Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File:                     Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier:          3XYEeoPyyRc1DLB3HPnCWsQqd7xmYm+5rvwSI9VZmqs=
Subject key identifier:   5A:7F:2B:1E:BD:02:96:72:99:FB:FE:8A:30:D2:8F:8E:21:28:72:78
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer:       /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial:       01A11B9A3028534D228ACEB2CEE7DAB85708
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number:          1226
Signing time:             Thu 08 Oct 2026 13:00:51 +0000
Manifest this update:     Thu 08 Oct 2026 13:00:51 +0000
Manifest next update:     Fri 09 Oct 2026 13:00:51 +0000
Files and hashes:         1: 9Vt8ZTAaKO3QL6--FGbzjNTndzA.roa (hash: sv+RJ5ALLGIO9zXRd8Tk3ufycF6GVb7tnAc57hDYdKU=)
                          2: AkELUJ1nU_46RXAj1-2bY3yDqgU.roa (hash: bYHtNDNRSlQx/SUIjQmICDpEV5pw2ZU635jKEfo/bKM=)
                          3: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: OGCSahFsnvSQbBK/lRAe48m1YGVsKh1d/LhINUD5s90=)
                          4: NX8gAo4kJVVnhVZZYeGsPN5mG8w.roa (hash: V0/RLiCz2ASel5h/MeTJN3bA9SuqAAYlXPDJdJh++xE=)
                          5: uOvkQDziXdl03ymVnX12k48lv30.roa (hash: uWfGX0PhnwLyUyMwAiEAkFFInh+eiuwv8GILWk97Ti0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:9a:30:28:53:4d:22:8a:ce:b2:ce:e7:da:b8:57:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
        Validity
            Not Before: Oct  8 13:00:51 2026 GMT
            Not After : Oct  9 13:00:51 2026 GMT
        Subject: CN=5a7f2b1ebd02967299fbfe8a30d28f8e21287278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:6c:33:40:41:fb:a0:46:e4:e3:4b:0a:d2:
                    3c:42:19:28:ee:39:fa:01:80:5f:02:54:f2:46:80:
                    d8:63:01:21:53:d5:09:0f:15:dc:31:94:dc:f5:b2:
                    4c:36:62:89:35:ef:11:6a:f9:fc:9c:8c:fe:ad:ab:
                    1d:47:31:e9:56:b1:02:9b:15:54:59:4d:9d:63:23:
                    a4:11:18:08:4c:f3:30:ed:40:70:a7:94:6d:f7:65:
                    a7:fa:17:c7:53:e4:a6:b7:66:6f:2e:97:0a:c8:f3:
                    3f:8f:15:5c:87:b9:4c:c0:5b:38:37:05:7e:82:e8:
                    01:cd:59:ad:25:fd:5f:75:c7:8c:34:37:a5:6d:c6:
                    44:b2:cd:90:3f:fc:71:d6:c0:ef:7b:24:c0:54:28:
                    a3:da:ce:c5:49:11:be:35:ea:83:f0:25:69:40:fb:
                    cd:ac:16:d0:af:9c:27:39:6c:e8:40:04:8a:a3:cc:
                    a1:25:b8:78:40:5a:96:b6:88:4b:50:43:94:47:17:
                    cb:b0:74:9c:85:64:a8:2d:8e:b1:21:8f:f5:e6:b6:
                    bf:8c:a5:97:88:d7:85:7f:ce:f2:53:4f:58:c1:bf:
                    d9:17:55:55:00:34:52:2e:26:3f:87:86:ac:29:8c:
                    d2:89:bd:74:92:61:70:58:93:a4:f5:3a:1b:94:7a:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7F:2B:1E:BD:02:96:72:99:FB:FE:8A:30:D2:8F:8E:21:28:72:78
            X509v3 Authority Key Identifier:
                keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:81:c7:c7:90:5a:53:77:a0:e6:6d:c1:5a:e7:e9:11:a3:27:
         4a:59:a0:78:da:d9:51:44:13:57:12:20:92:25:d3:d5:a5:20:
         67:6a:77:01:c0:74:86:b7:a1:9d:45:0c:6f:05:68:da:1f:c6:
         9c:e9:e2:84:fb:0b:f8:0c:e0:15:74:65:95:e6:3b:cd:e3:17:
         48:61:4a:85:19:ef:ef:56:df:c0:eb:3d:9c:25:d3:1e:d0:56:
         20:b8:2f:a0:f1:d0:e8:54:13:19:4d:4f:96:b9:97:62:5c:21:
         87:0b:af:85:60:90:2e:69:b7:62:29:1a:f9:32:a6:5d:a0:b0:
         90:e0:2b:39:b8:1d:f9:47:1d:f8:65:b7:48:16:d9:a7:1f:92:
         17:43:bf:8f:e4:4a:c1:7e:84:e7:27:e1:60:8e:de:46:f0:bc:
         bc:26:47:48:49:55:2f:21:2e:c4:eb:f8:57:b4:28:22:76:59:
         26:89:b7:89:41:3a:08:2b:81:90:cb:11:d0:20:32:93:82:03:
         93:12:8a:72:2d:1e:ba:c6:3f:21:1a:23:a5:4d:bf:7a:c1:62:
         58:d0:8e:f5:44:1b:b1:f9:36:84:87:8a:e6:5a:de:fc:09:29:
         b1:9d:46:f1:2f:51:be:14:7f:e5:f4:98:e6:ae:0c:46:92:a1:
         dc:7e:e1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 00:40:52 2026 by rpki-client