Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
File:                     FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft (raw, json)
Hash identifier:          ftcJyXSm4lkDJ1EgNh/XkEuLsL9Wk7zgBcfxdGM00vE=
Subject key identifier:   8F:E3:2C:97:5E:C1:C9:F9:98:0B:98:4D:31:1A:12:F6:24:F5:67:5C
Authority key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
Certificate issuer:       /CN=153d757b77067befd9446694748ad2b04e97b38c
Certificate serial:       01A12AD64B00070CC0439866A17933A11A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
Manifest number:          1A9D
Signing time:             Sun 11 Oct 2026 12:00:49 +0000
Manifest this update:     Sun 11 Oct 2026 12:00:49 +0000
Manifest next update:     Mon 12 Oct 2026 12:00:49 +0000
Files and hashes:         1: 2_PmjSq2ymAnVudAlocm7T1tmn4.roa (hash: QSuT7TExW9U0JzR64tb3XYLCTidPjZYgevzpEmIents=)
                          2: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl (hash: JdrR7moyG2m6EjIGSh+WFLzOF4YlNU/HwPBlL5/vjfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:d6:4b:00:07:0c:c0:43:98:66:a1:79:33:a1:1a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153d757b77067befd9446694748ad2b04e97b38c
        Validity
            Not Before: Oct 11 12:00:49 2026 GMT
            Not After : Oct 12 12:00:49 2026 GMT
        Subject: CN=8fe32c975ec1c9f9980b984d311a12f624f5675c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:60:7c:8e:06:7f:f7:d2:36:65:bc:e5:f9:
                    da:3d:69:6d:91:42:0b:c4:ee:e9:88:d3:4f:59:b3:
                    4d:ce:a0:84:fa:e6:fc:64:d2:2a:b3:d4:ff:e7:0d:
                    43:53:27:71:83:90:92:64:16:71:c7:e6:d3:bd:fb:
                    72:4c:56:70:50:ca:00:86:e0:48:2c:45:21:47:e1:
                    03:6e:45:01:28:06:c4:22:16:d7:8d:7e:64:98:19:
                    ee:22:1b:7d:bd:7f:ac:26:96:33:f4:f4:57:f2:94:
                    31:89:88:d6:de:c8:5e:a2:c7:82:23:d0:56:66:13:
                    59:e3:a3:a5:9a:df:ee:b7:78:8a:56:75:4c:0a:1f:
                    fa:a6:d7:c4:da:56:7e:2e:fd:64:e8:02:e2:2a:c1:
                    f9:39:64:ab:e5:b6:11:ca:61:e6:c8:03:44:93:df:
                    c6:2a:67:e8:9c:75:c9:fb:fe:06:87:a4:e0:fd:04:
                    9c:7e:5a:3c:97:a9:d4:6f:f4:32:be:9b:4f:7c:73:
                    a7:c4:ac:6f:c4:b1:a8:bd:a5:71:88:ae:13:88:89:
                    fe:17:b3:14:17:1f:be:50:20:1c:db:ac:99:98:81:
                    f8:f8:18:b3:7a:fc:20:35:b8:10:8c:7a:06:5d:eb:
                    d6:77:e8:dd:48:67:c7:31:fa:45:b1:d0:d3:a7:a3:
                    2b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E3:2C:97:5E:C1:C9:F9:98:0B:98:4D:31:1A:12:F6:24:F5:67:5C
            X509v3 Authority Key Identifier:
                keyid:15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c3:e6:a4:b7:2e:2d:4a:98:1d:fd:32:82:79:b1:7f:f3:aa:
         6e:b4:08:6c:ec:24:ff:4c:29:81:a3:ed:18:77:1a:0a:d4:f6:
         45:f9:d5:81:95:a1:18:71:6d:fe:4b:3c:50:f6:90:8f:1e:7e:
         93:80:4d:5c:2c:78:e7:18:da:f7:f0:07:e1:06:5f:6f:ff:b5:
         16:f1:d5:7d:db:f6:b0:a1:fc:74:4e:b4:af:a6:95:8b:b0:42:
         ea:5e:33:ff:b8:b3:e9:e1:a4:4f:71:7b:51:8e:fd:27:07:f7:
         56:3b:29:b5:50:e6:e7:e5:14:78:dd:96:e5:10:78:32:e8:ae:
         ae:cb:5e:35:a3:00:2b:a2:ba:0b:89:f2:1b:7f:69:27:fe:68:
         5b:ec:20:2a:99:5f:92:ae:fb:8c:27:a1:79:f8:97:af:07:60:
         36:5e:d4:93:87:ca:5b:98:8a:03:24:4a:68:08:92:46:13:03:
         e9:8e:e8:67:6c:df:74:2f:34:10:a8:2c:9e:2e:fe:52:79:77:
         d1:5e:d3:03:05:64:ee:7b:49:4f:9a:53:9e:52:b0:8c:32:c2:
         21:ba:6c:20:7f:7e:14:8f:29:b1:60:cb:88:ab:73:cc:66:0f:
         12:79:ad:c6:63:c8:d5:e3:2e:5e:4e:9a:eb:2c:84:15:3e:6a:
         27:2b:eb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:44:08 2026 by rpki-client