Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
File:                     fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json)
Hash identifier:          LBnUOO59S9jcNaKnYQkW1g13PvI/O+rDowe2G59w29o=
Subject key identifier:   2B:EA:C4:AB:59:A0:A8:95:03:94:15:91:E1:0B:1E:91:AD:64:E2:27
Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
Certificate issuer:       /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Certificate serial:       01A143166D6023C616BECF07469AA33D5518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
Manifest number:          0423
Signing time:             Fri 16 Oct 2026 05:01:45 +0000
Manifest this update:     Fri 16 Oct 2026 05:01:45 +0000
Manifest next update:     Sat 17 Oct 2026 05:01:45 +0000
Files and hashes:         1: KP-ylf8ytthvJyIxnF220410W_w.roa (hash: C5HlcdAoo1o+AnwI6JDZzjVDacowCGaTh3ddFqxBD4g=)
                          2: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: 0odhYldhZhXOAuHx+iYwKGw8wbRvSwq3br9IZpyYVQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 05:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:43:16:6d:60:23:c6:16:be:cf:07:46:9a:a3:3d:55:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
        Validity
            Not Before: Oct 16 05:01:45 2026 GMT
            Not After : Oct 17 05:01:45 2026 GMT
        Subject: CN=2beac4ab59a0a89503941591e10b1e91ad64e227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:7a:db:95:b6:89:20:b7:40:68:40:14:91:
                    67:69:5a:89:3b:b1:93:55:79:63:f7:d9:4c:0b:d6:
                    a1:fc:ac:51:90:f6:8c:69:c4:9b:b6:b5:7d:6e:56:
                    43:b1:6c:a5:3b:a4:23:18:d9:ab:4b:92:59:9a:2b:
                    28:f6:ec:04:88:06:9d:25:ef:93:a2:35:70:21:f0:
                    46:f9:4f:b0:43:99:ae:cf:a6:73:33:df:45:00:ea:
                    d6:22:f5:2b:6b:18:63:e2:4c:e1:7f:ca:76:76:82:
                    df:b7:b3:2a:f7:ee:ac:c2:84:98:f1:a5:bd:a0:e7:
                    42:dd:9b:73:5f:62:bb:d8:64:53:a5:37:64:e7:b9:
                    21:2d:81:73:30:b6:2a:7d:ef:b9:48:e6:4c:d4:97:
                    c5:d9:85:31:4e:aa:51:ab:67:2b:0c:7a:c9:8b:d3:
                    63:45:2f:32:b4:f5:d7:40:19:f4:d8:aa:9f:1a:a4:
                    8b:da:98:ee:37:fa:db:82:36:cc:33:bc:9f:c4:3c:
                    25:51:a2:71:e4:f8:98:dc:b9:c1:20:b0:50:df:3d:
                    2c:2e:1c:27:f5:33:aa:3d:c5:82:86:5b:93:69:23:
                    61:5e:13:45:fc:5e:4a:87:90:38:71:4a:bc:a3:92:
                    93:88:06:08:0f:e4:00:91:18:44:d1:52:d2:02:39:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EA:C4:AB:59:A0:A8:95:03:94:15:91:E1:0B:1E:91:AD:64:E2:27
            X509v3 Authority Key Identifier:
                keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:1d:25:16:35:21:92:17:f2:09:7a:d4:2a:a6:12:27:58:86:
         8a:b6:b1:4a:ac:07:c3:3c:06:b0:88:97:27:82:88:c5:c4:fc:
         30:17:47:c9:cd:da:f4:22:95:09:0f:53:37:2a:92:17:d3:05:
         a7:da:25:ff:bf:02:c9:55:e3:42:e5:1f:a4:5e:41:2d:dd:ba:
         64:92:d4:d2:5f:f6:26:48:c7:5d:9f:5a:ee:ac:a1:06:5a:bb:
         ee:ea:84:a4:33:a2:8b:a0:49:0b:aa:2a:4b:8b:23:cc:08:03:
         3b:91:3e:2a:db:21:71:b7:6d:5f:a4:df:7a:ab:9a:5c:f7:c6:
         35:48:6e:e1:4d:7f:34:01:26:66:9c:17:61:f9:d0:38:d8:45:
         13:59:ae:00:0f:de:ab:36:3e:da:df:f8:bf:af:04:ee:6b:6f:
         d0:9a:c1:bf:e7:af:a3:89:5b:79:a5:c1:e5:cf:3a:e0:4f:7c:
         ce:fb:a6:86:f4:7a:4e:bc:3a:bb:49:25:92:7a:ec:f1:8a:d9:
         46:50:f9:ce:f1:08:16:36:63:50:62:ad:a0:a5:b4:b8:c1:97:
         99:34:c0:31:42:ff:b3:49:d7:d4:fd:45:88:26:73:40:a0:f7:
         8e:f2:bc:0e:be:da:cc:39:2c:44:3d:38:e2:ee:45:ac:e2:de:
         6a:f7:f3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:44:04 2026 by rpki-client