Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.mft
File:                     fYud7bGKYodS65sTq1OnsFxrvPs.mft (raw, json)
Hash identifier:          HBF+RJv2vcobbfeuEJ4zP7F/oXpcbS5YSUcSPgT+Gys=
Subject key identifier:   1F:62:47:AE:F4:F6:3D:50:40:41:7E:4E:68:7E:4D:04:CD:B0:16:62
Authority key identifier: 7D:8B:9D:ED:B1:8A:62:87:52:EB:9B:13:AB:53:A7:B0:5C:6B:BC:FB
Certificate issuer:       /CN=7d8b9dedb18a628752eb9b13ab53a7b05c6bbcfb
Certificate serial:       01A1291F4ED110FA9AF9A482B575A73685F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fYud7bGKYodS65sTq1OnsFxrvPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.mft
Manifest number:          0111
Signing time:             Sun 11 Oct 2026 04:01:19 +0000
Manifest this update:     Sun 11 Oct 2026 04:01:19 +0000
Manifest next update:     Mon 12 Oct 2026 04:01:19 +0000
Files and hashes:         1: DCgkXKWju9a74f-BD7pwB2qA-Ek.roa (hash: 0lPyy+XVCSUybo3UvnbvK+AwH8B8KKxXnQhU2cV9IB0=)
                          2: fYud7bGKYodS65sTq1OnsFxrvPs.crl (hash: oVo6g9G4JMTM1WHlCckI46XkwQceydA0xmTAenVrZCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fYud7bGKYodS65sTq1OnsFxrvPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:1f:4e:d1:10:fa:9a:f9:a4:82:b5:75:a7:36:85:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d8b9dedb18a628752eb9b13ab53a7b05c6bbcfb
        Validity
            Not Before: Oct 11 04:01:19 2026 GMT
            Not After : Oct 12 04:01:19 2026 GMT
        Subject: CN=1f6247aef4f63d5040417e4e687e4d04cdb01662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:0d:ae:ef:df:d3:07:5c:ce:8f:fc:e4:89:
                    d0:b1:e1:a5:07:84:5c:fb:b0:62:e9:aa:bf:e9:60:
                    ea:c2:44:5c:a8:db:ea:cc:0a:e5:56:47:4a:41:f5:
                    98:32:1f:5b:1b:81:bc:66:db:d2:a5:97:8e:e4:52:
                    1e:e0:07:33:11:1e:55:ff:4d:41:76:3d:e6:6b:3d:
                    c1:78:f7:06:06:35:4a:0b:12:dc:70:6f:2c:e7:d8:
                    0f:b0:76:e7:71:dc:c5:e7:3d:26:9f:4d:46:72:9e:
                    1e:d8:73:6e:b8:fe:8a:86:e4:34:19:1e:3e:c3:61:
                    a5:ee:4f:88:5e:6c:51:66:1a:bf:7d:d2:c4:7e:1b:
                    d9:ce:9d:69:cb:59:b5:8f:ca:27:84:0d:95:a2:a4:
                    39:81:11:a1:13:9e:4a:4f:9b:4e:87:c4:fc:3e:5f:
                    e7:30:1b:79:f0:c8:94:e1:ef:8a:25:ff:d5:f3:78:
                    51:ba:88:ef:d0:60:80:5e:44:99:02:be:5b:7e:24:
                    b3:c9:55:a9:5f:45:4e:cc:81:8b:42:12:04:d3:7a:
                    e0:5d:ab:97:fc:52:4a:0f:93:eb:b2:e6:00:d8:82:
                    9b:40:d5:52:ad:76:f6:a7:07:f4:d2:d2:cc:e7:95:
                    ca:83:7f:d7:97:92:bb:b3:39:b3:e8:60:cc:6a:a1:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:62:47:AE:F4:F6:3D:50:40:41:7E:4E:68:7E:4D:04:CD:B0:16:62
            X509v3 Authority Key Identifier:
                keyid:7D:8B:9D:ED:B1:8A:62:87:52:EB:9B:13:AB:53:A7:B0:5C:6B:BC:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYud7bGKYodS65sTq1OnsFxrvPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:37:a9:c2:b7:dd:a1:7d:6d:73:cb:15:31:6e:8d:cc:35:b8:
         90:e0:14:ae:86:45:51:25:16:4e:8a:da:4f:52:4a:3d:24:50:
         be:5f:97:ff:6c:ef:4d:5a:4d:f0:bc:8f:21:47:17:95:82:99:
         aa:d1:ff:de:90:16:cb:97:d6:0f:39:1f:d2:8e:31:75:be:12:
         1d:e7:8a:a3:74:7b:0c:be:7b:6a:5d:11:b6:bc:8f:07:b7:a0:
         03:40:96:06:dd:85:71:bb:b1:aa:1d:43:dc:05:6c:aa:ac:32:
         e5:a6:06:3c:49:84:89:9d:18:bd:06:5c:0b:de:a2:ac:2d:c2:
         bf:fb:d1:89:4b:97:e8:c3:34:63:55:28:ca:81:7d:65:ef:90:
         aa:08:58:95:54:1f:ac:07:32:f8:23:7b:a7:57:21:73:07:f1:
         2a:54:c4:97:5c:14:2e:9a:9e:f7:90:75:f8:f2:f7:88:25:7b:
         6d:88:6e:f1:5a:e6:a1:8a:4d:d0:4b:89:ad:22:b2:57:10:88:
         56:9b:b0:8a:54:e7:d0:c3:2a:8e:d7:c4:69:c6:ec:7b:ba:57:
         73:d6:62:b8:1f:99:53:ba:a9:13:8c:9c:10:dd:4f:a7:1d:22:
         e2:8c:93:56:dd:43:c8:27:3a:1e:1d:3d:2d:bc:14:ab:69:b0:
         d3:05:9b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:47:35 2026 by rpki-client