Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
File:                     FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json)
Hash identifier:          iFeL6jWcc98aewDss94iZYNZOrRSSBhsM3xBazsneGE=
Subject key identifier:   AC:99:12:C0:8A:59:FA:BC:FC:86:9D:13:38:51:F7:1F:31:61:1C:BE
Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
Certificate issuer:       /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Certificate serial:       01A0C6A14B48F5FFEC14DBF20903E6908427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
Manifest number:          048F
Signing time:             Tue 22 Sep 2026 01:00:54 +0000
Manifest this update:     Tue 22 Sep 2026 01:00:54 +0000
Manifest next update:     Wed 23 Sep 2026 01:00:54 +0000
Files and hashes:         1: 5GiUHvvRvMlg3hS53jo9G5Kr9tU.roa (hash: NmHcAKuahD6OKhRyNCtW1vNB5eydtw5obgklH1AcyCA=)
                          2: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: uOrJqUE+neE2rX5IrhwoJb9blxbmrEeaX7cCutW6JD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:a1:4b:48:f5:ff:ec:14:db:f2:09:03:e6:90:84:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
        Validity
            Not Before: Sep 22 01:00:54 2026 GMT
            Not After : Sep 23 01:00:54 2026 GMT
        Subject: CN=ac9912c08a59fabcfc869d133851f71f31611cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:33:7f:92:a5:ea:54:ef:e9:11:c5:f9:c5:
                    eb:82:31:48:b4:b1:d5:87:57:a2:50:12:96:6f:73:
                    d8:a8:14:9c:35:4e:52:26:d8:fb:43:a0:95:98:15:
                    9f:09:5c:4c:45:cd:54:f5:ae:e2:21:e0:e7:aa:d9:
                    53:a3:eb:97:78:22:4d:23:34:35:dc:31:4d:38:f0:
                    65:83:ae:97:6f:91:19:a5:49:76:f2:a9:bc:a5:92:
                    e1:54:4b:5e:a4:3c:4b:19:44:f7:a9:bc:99:4f:8d:
                    ce:cf:93:ff:6c:7e:39:57:ed:75:cb:71:79:fe:32:
                    59:72:43:33:e8:71:62:eb:d4:90:84:3e:7e:b1:5e:
                    8f:50:5c:14:32:a9:2e:3b:95:d0:20:f9:9a:fe:a5:
                    cb:6f:91:c4:22:36:91:e6:aa:35:63:b1:db:e5:5a:
                    27:c6:5d:e0:c4:05:60:19:89:60:e0:15:d7:29:70:
                    3e:03:a3:8e:79:23:3e:88:16:44:63:9f:32:80:34:
                    94:08:eb:00:61:42:e5:61:5f:52:43:3e:da:c5:c9:
                    7f:4f:ae:ae:b2:6f:c6:35:28:48:65:7e:c7:b0:6d:
                    82:cb:a7:bb:ca:72:f8:2a:0d:ce:ee:09:8b:ca:1c:
                    c7:7c:25:97:c2:3e:2e:93:56:a1:67:08:7e:fa:8b:
                    6e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:99:12:C0:8A:59:FA:BC:FC:86:9D:13:38:51:F7:1F:31:61:1C:BE
            X509v3 Authority Key Identifier:
                keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a1:13:cc:59:e0:0e:c9:4c:35:6a:40:fd:9e:5c:f4:f7:54:
         e7:ce:d9:01:df:24:9c:66:f7:b3:a3:75:3e:e2:0e:36:c3:98:
         7a:6d:cf:b0:c7:82:23:86:23:72:8b:e9:87:ee:9a:19:a9:2a:
         19:6e:61:04:f7:ae:96:c9:3e:60:7d:6e:95:0f:a1:b2:4c:e6:
         b1:00:37:13:65:99:5a:6b:28:55:6a:bf:51:d0:3c:f8:17:dc:
         e7:19:17:ea:95:75:81:ab:ce:80:45:45:9a:cd:3c:32:79:fd:
         82:1e:46:a6:d7:de:4f:16:7d:16:86:30:72:0d:c8:9c:2c:4a:
         07:f8:a1:1f:77:c5:d7:36:43:95:b7:90:25:a0:74:bd:14:d0:
         cb:93:b3:7c:bb:01:99:59:98:aa:f9:6b:66:f6:ed:65:df:df:
         20:9f:8d:e8:cc:9c:a4:d7:d7:8f:f9:5e:f9:ec:68:49:ae:8a:
         f8:1f:22:12:d3:2e:f7:f6:b1:8d:d4:4e:85:c2:1c:78:f2:42:
         79:a0:97:2a:b9:c1:07:8d:32:40:1d:d3:63:68:c9:54:06:ad:
         d9:83:5a:14:d9:e3:0a:28:ab:f1:a0:4f:bb:c9:29:e0:e9:f5:
         aa:4d:37:b7:77:7c:81:11:4e:5c:7b:19:fb:d2:3e:30:0c:72:
         d3:da:e8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:09:44 2026 by rpki-client