Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
File:                     fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json)
Hash identifier:          /9kC7LDyIc1wsS2Sjq/FosgX04eX5DH7vAp3lBc20n8=
Subject key identifier:   C2:E4:C9:0F:BD:41:0C:00:BD:5B:4A:44:E1:12:16:1E:72:15:04:12
Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
Certificate issuer:       /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Certificate serial:       01A0E362DA78012D75052E4726A0665511CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
Manifest number:          1748
Signing time:             Sun 27 Sep 2026 15:01:41 +0000
Manifest this update:     Sun 27 Sep 2026 15:01:41 +0000
Manifest next update:     Mon 28 Sep 2026 15:01:41 +0000
Files and hashes:         1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: 7SQGx5dqInckQ3N7nt3MHgZLXLJ2pSmsoLR5UYMptOA=)
                          2: pnSX4g2lmq0K8FTBTKkZmOyOugg.roa (hash: V6XhkHNDk99HDBU8c9gDLWqCQBMIvpkfeeSqTLRceRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:62:da:78:01:2d:75:05:2e:47:26:a0:66:55:11:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
        Validity
            Not Before: Sep 27 15:01:41 2026 GMT
            Not After : Sep 28 15:01:41 2026 GMT
        Subject: CN=c2e4c90fbd410c00bd5b4a44e112161e72150412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4e:78:44:b7:e7:1c:b4:55:d0:47:9c:de:0b:
                    6c:b4:02:f2:c2:0f:68:f9:aa:4e:46:23:35:41:cf:
                    0e:6e:29:9e:64:49:34:a6:86:b3:6b:03:da:80:c4:
                    2f:4d:6e:0b:d8:41:fb:cb:4b:35:d9:02:23:e5:b1:
                    c8:b0:68:08:63:7a:8c:a9:ef:79:24:58:9e:5a:3c:
                    cb:1f:fc:26:c1:2c:5b:b8:5b:a3:c7:b6:5a:59:91:
                    40:3b:f2:41:e4:0b:28:89:61:a2:be:dd:61:26:70:
                    ea:a1:d7:e8:dc:82:7f:70:3b:d7:a8:3e:a0:3d:ec:
                    bd:b3:47:d7:e8:dd:16:53:c4:e2:a5:e0:53:4f:07:
                    63:3f:45:41:df:72:bb:30:e5:80:22:a1:89:b3:cc:
                    32:1e:bd:cf:ae:fa:01:9c:c6:ad:62:b7:ca:81:78:
                    f1:99:e4:ef:0a:ee:db:5d:3c:7a:de:c0:e7:a8:93:
                    39:d8:f3:82:36:2b:2a:a4:e9:f2:9f:64:b9:f8:48:
                    59:e0:c5:0e:a7:71:f7:b6:f6:22:2a:11:b9:ec:25:
                    96:60:26:e8:92:cb:0d:1d:3a:68:43:15:b1:06:a5:
                    78:d3:af:37:af:a6:4e:c6:24:27:23:54:74:12:ca:
                    1e:0c:5d:4f:a9:cd:d9:b9:d0:f7:c7:57:6a:bc:69:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E4:C9:0F:BD:41:0C:00:BD:5B:4A:44:E1:12:16:1E:72:15:04:12
            X509v3 Authority Key Identifier:
                keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8b:cb:64:95:3e:86:47:92:12:45:fc:78:14:4c:64:30:df:
         00:8e:08:7d:10:73:62:06:22:fd:24:00:6e:e0:e5:8b:00:83:
         d3:f7:21:35:a8:38:9d:65:00:52:16:09:ec:90:00:d0:a1:37:
         6a:ca:af:0c:54:41:5e:14:55:70:01:6d:a1:60:31:28:eb:e5:
         2b:21:70:89:d0:b6:45:0e:70:0a:ae:17:bc:0a:7f:35:cc:8f:
         f3:e4:8a:91:40:0b:e8:0c:f6:43:49:96:0f:f2:a5:36:31:5e:
         0a:f2:79:dc:cc:69:91:4f:06:d9:1b:5c:11:e2:b0:37:0c:dc:
         70:2a:dc:fe:cb:fd:53:f3:63:7e:65:27:0e:c5:6b:d8:ad:60:
         8d:1f:92:ad:4f:70:f3:b4:93:32:cc:9e:5b:c2:a7:a3:88:99:
         7f:4d:d3:86:56:67:98:18:11:d3:97:97:5a:7d:92:27:37:e7:
         d3:25:5e:2c:44:55:e6:28:ae:24:37:a6:ed:84:93:40:3c:aa:
         e7:63:0d:58:f0:5e:31:53:45:73:88:41:97:eb:08:29:0a:6c:
         37:24:27:01:39:e8:41:9b:19:cd:3f:1a:ae:96:7e:d6:b9:d8:
         02:8b:dc:bf:90:9f:06:51:c0:cf:47:36:87:08:56:7a:1d:40:
         67:09:82:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:22:34 2026 by rpki-client