Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File:                     fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier:          p43HgKf9S0ILIrO2078pNmIiC1PMIwqxRLJMdiGWFxM=
Subject key identifier:   59:C6:8D:F1:AD:FD:7B:8D:67:31:17:47:9C:D6:43:E0:31:42:C9:C6
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer:       /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial:       01A141276EE0D046031FCFBC225D71F62324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number:          0BB8
Signing time:             Thu 15 Oct 2026 20:01:05 +0000
Manifest this update:     Thu 15 Oct 2026 20:01:05 +0000
Manifest next update:     Fri 16 Oct 2026 20:01:05 +0000
Files and hashes:         1: Wx2W2x44SbNMpet_nxHfcd54RRg.roa (hash: RaqqpE5anacxSOoNS8mABkC5o0iVF+x65+b349Ql+4w=)
                          2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: jtyoN/0ueCZ1owXbd1L9VZK6FL257HSNTgMTpewY+8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 20:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:41:27:6e:e0:d0:46:03:1f:cf:bc:22:5d:71:f6:23:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
        Validity
            Not Before: Oct 15 20:01:05 2026 GMT
            Not After : Oct 16 20:01:05 2026 GMT
        Subject: CN=59c68df1adfd7b8d673117479cd643e03142c9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:d1:5b:78:7b:d3:6d:ac:a7:24:10:08:be:
                    f0:97:e1:c0:01:bb:97:18:3e:87:76:42:df:2d:e8:
                    4f:7e:d1:a1:7f:25:74:f8:f5:08:e9:70:4f:f8:0a:
                    90:e5:c2:2d:1a:27:69:22:7c:e7:76:1f:7f:32:b8:
                    e1:fa:45:d2:a8:11:af:af:db:76:0f:79:dd:60:3d:
                    b4:58:d4:a0:02:e3:56:c6:90:4a:97:ac:a4:04:ce:
                    5e:e2:b4:db:50:13:21:1e:2b:c8:e2:ab:15:74:9c:
                    4a:d2:4d:74:9e:57:da:17:52:b6:95:71:90:28:ed:
                    9d:1c:c4:44:7e:11:f0:ae:10:92:70:25:16:a4:72:
                    67:c8:6a:f1:e6:c0:e6:25:98:04:54:e2:62:34:86:
                    b1:85:6a:a6:88:9f:ff:60:06:f9:d0:63:bb:54:7f:
                    c0:61:c6:f4:14:39:63:7a:0e:01:0c:47:31:2f:cf:
                    eb:83:aa:50:b8:5b:ff:be:78:56:74:e9:97:a2:2d:
                    54:0a:7a:6e:52:71:97:87:19:d2:9e:9b:f3:ea:81:
                    8a:22:8e:ca:5d:18:6c:b1:84:85:21:1d:34:8f:c0:
                    24:cf:41:13:3f:6f:61:4a:c3:ed:c7:b3:7d:df:fa:
                    4f:17:20:c9:39:5b:89:8c:b1:07:df:54:b2:71:6d:
                    c0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C6:8D:F1:AD:FD:7B:8D:67:31:17:47:9C:D6:43:E0:31:42:C9:C6
            X509v3 Authority Key Identifier:
                keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f5:53:14:85:04:9e:53:ca:38:5e:62:2a:a1:0f:a4:80:09:
         a7:2c:69:c0:53:9c:4c:cb:06:a2:78:77:39:62:d3:db:50:16:
         1a:47:ea:9f:5f:2d:01:b4:65:6d:0e:ee:78:aa:b2:98:77:d8:
         3c:2b:3e:41:76:3d:39:84:fe:18:f5:43:b7:cb:91:5e:4b:23:
         b7:b1:6a:6d:9a:6e:e8:23:05:c6:14:cc:66:0a:51:b2:f4:95:
         33:48:e9:1e:0c:74:27:6c:ff:27:ad:a0:37:da:2c:de:d3:02:
         87:17:d6:4b:d5:41:1c:1c:28:9c:79:37:a7:6c:d9:38:83:82:
         80:4c:78:8a:86:29:4e:b5:b0:fd:41:df:a5:86:12:42:1a:9d:
         8a:ff:ed:c4:cf:b4:87:08:06:d2:4d:fc:23:e4:a8:9e:92:7b:
         95:3b:f4:78:31:cc:53:53:2e:1f:7d:e9:6b:2b:0d:0c:9a:ea:
         31:77:ed:f6:0e:90:70:80:bb:78:c1:c4:cb:42:59:86:79:84:
         a2:0b:c6:1a:75:70:4a:77:13:d6:db:42:b8:5b:9b:eb:6a:c5:
         fd:c6:78:4e:be:0a:23:21:e6:f9:31:a7:3d:8c:90:22:99:b9:
         90:63:8c:db:80:8a:d1:ff:ca:ad:38:9b:9d:66:8a:fa:13:29:
         d0:71:27:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 07:24:07 2026 by rpki-client