Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File:                     FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier:          FAbr8QqUBpQyWocT8VtBpDM4+DhowgE4P0VrkKJbUfc=
Subject key identifier:   5B:AC:04:54:93:6C:A3:46:BC:7E:46:A0:61:C6:94:70:36:F4:3E:FE
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer:       /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial:       01A102B6CCD8CA21E9E90CD18367CB60706B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number:          078D
Signing time:             Sat 03 Oct 2026 17:01:36 +0000
Manifest this update:     Sat 03 Oct 2026 17:01:36 +0000
Manifest next update:     Sun 04 Oct 2026 17:01:36 +0000
Files and hashes:         1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: bpEXotrqubHzvvOmEa82nMKxJGrxSuGv6hEFWsyTSlI=)
                          2: Zrn84WYyrZEtX6PAfEnPVWtayZU.roa (hash: jSh/SHE78mPArHOipqPD4fmSLw8Ki+Bi/6/NXvqBAjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:b6:cc:d8:ca:21:e9:e9:0c:d1:83:67:cb:60:70:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
        Validity
            Not Before: Oct  3 17:01:36 2026 GMT
            Not After : Oct  4 17:01:36 2026 GMT
        Subject: CN=5bac0454936ca346bc7e46a061c6947036f43efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:3a:a5:88:b3:d5:31:f4:c8:ec:e8:b4:75:
                    fb:35:37:f4:17:8a:83:86:b3:2d:d7:9d:a5:38:26:
                    93:21:97:11:47:77:76:c2:cd:b4:ad:fb:8d:d8:38:
                    2b:9a:12:d5:44:46:10:02:d1:1d:13:5a:12:a2:fa:
                    d2:a1:f5:25:ce:6f:6f:7b:97:c1:b1:fb:03:08:fc:
                    09:ba:d6:e6:db:16:3d:7d:12:ad:22:12:e3:7a:a6:
                    85:36:7e:1d:1e:c6:33:50:33:52:1c:18:5c:a7:3d:
                    cb:e2:19:b8:e4:69:7a:4d:4d:6c:0f:ac:be:0f:a6:
                    a2:62:93:df:d5:ad:f4:e6:9d:c8:7c:54:f4:6a:cf:
                    fe:f7:19:aa:2f:22:1a:51:1c:8e:da:2e:0a:32:ce:
                    38:3a:81:56:0b:73:29:eb:bb:4f:00:a7:eb:12:15:
                    24:a1:6b:2c:8a:7e:00:98:98:d6:df:20:76:cc:db:
                    8a:05:60:68:a5:1b:e9:69:7f:a5:d6:86:a8:f7:68:
                    62:ac:44:31:a6:23:46:37:8b:d2:a5:8f:82:df:9f:
                    6c:8a:f3:21:28:60:66:c5:c8:be:51:ac:de:56:0e:
                    d8:f0:db:c7:44:67:a5:01:65:68:57:eb:2a:2b:43:
                    e7:50:cd:75:a1:2d:19:c8:22:9d:34:8b:7f:0e:5a:
                    e9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AC:04:54:93:6C:A3:46:BC:7E:46:A0:61:C6:94:70:36:F4:3E:FE
            X509v3 Authority Key Identifier:
                keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:be:e2:d4:d1:b9:f3:47:36:10:30:c5:10:41:10:3d:80:60:
         77:15:bc:02:54:01:dc:65:35:e6:fb:a8:d8:e0:79:69:4d:8c:
         55:46:08:cd:cc:10:da:1a:f0:ea:dd:d8:58:a7:0a:c0:c6:e9:
         51:50:a4:e9:41:a3:ce:36:3d:e5:2e:f4:bf:70:9c:8c:c2:b4:
         e0:f1:9e:c1:6f:d9:f4:c1:c4:c0:ca:c4:97:bf:cd:67:02:4d:
         f6:4c:77:d6:20:ae:c2:9b:99:dd:db:34:1e:a3:69:ec:a5:bd:
         33:34:08:81:b5:c9:a1:3f:b4:23:26:33:e0:39:29:d8:6a:6c:
         f7:e2:8f:52:c3:e4:ef:a7:c0:5d:a6:1a:07:8c:98:9b:ba:26:
         41:25:80:e3:76:a9:c9:83:09:26:08:f2:32:ed:35:99:27:8a:
         be:2e:00:f8:23:f7:d5:24:43:22:39:66:93:e7:4b:c3:01:d7:
         74:66:fb:2d:cc:35:f2:ef:64:dd:7c:f1:b2:89:6c:97:2d:5d:
         a5:c8:7f:77:c2:af:51:9a:41:b3:86:d9:23:6c:2c:a4:6e:8b:
         55:e2:f4:02:e6:f3:c3:9c:2e:6f:00:c6:f5:dc:36:84:d8:3a:
         43:8a:0c:fc:00:17:a1:19:57:54:67:b1:9c:63:f4:d2:5d:71:
         da:4b:53:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:46:40 2026 by rpki-client