Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File:                     fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier:          3lkNU4vu5uTCwRD9Olf8+Yaes8wYSVqI/+Fw3uP33Mg=
Subject key identifier:   69:9F:3A:FC:F0:A6:08:D1:BD:61:96:2B:69:0B:1F:3D:51:63:6A:A4
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer:       /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial:       01A1434D3B9781BF45A6406CA65D16E5F01E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number:          1380
Signing time:             Fri 16 Oct 2026 06:01:37 +0000
Manifest this update:     Fri 16 Oct 2026 06:01:37 +0000
Manifest next update:     Sat 17 Oct 2026 06:01:37 +0000
Files and hashes:         1: MSIj_pvmmWV611TPzznzhVyMajg.roa (hash: lcZd6Vsmhq0WpZpZ2lk/ey8tKSzoVTxP11Cj84fNRNQ=)
                          2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: GrXYjak6q8yMTudxG0E7zCyasrz0Ya6tsvaO5RCDa0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:43:4d:3b:97:81:bf:45:a6:40:6c:a6:5d:16:e5:f0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
        Validity
            Not Before: Oct 16 06:01:37 2026 GMT
            Not After : Oct 17 06:01:37 2026 GMT
        Subject: CN=699f3afcf0a608d1bd61962b690b1f3d51636aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bc:fc:64:28:27:6b:4d:c6:1d:a7:7d:17:33:
                    ea:80:17:2d:85:54:b2:ce:af:18:70:2c:ee:40:c5:
                    6d:80:ee:e6:b0:88:f2:1a:90:93:87:3e:f5:97:54:
                    04:8a:49:ed:c6:0c:3c:67:8b:1c:4f:72:cd:e8:3c:
                    ca:0b:23:14:c5:92:1d:eb:06:d3:2f:28:64:5f:66:
                    48:b8:e7:f9:58:e4:28:ac:ab:c1:2e:d0:57:a4:d9:
                    6c:77:70:e9:fd:7c:0c:d1:89:ef:65:dc:93:02:10:
                    53:4c:9a:5a:71:3d:fc:2e:1f:d8:eb:59:9e:fb:77:
                    9c:0b:e2:b9:5e:f5:81:cf:ee:95:52:06:a0:5c:bf:
                    1e:92:be:30:81:e5:5f:f6:c7:5c:9c:d2:4f:b2:3f:
                    84:31:f0:f6:99:02:8c:c6:54:cb:a8:04:99:11:52:
                    4c:17:69:b5:80:09:de:52:67:3c:22:e1:72:17:c9:
                    6e:77:84:6d:bd:32:7c:ca:cd:7d:ff:d3:87:50:3e:
                    92:0b:c3:bf:5a:54:c1:c7:62:69:73:7a:ac:b9:cd:
                    2a:74:04:f3:85:83:42:60:64:d2:1e:88:e0:14:e9:
                    ac:db:9f:c7:d6:5b:10:60:1a:18:cb:d2:bb:70:8c:
                    23:b5:a6:62:af:64:ac:d3:bc:7e:a8:96:e6:24:ca:
                    66:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9F:3A:FC:F0:A6:08:D1:BD:61:96:2B:69:0B:1F:3D:51:63:6A:A4
            X509v3 Authority Key Identifier:
                keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c2:c4:c6:dd:e4:12:ef:34:c5:f3:b9:3e:a2:ca:a9:5c:2f:
         f6:42:81:43:fe:dc:50:d3:d6:3e:e2:49:38:79:c6:a3:4f:fe:
         5b:8e:b8:52:e4:75:38:4b:ac:1c:fe:2a:b3:4e:0c:88:23:68:
         f0:5a:b9:ff:42:33:40:e1:be:9c:f9:4e:1e:0c:cf:20:00:33:
         b9:0c:db:1b:ea:22:47:56:25:4a:1f:ca:f9:6d:bf:36:f2:f5:
         44:6a:8b:a7:0f:99:31:e3:a8:44:5f:43:6e:93:d3:9d:57:30:
         ab:7a:fe:0d:ce:ed:a0:25:76:a3:af:c7:71:6b:02:04:e9:95:
         48:78:0b:e0:8a:58:e3:c7:61:3f:e4:b8:b0:da:89:b4:bd:5f:
         ed:80:e6:e2:b1:1c:11:76:6d:fd:40:0b:9b:85:e6:a4:87:54:
         26:1c:93:c2:70:4c:f2:60:66:7c:26:73:7f:23:f7:52:1d:ab:
         c7:29:9c:71:28:16:57:56:8f:71:9a:2e:f4:79:0d:c6:f6:84:
         d8:c5:2e:22:55:ca:7f:53:87:76:c1:8e:b5:4c:ce:97:81:05:
         8d:6b:49:dc:31:17:a0:f0:f8:06:86:2b:2b:ec:74:27:40:a4:
         75:80:aa:6b:a0:e6:95:4f:97:ca:6c:4b:cb:48:ae:f9:41:5d:
         03:b6:39:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFDTTuXgb9FpkBspl0W5fAeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNjZkMTllNTM4OGYxMmMxZDI4YTE2YzMyOGQ4NmMzNjRl
OWNjNzkwHhcNMjYxMDE2MDYwMTM3WhcNMjYxMDE3MDYwMTM3WjAzMTEwLwYDVQQD
Eyg2OTlmM2FmY2YwYTYwOGQxYmQ2MTk2MmI2OTBiMWYzZDUxNjM2YWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrz8ZCgna03GHad9FzPqgBcthVSy
zq8YcCzuQMVtgO7msIjyGpCThz71l1QEikntxgw8Z4scT3LN6DzKCyMUxZId6wbT
LyhkX2ZIuOf5WOQorKvBLtBXpNlsd3Dp/XwM0YnvZdyTAhBTTJpacT38Lh/Y61me
+3ecC+K5XvWBz+6VUgagXL8ekr4wgeVf9sdcnNJPsj+EMfD2mQKMxlTLqASZEVJM
F2m1gAneUmc8IuFyF8lud4RtvTJ8ys19/9OHUD6SC8O/WlTBx2Jpc3qsuc0qdATz
hYNCYGTSHojgFOms25/H1lsQYBoYy9K7cIwjtaZir2Ss07x+qJbmJMpmgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmfOvzwpgjRvWGWK2kLHz1RY2qkMB8GA1UdIwQY
MBaAFH1m0Z5TiPEsHSihbDKNhsNk6cx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hY2U5YmQtZjMzZC00ODZlLWIzOTQt
ZjBkMDc1YTQzN2YxLzEvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9hY2U5YmQtZjMzZC00ODZlLWIzOTQtZjBkMDc1YTQzN2Yx
LzEvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcLExt3k
Eu80xfO5PqLKqVwv9kKBQ/7cUNPWPuJJOHnGo0/+W464UuR1OEusHP4qs04MiCNo
8Fq5/0IzQOG+nPlOHgzPIAAzuQzbG+oiR1YlSh/K+W2/NvL1RGqLpw+ZMeOoRF9D
bpPTnVcwq3r+Dc7toCV2o6/HcWsCBOmVSHgL4IpY48dhP+S4sNqJtL1f7YDm4rEc
EXZt/UALm4XmpIdUJhyTwnBM8mBmfCZzfyP3Uh2rxymccSgWV1aPcZou9HkNxvaE
2MUuIlXKf1OHdsGOtUzOl4EFjWtJ3DEXoPD4BoYrK+x0J0CkdYCqa6DmlU+XymxL
y0iu+UFdA7Y5EA==
-----END CERTIFICATE-----
Generated at Fri Oct 16 12:59:30 2026 by rpki-client