Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft
File:                     fYtUoMG_jx-cTJVpuXXKRuuobOc.mft (raw, json)
Hash identifier:          8LsWyUjx0kf6hQor7AFgufNdj5IZUBSW0PqbnfrUoFc=
Subject key identifier:   92:D3:A6:5C:A3:D1:6E:13:14:E4:C6:E0:C1:DD:B3:9D:B6:18:ED:FB
Authority key identifier: 7D:8B:54:A0:C1:BF:8F:1F:9C:4C:95:69:B9:75:CA:46:EB:A8:6C:E7
Certificate issuer:       /CN=7d8b54a0c1bf8f1f9c4c9569b975ca46eba86ce7
Certificate serial:       01A12DD78731CA6DC1D30E8F441ABB22B8D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft
Manifest number:          0324
Signing time:             Mon 12 Oct 2026 02:01:01 +0000
Manifest this update:     Mon 12 Oct 2026 02:01:01 +0000
Manifest next update:     Tue 13 Oct 2026 02:01:01 +0000
Files and hashes:         1: E4vgDonGFwNwjK_782wy6mhs-Zg.asa (hash: KvroKAbY4rQnB8oKcM2t9KvuBquqnspEXF5xTWL7xqU=)
                          2: fYtUoMG_jx-cTJVpuXXKRuuobOc.crl (hash: kEExT/QycFhYNPruli86sLNgxCWQ9ov16w4UvpuOQoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 22:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2d:d7:87:31:ca:6d:c1:d3:0e:8f:44:1a:bb:22:b8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d8b54a0c1bf8f1f9c4c9569b975ca46eba86ce7
        Validity
            Not Before: Oct 12 02:01:01 2026 GMT
            Not After : Oct 13 02:01:01 2026 GMT
        Subject: CN=92d3a65ca3d16e1314e4c6e0c1ddb39db618edfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:6c:5e:13:2a:84:c0:97:a9:92:68:47:14:
                    49:3b:05:a5:2d:02:ab:8b:ba:b1:c2:b1:a8:36:d9:
                    31:eb:9e:53:ae:1d:5f:3f:d1:44:dc:15:4d:4d:7e:
                    b6:12:8f:d5:2f:85:79:da:73:93:ca:32:4d:14:4b:
                    2d:53:ef:54:f7:c0:e6:b3:23:08:36:20:4b:28:de:
                    d4:b0:43:2a:5d:63:f9:eb:90:55:2b:ec:c1:b0:1c:
                    22:8c:6c:e6:78:3d:9e:0a:71:65:a9:7c:2a:6b:e2:
                    bc:5e:f4:94:b5:5b:b8:1f:68:52:5f:1d:29:32:be:
                    40:29:4a:6f:2c:9d:90:11:40:26:e2:0c:d8:14:71:
                    18:6c:a8:f0:c7:75:10:c6:da:9b:e1:0a:99:5c:25:
                    c5:22:ed:79:a5:13:51:ac:c5:3e:44:68:a1:04:65:
                    e9:6e:ce:b1:8e:1a:27:a3:6f:a8:5c:4b:2b:0c:c8:
                    72:f4:16:47:69:82:56:80:26:de:96:f8:0c:34:8a:
                    59:8f:3c:9f:c5:5d:65:55:72:26:55:ed:02:a7:1d:
                    dc:b7:c2:96:b5:77:92:e3:70:63:a9:9e:8d:7a:97:
                    4e:78:01:f6:2e:73:e5:b3:1e:5d:19:93:5f:a7:ee:
                    48:92:0b:74:c8:66:a8:6a:a0:60:77:da:87:7a:74:
                    95:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D3:A6:5C:A3:D1:6E:13:14:E4:C6:E0:C1:DD:B3:9D:B6:18:ED:FB
            X509v3 Authority Key Identifier:
                keyid:7D:8B:54:A0:C1:BF:8F:1F:9C:4C:95:69:B9:75:CA:46:EB:A8:6C:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9d:7b:81:96:bf:54:56:41:10:3b:4f:09:ac:3d:1f:09:13:
         23:fd:2a:bd:ac:e2:e8:12:54:72:86:a7:45:9a:2b:97:92:2b:
         9f:5d:4f:a9:4b:6e:7d:a9:db:96:b6:b5:20:1e:24:7a:ef:8d:
         e0:ec:a5:88:5b:37:2e:67:da:94:6a:17:b7:64:4a:29:10:ba:
         98:0c:2b:4b:c8:a1:62:a6:1c:52:31:ad:21:e3:ab:86:8d:2d:
         9e:7f:3d:61:53:2f:90:f7:50:f9:53:5d:b0:90:1e:ea:f0:1b:
         b3:dd:48:5e:48:bc:b5:b3:eb:e8:60:3b:af:5f:7a:e6:64:10:
         04:d8:68:5b:f5:2b:83:34:d1:bd:3d:fc:63:11:5d:c8:92:9a:
         0a:d0:b0:7e:bd:4b:23:9f:f9:25:e8:30:fb:bc:36:35:1b:44:
         2d:9b:21:fa:08:fe:67:56:77:3e:81:bf:cb:24:5b:0a:95:ef:
         0c:54:74:af:15:00:84:9a:76:2a:58:7b:f5:9a:59:96:11:03:
         cf:23:19:68:b5:38:75:f4:f9:be:a9:ad:df:d7:de:20:fe:53:
         1e:64:78:a0:69:3c:e4:ab:05:a1:64:d9:ee:ab:ec:5a:90:5f:
         68:aa:1e:5d:21:1b:a8:4f:6d:11:6c:e7:93:23:cf:6c:be:9b:
         ab:dc:74:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:33:53 2026 by rpki-client