Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File:                     fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier:          oGDelAhC9FKLXhl+i3aDGaM6MTf06cF+YXHTQSo6bQQ=
Subject key identifier:   B3:00:CB:3F:8A:F2:CD:B6:AF:10:4A:C1:21:48:9C:81:F1:60:39:27
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer:       /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial:       01A138C8DC1DCB6AA4A2F225F2B6DC616D64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number:          1AB4
Signing time:             Wed 14 Oct 2026 05:00:50 +0000
Manifest this update:     Wed 14 Oct 2026 05:00:50 +0000
Manifest next update:     Thu 15 Oct 2026 05:00:50 +0000
Files and hashes:         1: 8dUy_LeA_dHCwYCNdghObTD8feU.roa (hash: op6GapHbefJigi80QGwl7q9Vvm0nS8W9VoaYmo2946I=)
                          2: CC5UwMnAe_xw2dxWGjuHWBZ2TiQ.asa (hash: xpf2R57bTXmJ1MaeU2UGoiTPgRcpAPP231jE/R1hn2Q=)
                          3: Dv3KZYdu5waqli9OHwbfNLsm1-w.asa (hash: 0JCADoaSayhKJcTjJwIBVvTlqp1OlBxFMWr11L68sJc=)
                          4: eqrrcgpV7KMv4JmUrXLZ3oF-OyU.roa (hash: UrbDaV7HIRd1q7wUvTKt2CvJ/ULBsWT3eeR6F33PH8c=)
                          5: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: GsN2wZQbxht2ps66xUTi2flHJ6csIBjPD8//ocyApKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:38:c8:dc:1d:cb:6a:a4:a2:f2:25:f2:b6:dc:61:6d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
        Validity
            Not Before: Oct 14 05:00:50 2026 GMT
            Not After : Oct 15 05:00:50 2026 GMT
        Subject: CN=b300cb3f8af2cdb6af104ac121489c81f1603927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:df:d1:6d:c9:96:62:f1:20:1f:c7:9d:80:8b:
                    d8:1c:d1:d6:1a:23:39:ca:8f:70:54:4a:4d:67:b8:
                    17:1c:9d:8e:e7:d0:37:fa:7e:58:21:ac:03:d9:31:
                    74:dd:b5:7b:e4:e7:e1:05:90:a6:8b:14:ab:f1:51:
                    bc:fc:6b:d6:4c:7d:70:72:ef:ca:18:d7:26:5c:d4:
                    53:aa:10:37:ec:80:e2:27:87:c2:53:ed:df:4e:e7:
                    4a:8a:03:67:50:e4:6b:df:05:81:ed:4b:ba:20:0b:
                    63:64:49:65:26:de:ab:1a:26:a1:26:2b:97:1b:ab:
                    79:85:c5:bf:6d:49:75:6a:49:a0:12:74:b0:91:3a:
                    ce:b3:a6:59:eb:94:3b:e7:13:15:55:bc:70:62:81:
                    c9:09:43:9c:f5:7c:bd:c1:7f:eb:ce:60:67:78:9f:
                    c0:bd:6d:52:47:29:12:3c:34:13:a9:40:03:eb:12:
                    dd:0e:f6:b2:fb:a2:70:ed:58:8a:5c:74:0a:91:5b:
                    54:b0:54:99:d7:2d:1b:90:c2:2a:d8:4e:d3:a0:43:
                    66:a8:b7:b1:46:d4:66:9a:93:9d:d1:04:e6:41:da:
                    5d:7f:bb:57:17:55:16:64:92:ca:2d:d5:77:e7:d4:
                    8c:ed:1d:64:c1:38:99:22:aa:e0:3a:7d:ae:5b:ae:
                    61:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:00:CB:3F:8A:F2:CD:B6:AF:10:4A:C1:21:48:9C:81:F1:60:39:27
            X509v3 Authority Key Identifier:
                keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:55:ec:e5:c5:0c:de:9b:3d:2b:bc:39:a7:77:5a:d5:e1:22:
         4a:29:32:54:cb:22:a8:dd:96:91:74:c8:95:26:a0:01:a6:58:
         90:2c:e2:b3:15:c3:53:23:f9:86:3c:8b:56:9e:69:f9:eb:5e:
         b6:06:b1:66:ab:73:52:e0:d0:ab:3a:4d:fc:42:ba:7b:e3:57:
         de:c3:df:50:38:da:a8:2b:c2:35:51:33:25:dc:50:84:83:91:
         fa:f5:23:1b:33:68:71:27:eb:66:59:e3:4f:31:46:ee:06:11:
         09:78:8a:e5:f1:1d:fb:81:7f:78:a4:b3:18:de:7e:16:93:41:
         f6:36:d6:37:4c:5c:fc:da:d8:bc:ca:d7:9c:4c:46:a1:c1:62:
         8c:a7:1b:c6:67:f1:60:4b:b8:1d:5f:d1:ae:1b:ec:bd:0c:94:
         ca:24:90:46:65:1b:32:ff:ef:61:c5:e8:fa:b6:c4:6c:1b:c5:
         f0:fa:77:9f:20:47:a2:cc:73:7a:72:98:5f:68:aa:ba:a6:fb:
         32:44:98:46:7b:8f:9d:87:65:96:43:7b:86:28:d0:63:8b:38:
         95:77:e1:eb:5d:69:b9:8d:c8:db:19:e2:f9:8c:6d:64:3c:3f:
         07:10:14:ce:14:50:dd:bd:3d:d1:53:7c:a7:24:4b:e4:72:a4:
         99:92:83:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:20:32 2026 by rpki-client