeblvnYaJLznGsbo9GoXGF0A=
Subject key identifier:   B4:3A:22:7D:4C:52:65:65:ED:2A:19:01:08:53:42:DA:12:6D:0A:0A
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Certificate issuer:       /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial:       01A13033A9D30221AF5802BB22D690F7AD35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
Manifest number:          0EC4
Signing time:             Mon 12 Oct 2026 13:00:54 +0000
Manifest this update:     Mon 12 Oct 2026 13:00:54 +0000
Manifest next update:     Tue 13 Oct 2026 13:00:54 +0000
Files and hashes:         1: 08gQk2AeldcK_y6tYivNi31VDhw.roa (hash: iDSr2+dL188PsGjLi4V4pKrhdyzfHy95/dG6MIkWF8U=)
                          2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: jAsM0aHfnpgxrf6DGPIKFQPnkm+GW/mp0G6IBAHwev4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:33:a9:d3:02:21:af:58:02:bb:22:d6:90:f7:ad:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
        Validity
            Not Before: Oct 12 13:00:54 2026 GMT
            Not After : Oct 13 13:00:54 2026 GMT
        Subject: CN=b43a227d4c526565ed2a1901085342da126d0a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:99:44:38:86:c7:a5:1f:9a:74:93:2d:f7:ed:
                    a3:e1:c9:34:44:df:da:3e:32:f3:42:38:e4:da:91:
                    3a:2d:57:39:c4:30:c0:23:50:95:d2:2d:a7:97:ac:
                    e0:21:f2:ef:41:a0:70:33:7b:e3:16:26:56:4b:b3:
                    13:aa:49:0a:91:2a:e2:f3:52:ba:53:15:16:01:f1:
                    c2:d4:37:6f:e6:a1:f1:20:ab:b6:8c:2b:f8:cd:4c:
                    db:29:25:c4:95:da:be:46:31:30:b7:5f:77:3b:37:
                    bf:13:03:62:56:78:54:9f:86:16:9b:7c:de:b1:98:
                    34:b7:b4:6e:1c:49:1c:1b:d8:20:8f:94:7a:ab:36:
                    40:fc:1d:60:f0:ec:86:7a:82:c6:18:7f:37:b5:84:
                    72:d3:a4:89:c8:56:66:b7:75:a2:36:56:10:8d:77:
                    2a:77:2e:61:e6:a8:75:3c:04:88:5b:de:34:68:a2:
                    42:dc:bd:de:d0:b5:ee:0e:67:f3:11:53:c5:08:14:
                    3f:e8:0e:bc:c0:71:70:64:3e:57:23:a4:63:5f:4c:
                    86:09:3a:e8:2a:bd:ed:24:2c:09:78:2f:ad:68:ab:
                    81:e5:fb:92:9a:31:01:26:8c:5f:dd:ef:ef:f3:de:
                    b3:cd:64:06:fd:0c:cb:88:71:9c:05:cb:99:0b:99:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3A:22:7D:4C:52:65:65:ED:2A:19:01:08:53:42:DA:12:6D:0A:0A
            X509v3 Authority Key Identifier:
                keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:22:53:c7:67:47:ad:e4:77:c9:e7:4b:b3:ec:b7:f2:55:20:
         f0:ce:36:5a:a0:68:96:18:ae:0b:31:e4:95:8a:9a:bb:36:09:
         e8:c5:9e:15:6a:97:d5:41:46:25:c9:cc:c5:c1:b3:da:a5:6f:
         6c:0a:ad:2e:08:7c:d7:e3:e7:da:ab:ef:e7:1f:44:7d:98:3e:
         69:b3:b2:be:c3:f2:f0:cd:ab:62:60:ef:51:71:90:a4:89:9b:
         55:ad:df:20:47:8d:ad:6a:f1:26:10:3f:6a:26:92:93:cf:af:
         5e:4a:7a:29:97:2f:49:8a:d7:57:8a:4f:71:ce:4d:27:e1:07:
         01:f9:9b:72:47:d3:12:ea:8a:e0:78:73:7b:42:de:2c:95:65:
         87:e4:eb:a2:40:a8:fd:41:45:02:eb:d6:a3:67:04:96:70:92:
         1a:fc:ec:35:15:5a:60:66:46:44:11:86:ca:c1:0b:f3:33:f4:
         ce:6f:70:a9:50:e4:5a:96:36:5d:83:b1:8c:24:cd:e6:3e:6b:
         c1:b9:21:3f:65:71:75:a4:74:59:06:e4:32:b8:39:24:04:cf:
         16:65:d7:58:26:5e:ea:6d:ea:46:04:43:8b:71:7d:86:2f:17:
         52:df:f4:6f:67:8e:2d:4d:38:56:e2:11:7e:5f:00:2e:1d:54:
         9f:6c:3a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:02:24 2026 by rpki-client