Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
File:                     FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json)
Hash identifier:          F3qk0Bm/PgbsrcbMt1WrKWwohQNPEpbLqf5AjDQuvJU=
Subject key identifier:   46:A0:E8:7B:2E:70:96:C8:D1:80:88:4D:E2:38:65:F1:2D:FE:74:75
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Certificate issuer:       /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial:       01A0D1246CD340916712B8EF74E88171DB2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
Manifest number:          1A6E
Signing time:             Thu 24 Sep 2026 02:00:20 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:20 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:20 +0000
Files and hashes:         1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: 4FiBfYmz9qlSr4pkb1ZiVZQlKMpqB0GVJaZj0U/Qf1w=)
                          2: oYoK3MKCDAt2Vl6sc2ZPRQPXck4.roa (hash: ojbwZkbf6RTWhGjCLnOZeAUwCGajo9XVRazbI1Jt8aI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:6c:d3:40:91:67:12:b8:ef:74:e8:81:71:db:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
        Validity
            Not Before: Sep 24 02:00:20 2026 GMT
            Not After : Sep 25 02:00:20 2026 GMT
        Subject: CN=46a0e87b2e7096c8d180884de23865f12dfe7475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:66:34:e6:69:65:d6:a1:d8:93:4f:c0:7c:64:
                    31:82:74:5c:bc:95:eb:9d:dc:3c:65:70:3a:b3:70:
                    0b:51:27:f8:9e:63:9e:fc:6f:ad:bb:7c:6b:99:4d:
                    42:1d:02:34:bd:34:3e:35:30:b2:04:b3:fc:c4:c7:
                    41:82:b4:1f:72:db:78:d6:c6:be:4d:68:f9:6e:9d:
                    af:fa:df:63:0e:39:05:ea:04:b3:65:89:26:fb:9e:
                    e5:62:fc:36:f2:50:44:50:2f:48:7f:1e:8a:ff:17:
                    6f:04:24:17:39:62:4e:32:95:83:a8:ca:27:cf:3a:
                    78:c5:7f:92:3a:a3:72:b1:7d:fd:ef:44:30:03:95:
                    ae:54:99:7f:63:9e:12:88:cd:92:c7:be:69:2b:1a:
                    fd:2f:3c:ac:78:4e:c1:88:ec:36:43:bf:64:4b:bf:
                    d3:a4:6b:4d:c9:b6:91:c9:ab:d2:fb:dc:91:c9:ef:
                    8b:3d:29:eb:c3:5b:21:51:94:d0:29:6a:38:f3:f2:
                    f4:6c:1c:3a:9f:91:99:3e:89:16:3e:fa:37:69:ab:
                    a1:27:72:58:a6:46:7d:64:9a:10:a8:5d:ad:4d:83:
                    2e:06:13:e0:45:ae:c1:17:fa:0a:bc:e8:95:07:54:
                    4a:f1:4b:bf:05:c3:73:48:ab:ca:86:e3:cb:d6:6e:
                    47:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A0:E8:7B:2E:70:96:C8:D1:80:88:4D:E2:38:65:F1:2D:FE:74:75
            X509v3 Authority Key Identifier:
                keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:34:8a:db:71:61:14:66:c2:6d:9a:ee:db:ec:01:7b:10:32:
         30:07:b0:c6:16:b2:30:03:38:8d:f5:9a:69:d8:83:62:c7:d7:
         d6:55:42:a3:77:0e:a1:29:40:b3:6d:28:dc:39:05:e5:4b:42:
         af:d2:e1:00:e8:42:a3:b6:a2:77:69:c4:fe:6b:c6:fd:fa:7e:
         60:f8:b7:ac:9d:2e:8d:af:73:2f:9c:38:6a:82:5c:09:37:32:
         bd:45:c8:db:cf:f4:b8:40:68:eb:e0:02:b2:c7:74:19:51:1d:
         09:be:8c:04:0b:1e:ee:a3:eb:76:79:f0:3e:c9:26:a6:f7:dd:
         44:ef:72:43:6a:e1:ff:3a:67:0a:65:f4:be:8d:c3:ae:d5:4d:
         b7:d5:10:b0:4b:29:c9:03:8d:eb:60:31:ad:2e:93:3a:e6:21:
         e2:47:5c:0e:e0:10:db:e2:da:ae:02:80:10:bc:f7:5c:18:a4:
         80:59:34:51:be:b3:09:04:28:d8:49:5b:31:e5:4a:9c:5a:83:
         61:8c:62:81:f9:77:d9:4a:f5:0d:af:0f:45:97:72:bd:af:76:
         6c:b6:35:9d:3b:bf:da:59:ed:c5:09:e7:02:c3:fb:fb:22:06:
         ee:1d:06:40:1b:6b:28:e8:ff:e5:b8:e3:3a:02:cc:d3:0b:47:
         e3:ce:cd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:46:59 2026 by rpki-client