Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
File:                     n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json)
Hash identifier:          ahqEaDEi91CrSz2+tSkqOxbVcDncTDcKSjc9+M5wkvs=
Subject key identifier:   9D:16:05:C8:A2:F6:24:73:66:26:2B:AA:D0:54:27:FD:EF:9C:FA:2A
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Certificate issuer:       /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial:       01A0D2011107A1C81FB195C57244D232431D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
Manifest number:          152A
Signing time:             Thu 24 Sep 2026 06:01:20 +0000
Manifest this update:     Thu 24 Sep 2026 06:01:20 +0000
Manifest next update:     Fri 25 Sep 2026 06:01:20 +0000
Files and hashes:         1: BCsvI1mqtMkrqM1Desz65UxbMeU.roa (hash: oNMs5i3Xy1K3iMANMRawDJNBdjBrE5KXc5y/my453cw=)
                          2: LI0sVfoUzK1z9YOT5-FCjcJGQ0I.roa (hash: L0O8mT469MCzuE1WS6kEM7aYWqcvleiuYLagt0EiSfA=)
                          3: eFneRI8NVirY9FXkrSGjf8r8DIg.roa (hash: eg6+J92P4U7OROkq5yxujy7G7w0DLDuwMs/a/0cX+a0=)
                          4: hkG-YGBM-MbzznRrpltgpHNZPLM.roa (hash: wRqq2PIQvkMZTX1tGRuU+U8jnKVNokqysUNErDHlJPM=)
                          5: jKCgpxt1ADjjHAE5Am2jfuifPn8.roa (hash: XeGQ/DX/ECCSWySWuH3BuJMwUzvEFlXF4fBqBfaoS58=)
                          6: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: 0FAIqoQuLkyXPEPZGTgBrwC8ZT2bagjp29lDiM1tD/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:01:11:07:a1:c8:1f:b1:95:c5:72:44:d2:32:43:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
        Validity
            Not Before: Sep 24 06:01:20 2026 GMT
            Not After : Sep 25 06:01:20 2026 GMT
        Subject: CN=9d1605c8a2f6247366262baad05427fdef9cfa2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:65:84:58:67:a6:6c:13:a4:3e:e2:3f:a3:
                    ab:5c:63:81:e0:00:00:52:a5:51:2f:31:20:df:e0:
                    40:21:8a:8c:48:3b:5e:13:79:f3:c3:5f:f0:a3:d5:
                    33:70:bb:e6:87:1e:7f:10:46:40:02:01:09:44:f2:
                    b7:7a:b7:9f:e2:37:b3:09:18:f1:5a:26:3c:70:2f:
                    6f:9e:ca:55:60:46:9b:de:1a:c1:7a:cc:fe:87:85:
                    4d:aa:92:10:f8:70:1f:1c:19:af:b9:a4:48:22:fc:
                    97:4f:0c:03:86:22:84:24:28:fd:9e:bb:50:25:6d:
                    87:e2:2a:68:33:28:bd:bd:03:24:67:f0:ee:81:2c:
                    90:8a:5a:3e:34:f3:08:7d:a9:23:54:b6:f5:78:25:
                    90:af:34:43:aa:3a:68:44:03:32:a1:7e:c4:1d:a4:
                    c7:53:73:34:16:09:30:9e:f2:bd:fe:44:1d:49:2e:
                    ff:a7:ba:20:1c:43:e7:ab:a2:41:c8:2b:ac:28:f1:
                    4b:b2:8f:d9:14:af:b6:3a:13:09:03:0f:5a:95:8c:
                    1c:57:bf:38:b5:4f:db:55:a2:bf:2d:3b:53:1c:27:
                    8a:a8:bf:b4:6c:d0:54:4a:d7:ea:51:a2:16:0e:23:
                    8e:a3:a0:81:28:f2:14:ac:f3:98:16:ae:ad:10:7d:
                    b6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:16:05:C8:A2:F6:24:73:66:26:2B:AA:D0:54:27:FD:EF:9C:FA:2A
            X509v3 Authority Key Identifier:
                keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:bf:30:1a:67:1c:82:d2:db:a5:a7:1f:07:67:64:74:07:7a:
         b3:16:68:1b:d4:7e:e5:1f:9f:d2:f8:ac:ac:fb:72:ac:79:78:
         4a:1b:49:ae:1b:2a:e2:04:b7:74:e9:58:50:c6:13:39:57:40:
         1f:70:cb:82:43:c6:74:d8:1d:dc:1c:00:2a:65:ba:d2:02:a5:
         97:bc:a6:89:9e:1f:c6:26:0e:d3:f7:4d:97:66:20:bc:24:6c:
         91:ba:0f:ac:2c:95:ca:69:38:a5:59:4c:d7:cf:00:52:25:15:
         2e:72:c4:95:24:a4:04:cb:fb:97:43:af:21:47:bf:b4:d3:6e:
         41:d7:35:dc:17:cb:d4:33:3a:43:bf:d7:aa:e1:62:b4:78:58:
         5c:6f:30:3f:26:e2:bc:57:e3:99:a9:92:33:d6:63:94:a5:2b:
         b8:a8:79:ef:5a:d3:0a:3a:f1:de:94:f0:2e:07:49:d8:de:a4:
         53:70:4a:42:d8:82:e6:44:bc:b7:e6:53:8e:7f:a3:6b:0c:8e:
         81:bc:b6:62:29:5a:e3:af:e6:26:fe:fb:b5:dd:27:7d:78:b8:
         75:6c:0b:bc:71:be:1a:40:04:31:f4:16:4e:d3:c0:29:5a:0b:
         04:a2:6e:77:c4:01:e3:0f:85:62:bd:5c:76:d6:f7:5e:8b:eb:
         46:57:f9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:49:09 2026 by rpki-client