Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File:                     felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier:          ee9aP0iOfqTHQ1yOUNZAbaCPY2Ezav6YqNnhQTpsrtE=
Subject key identifier:   40:07:88:3A:92:54:CA:60:18:00:D5:20:03:B3:31:1F:1A:46:3D:D5
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer:       /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial:       01A0CC358258099A687FF20D7B728991AE26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number:          131C
Signing time:             Wed 23 Sep 2026 03:00:53 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:53 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:53 +0000
Files and hashes:         1: NZpb2E9m2foAvsfyivT97O1jcng.roa (hash: 0RJf0q9CZo1wWgsu4Kz3lRf78w4e5oNe9BmVigDLVTE=)
                          2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: JG8TcCMWBjiyPdMYkLy78urhRB0DEkpQHlvHb2nhIYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:82:58:09:9a:68:7f:f2:0d:7b:72:89:91:ae:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
        Validity
            Not Before: Sep 23 03:00:53 2026 GMT
            Not After : Sep 24 03:00:53 2026 GMT
        Subject: CN=4007883a9254ca601800d52003b3311f1a463dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:37:e6:81:48:62:5c:ac:a0:b7:69:0b:15:af:
                    c6:6d:0e:f2:e3:22:7e:3f:73:2c:a5:b9:87:23:1f:
                    9b:5e:15:b5:81:d7:cf:87:04:a8:5c:24:4f:0c:3b:
                    dc:0d:57:70:f4:a2:ab:b2:c4:a9:a4:a1:96:50:4c:
                    04:f1:a9:d8:ce:de:77:69:6a:9a:22:9f:8a:95:f6:
                    93:5a:35:b8:89:51:4f:63:55:e1:62:3e:8e:67:ef:
                    fe:08:bd:7c:93:d7:c3:ab:de:4d:4e:e5:23:4b:90:
                    0e:14:95:86:7e:72:11:07:d5:e8:39:3c:92:cf:85:
                    86:91:eb:06:a3:83:d9:96:b3:bb:ed:e8:87:bc:27:
                    24:f7:26:f8:65:4e:22:8b:d1:fd:5a:50:f9:c8:38:
                    f6:e0:b3:77:a4:8b:af:e0:6e:59:5c:bb:e0:a9:3d:
                    3c:e7:16:d1:07:b4:37:d6:20:11:63:77:0e:20:ee:
                    c3:a4:5f:9b:cf:b8:7c:55:9e:2f:d0:03:dc:62:49:
                    28:16:f3:5f:4f:7b:e2:b2:d9:7f:b9:c7:74:65:73:
                    96:ca:0f:78:97:78:84:08:ce:7a:e1:c5:1c:ed:dc:
                    b6:8c:ab:12:16:9e:2f:3d:67:36:7f:f3:00:78:e1:
                    84:03:f6:b5:b7:d7:73:ba:88:b0:ad:bd:28:7d:65:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:07:88:3A:92:54:CA:60:18:00:D5:20:03:B3:31:1F:1A:46:3D:D5
            X509v3 Authority Key Identifier:
                keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d4:61:4e:ef:75:ef:5d:43:1e:dc:93:10:03:df:bd:5e:bd:
         59:59:d7:4d:02:ec:91:83:d7:97:85:37:a9:fa:8a:42:07:3e:
         f2:83:87:46:ec:c9:f7:67:fd:fc:3b:ea:68:af:04:05:72:b6:
         92:10:79:f4:6a:f9:81:2e:d3:55:c1:54:73:8c:b7:8f:bd:5b:
         be:29:be:fb:4e:9c:7a:bd:b0:30:a9:48:1c:ac:d6:95:8b:d3:
         0b:19:0d:9f:a7:25:1d:d2:96:c4:7e:75:fd:21:8c:cd:40:1b:
         5a:3a:ca:5a:e1:fe:aa:29:df:d6:1a:a6:68:91:c5:9d:c2:47:
         dc:8f:74:b9:33:dc:05:07:f9:a3:64:5e:41:8a:0e:90:24:38:
         af:f1:3c:ac:2b:27:10:4d:c8:e6:48:c6:96:54:35:3e:c3:13:
         1f:4b:6c:3a:45:35:77:9f:a5:01:57:3d:87:25:6c:a1:2e:4c:
         42:55:2f:1c:ee:ce:d9:8f:47:51:b4:43:18:0e:be:2c:8e:b7:
         71:09:5c:50:73:72:b8:b9:d3:40:9d:3b:96:9f:8c:14:a2:2e:
         aa:14:5d:2c:ef:4e:72:35:8b:64:a5:9e:5a:71:5a:cc:86:6d:
         34:da:ec:97:0d:55:7d:c3:81:bb:1f:2a:2c:37:74:1b:2e:48:
         a3:64:ed:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:58:28 2026 by rpki-client