Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.mft
File:                     FEDP2UKzzeZl7PLxqC2EWwRRTMY.mft (raw, json)
Hash identifier:          Yjpy2AIcrY50ilZeYNaSFScLzeNPK8/hhFKkQXdNFFU=
Subject key identifier:   FF:F6:67:04:38:D0:3D:1E:11:D6:B2:E8:55:ED:FE:56:A9:7E:BC:72
Authority key identifier: 14:40:CF:D9:42:B3:CD:E6:65:EC:F2:F1:A8:2D:84:5B:04:51:4C:C6
Certificate issuer:       /CN=1440cfd942b3cde665ecf2f1a82d845b04514cc6
Certificate serial:       01A0F230F858CCC134F390D942B0CA5FAAA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FEDP2UKzzeZl7PLxqC2EWwRRTMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.mft
Manifest number:          017D
Signing time:             Wed 30 Sep 2026 12:01:30 +0000
Manifest this update:     Wed 30 Sep 2026 12:01:30 +0000
Manifest next update:     Thu 01 Oct 2026 12:01:30 +0000
Files and hashes:         1: FEDP2UKzzeZl7PLxqC2EWwRRTMY.crl (hash: FDgD3VQqs5JdSkkt22dPSpgV4lUaVLRcR4d1/thGBvU=)
                          2: jlwmlKSUfHbKs6zt1m81RLJnNls.roa (hash: 0Wp49LsbSoKPdY1WwpNDwL8E5Fus4mwp+7pWa02+aqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FEDP2UKzzeZl7PLxqC2EWwRRTMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 09:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:30:f8:58:cc:c1:34:f3:90:d9:42:b0:ca:5f:aa:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1440cfd942b3cde665ecf2f1a82d845b04514cc6
        Validity
            Not Before: Sep 30 12:01:30 2026 GMT
            Not After : Oct  1 12:01:30 2026 GMT
        Subject: CN=fff6670438d03d1e11d6b2e855edfe56a97ebc72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5f:d3:d5:2b:2c:36:c8:8b:f1:b9:5f:6d:46:
                    11:bb:21:f8:97:1e:41:8c:a6:6c:f7:51:9b:e1:f0:
                    b5:08:34:8d:1f:47:5f:93:50:f0:68:06:e7:05:b4:
                    dc:7f:0b:4e:3c:79:2c:dc:46:ae:3a:c9:17:58:12:
                    21:cd:c1:c1:05:51:da:5e:f2:b9:53:45:7f:c3:be:
                    57:77:9e:54:0b:ab:8a:05:a7:17:99:11:32:e5:98:
                    e3:ab:1f:c4:ea:79:9c:ee:7d:99:2e:20:d7:38:f7:
                    80:65:96:65:9c:7b:2a:a6:b2:e3:6b:f3:37:25:e3:
                    22:7b:dc:15:91:62:49:39:f9:29:0e:14:10:ab:4d:
                    0c:05:32:9e:44:a5:a7:8a:60:ae:53:fa:2b:79:24:
                    86:8c:ea:f6:88:62:6a:06:a4:f0:14:a1:5c:46:1e:
                    83:21:54:bc:e4:e4:c2:dd:9b:d9:c6:cf:90:f4:fe:
                    b7:92:ec:98:1d:39:b2:1c:94:7b:4e:08:81:ee:96:
                    7b:5e:79:14:58:8a:8f:1e:6b:49:a7:4c:67:40:50:
                    49:78:2f:a1:90:b3:19:71:d3:cb:d6:54:9a:f2:a5:
                    bc:6d:d1:bb:cf:a9:bb:38:8f:fe:f8:c9:44:8b:aa:
                    d5:75:7e:60:4f:35:20:47:17:db:22:21:17:d2:c1:
                    30:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F6:67:04:38:D0:3D:1E:11:D6:B2:E8:55:ED:FE:56:A9:7E:BC:72
            X509v3 Authority Key Identifier:
                keyid:14:40:CF:D9:42:B3:CD:E6:65:EC:F2:F1:A8:2D:84:5B:04:51:4C:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEDP2UKzzeZl7PLxqC2EWwRRTMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:94:70:31:52:5b:f5:14:9e:eb:c4:7f:3f:f5:79:27:45:5f:
         07:54:ee:e7:49:9e:91:4a:ec:60:63:35:7a:63:d6:69:71:b7:
         d7:08:2b:7c:3d:e5:80:26:58:87:9f:db:67:18:c9:f4:d4:b4:
         4b:b2:e6:8e:b8:f8:28:dc:16:e1:92:d8:d2:b4:40:f9:e6:f8:
         69:d9:a9:3c:de:dc:48:2b:45:f0:e4:fb:d4:b6:5d:06:20:02:
         3c:a1:2b:77:61:15:81:e9:0a:73:ba:ed:28:10:3e:05:77:39:
         6f:5e:84:22:57:6f:30:fd:fc:c0:ad:8b:e3:97:7c:f0:90:0e:
         4b:29:15:2d:57:43:ce:e5:cc:92:b9:46:81:57:77:74:27:2a:
         3a:1f:81:80:11:20:9e:74:d7:93:e0:c2:c7:05:31:ee:43:41:
         62:96:be:d4:f1:af:f8:88:b8:1b:f4:42:73:a0:09:33:e5:5e:
         63:86:f4:07:99:b5:50:9a:95:d3:00:a9:8b:e7:20:b1:81:5a:
         39:31:97:a0:e5:1a:2c:b5:34:46:c6:08:2c:95:59:0d:79:97:
         2a:99:25:19:0c:fc:df:15:38:4f:70:62:d4:51:6e:e1:d0:7e:
         70:d2:d4:88:44:be:66:36:4d:f2:c5:d1:df:06:aa:6b:5f:42:
         e7:e8:a9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 16:08:39 2026 by rpki-client