Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
File:                     fEn63vQJ71hdX0o1su85SbWZxUc.mft (raw, json)
Hash identifier:          s3q0esRI6og5uQMlqjZ0iARsVSUsZbINXDYC/tjA3x4=
Subject key identifier:   18:05:03:DE:3B:6E:5E:6A:4A:6A:9B:6E:5F:A1:31:8A:9F:3C:D2:2A
Authority key identifier: 7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47
Certificate issuer:       /CN=7c49fadef409ef585d5f4a35b2ef3949b599c547
Certificate serial:       01A12F57DEB3A35B47BF002BE30E6A5F1C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
Manifest number:          01F2
Signing time:             Mon 12 Oct 2026 09:00:50 +0000
Manifest this update:     Mon 12 Oct 2026 09:00:50 +0000
Manifest next update:     Tue 13 Oct 2026 09:00:50 +0000
Files and hashes:         1: Kfv8pSzvP6yGqpNKWB0u9MATNiE.asa (hash: K8Z32NZvPzbYmVaeeJNzMlZvkbrlXgcqv646vOrcs/Y=)
                          2: fEn63vQJ71hdX0o1su85SbWZxUc.crl (hash: Wa+CFBzkVCgYYB5hUrwKPTD4S0rri4IlgP7EB64Qgpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2f:57:de:b3:a3:5b:47:bf:00:2b:e3:0e:6a:5f:1c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c49fadef409ef585d5f4a35b2ef3949b599c547
        Validity
            Not Before: Oct 12 09:00:50 2026 GMT
            Not After : Oct 13 09:00:50 2026 GMT
        Subject: CN=180503de3b6e5e6a4a6a9b6e5fa1318a9f3cd22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7a:f2:12:84:9b:12:74:61:09:f1:89:cd:1d:
                    f5:d0:8c:6c:f7:22:b4:4c:ce:8e:f1:62:45:19:99:
                    a8:0f:1c:92:77:e8:82:72:7b:91:c1:87:c3:c8:92:
                    39:57:95:e4:15:51:4e:67:d8:e9:18:5e:bb:93:56:
                    2c:06:fa:53:a2:83:9a:3e:7f:ec:06:71:24:4f:0d:
                    47:31:7c:1f:d2:e3:6a:b1:7f:80:7e:a0:5e:51:86:
                    6e:9d:b4:10:b9:17:f9:8c:e9:92:15:08:94:f5:07:
                    26:55:a9:ad:1d:cd:fe:05:68:34:e2:d0:eb:e4:0f:
                    05:8d:55:82:68:96:f9:26:66:bf:1e:cc:4a:d4:df:
                    e2:7f:68:6d:04:22:1c:78:95:f6:44:68:eb:51:3b:
                    d8:89:af:8d:44:2a:a2:96:d8:2e:5f:6a:c8:13:e5:
                    f0:e0:e0:32:22:e1:e5:3b:91:8d:88:5d:fa:60:5f:
                    53:31:33:ae:e4:0d:7e:17:35:5c:21:16:a9:52:a8:
                    bc:13:e1:a0:4c:88:6c:4a:61:8c:50:d9:ce:df:b2:
                    84:85:d0:cc:cc:d9:0c:75:36:7e:40:16:e9:0e:27:
                    aa:4d:bb:96:99:42:99:e1:31:38:01:60:e8:57:92:
                    81:60:68:ef:89:da:a5:50:58:6f:de:a9:ad:6c:58:
                    a0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:05:03:DE:3B:6E:5E:6A:4A:6A:9B:6E:5F:A1:31:8A:9F:3C:D2:2A
            X509v3 Authority Key Identifier:
                keyid:7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a4:d9:43:4a:0e:f3:52:a6:78:89:7c:ef:f8:46:a9:7e:10:
         59:57:7b:0d:70:a1:29:46:37:3d:0a:19:95:5f:1d:0d:81:30:
         26:55:4c:7c:8c:20:7e:c9:a0:06:66:4b:54:18:f1:bb:fe:c2:
         7a:d2:74:39:77:91:98:08:d5:3e:0f:6a:09:92:fa:ff:29:6d:
         36:ec:80:0f:98:7b:7c:20:d7:e8:4b:51:9b:23:25:f1:f6:fb:
         f5:1d:fd:80:c4:5f:47:20:fb:ac:44:6f:b0:85:af:14:46:b0:
         29:a1:23:50:24:9d:e7:a9:72:c4:10:e4:25:66:78:61:95:32:
         6f:d3:55:17:8f:ef:b2:09:39:64:6e:d1:06:7a:96:e0:38:23:
         6f:d0:6e:e7:1a:39:03:65:47:ef:9e:5b:81:ab:21:f6:93:a4:
         20:b7:9e:0e:77:02:18:4d:76:89:63:fd:85:f6:f4:ae:87:d9:
         4a:7c:7b:9f:3d:3d:5a:eb:21:12:3b:2b:5d:e1:c8:70:77:75:
         ec:cb:05:c9:8b:91:86:6d:42:9b:0d:96:36:97:ea:17:af:a3:
         ce:cc:94:97:59:74:01:51:9f:91:df:89:49:35:3e:12:a6:6d:
         77:c8:c4:9a:10:a5:18:30:cd:d9:f8:1d:8d:7c:eb:ad:41:4b:
         d0:c0:a1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:49:36 2026 by rpki-client