Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File:                     FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier:          jMbr/KRzemAFHxS3Rd8QLHFHK8cvJ2UegTVnBjAwSNw=
Subject key identifier:   1B:1F:05:5E:EF:53:95:F8:E5:85:1F:91:E9:DF:45:6A:F8:E4:0A:2B
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer:       /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial:       01A102ED76E7A96A900C21E07B8E715C94C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number:          19F1
Signing time:             Sat 03 Oct 2026 18:01:19 +0000
Manifest this update:     Sat 03 Oct 2026 18:01:19 +0000
Manifest next update:     Sun 04 Oct 2026 18:01:19 +0000
Files and hashes:         1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: Q7qIs0kPPNjrRxrh5glRSRMNNWcnHZwAqj/VkkYMFOw=)
                          2: ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa (hash: rUWPt9ieqVy+Gp/oD9EsBpO1X47eqDC+02qK6K5SPS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 18:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:ed:76:e7:a9:6a:90:0c:21:e0:7b:8e:71:5c:94:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
        Validity
            Not Before: Oct  3 18:01:19 2026 GMT
            Not After : Oct  4 18:01:19 2026 GMT
        Subject: CN=1b1f055eef5395f8e5851f91e9df456af8e40a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:52:4e:fe:a2:5f:a8:37:3f:43:68:cb:4b:
                    7c:a0:8c:fc:de:d2:b6:fd:ed:a1:dc:67:56:cc:a4:
                    3d:77:87:85:b1:7c:0b:6d:f4:51:7d:41:7b:56:df:
                    af:8c:db:2b:d0:ed:3e:70:95:02:d7:fa:2a:bf:a0:
                    9a:1d:03:52:35:82:f7:88:86:ef:2e:3e:69:07:4b:
                    45:2d:da:ba:b5:64:46:a1:32:17:26:7e:89:b9:58:
                    a3:f4:ee:ef:fa:4e:fd:50:6c:bf:f2:6f:8c:58:64:
                    99:5d:e8:88:a8:3d:c8:06:70:f7:9d:07:db:2d:11:
                    4a:5d:97:a1:e0:74:82:bf:fc:c0:ec:45:4f:eb:e9:
                    2f:b8:72:d5:36:64:50:df:47:7d:26:48:41:90:0e:
                    b4:e6:f2:cb:cd:7e:f3:97:be:9b:c0:30:9b:c2:11:
                    2c:f6:fa:be:72:7a:38:68:bb:d4:c4:b4:73:2b:6d:
                    8b:97:44:49:ee:5b:8b:21:d7:96:3f:ad:8f:62:1a:
                    b6:0f:99:d8:54:3a:96:9b:96:41:e7:93:2f:ee:62:
                    a0:30:4a:39:73:64:06:54:79:11:79:45:c2:09:f8:
                    a1:61:e3:c2:37:c3:5d:15:d0:14:36:20:f0:a2:85:
                    79:d6:4a:51:6d:2b:c0:98:bf:43:a7:29:0e:da:9b:
                    f5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1F:05:5E:EF:53:95:F8:E5:85:1F:91:E9:DF:45:6A:F8:E4:0A:2B
            X509v3 Authority Key Identifier:
                keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a1:79:d2:98:6f:e8:36:c0:71:af:34:ef:ba:03:76:cb:57:
         27:a5:29:b3:b0:3e:21:63:d9:26:cc:24:ea:76:25:fc:14:87:
         11:0c:c1:37:db:73:f9:a6:60:7d:8f:46:5a:68:31:10:05:22:
         e2:93:2f:6a:00:0a:c2:33:c2:a5:e1:3a:72:03:d9:44:a2:33:
         96:b7:cf:1e:a7:18:cc:7c:8a:48:c4:ca:2f:82:b5:04:1a:88:
         85:10:7d:af:8f:9e:6e:ff:94:dc:9f:40:ca:26:f7:75:6d:6e:
         59:94:00:6e:68:e8:e0:0f:93:c6:cd:72:20:25:bf:ca:e5:8e:
         7b:20:99:93:b6:ed:04:d9:86:75:7d:40:99:76:b1:f8:2b:16:
         38:9c:32:c5:1c:84:a4:77:be:7f:a5:23:34:e8:3b:61:90:9f:
         29:65:8f:1d:02:78:ab:e9:4a:d3:a7:a5:00:a6:54:d9:18:f3:
         89:32:de:df:62:a9:54:7a:f6:b4:9a:e3:16:a0:b8:c0:5e:c4:
         3a:4f:07:da:72:6b:1c:41:49:35:b4:b4:64:17:99:bb:92:20:
         23:95:38:b0:b9:0e:e1:cc:be:d2:fe:ca:0b:13:30:41:e4:ca:
         4f:4b:e6:93:94:e9:79:f1:71:b1:26:dc:3b:3b:10:d8:a0:8e:
         12:eb:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:31:04 2026 by rpki-client