Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
File:                     fEn63vQJ71hdX0o1su85SbWZxUc.mft (raw, json)
Hash identifier:          372CopVBlVqxxBJQqo19kLZBmy93FbZAVk1VFLR3rtc=
Subject key identifier:   4F:E9:E9:92:4D:D5:59:15:99:A5:59:43:EA:D6:BF:37:F6:D7:5E:63
Authority key identifier: 7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47
Certificate issuer:       /CN=7c49fadef409ef585d5f4a35b2ef3949b599c547
Certificate serial:       01A0E7E443E4A7767BF866D55E0A274722CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
Manifest number:          01CD
Signing time:             Mon 28 Sep 2026 12:01:31 +0000
Manifest this update:     Mon 28 Sep 2026 12:01:31 +0000
Manifest next update:     Tue 29 Sep 2026 12:01:31 +0000
Files and hashes:         1: Kfv8pSzvP6yGqpNKWB0u9MATNiE.asa (hash: K8Z32NZvPzbYmVaeeJNzMlZvkbrlXgcqv646vOrcs/Y=)
                          2: fEn63vQJ71hdX0o1su85SbWZxUc.crl (hash: DRQgeLuZgqV91hcralUEfH16YMomXeUyz+KFtLBRfZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 12:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:e4:43:e4:a7:76:7b:f8:66:d5:5e:0a:27:47:22:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c49fadef409ef585d5f4a35b2ef3949b599c547
        Validity
            Not Before: Sep 28 12:01:31 2026 GMT
            Not After : Sep 29 12:01:31 2026 GMT
        Subject: CN=4fe9e9924dd5591599a55943ead6bf37f6d75e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:26:d3:77:b5:15:79:cf:8c:90:5d:5b:e0:f2:
                    83:06:3e:a0:88:b2:8b:5b:ba:0a:4c:cc:db:d7:d6:
                    fb:f5:39:de:4c:17:31:5f:ec:6a:fd:a7:12:f0:06:
                    8e:84:56:d4:d3:7a:79:49:1c:e4:da:72:62:02:72:
                    a8:97:2e:15:df:0a:7f:22:88:ce:c2:a3:db:07:ef:
                    85:8d:01:50:63:bd:62:3f:8a:40:6a:26:d0:fc:4d:
                    bf:4a:51:73:c1:1b:54:24:1b:4a:6d:de:40:e4:ac:
                    89:35:fd:a7:ec:1c:d3:42:8e:2c:4d:5a:4a:79:16:
                    3a:6b:66:2e:af:db:6d:8b:d7:3c:42:49:10:d2:81:
                    c7:e9:a4:58:30:19:92:54:6f:d4:70:9a:19:51:cc:
                    a6:ae:a1:01:e9:2c:36:50:6e:e3:ea:f8:eb:ac:17:
                    de:3c:43:a7:dc:cb:e7:a3:3a:fc:88:d4:10:26:83:
                    c2:98:5d:db:5f:11:2e:84:a8:66:8c:cc:e6:ab:2f:
                    f8:81:52:9d:3d:31:17:2c:f7:45:7b:23:eb:9b:cc:
                    21:fb:43:e7:04:15:cc:bb:0c:52:4d:44:61:ea:13:
                    de:e3:47:92:5d:2c:8f:89:a0:f3:f3:6e:c0:5c:6a:
                    1f:43:04:bc:c9:84:ff:e6:bf:af:40:8b:22:d1:b5:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E9:E9:92:4D:D5:59:15:99:A5:59:43:EA:D6:BF:37:F6:D7:5E:63
            X509v3 Authority Key Identifier:
                keyid:7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:08:99:5e:f2:36:7c:87:4f:b3:89:9c:f1:7e:fe:05:de:84:
         07:5a:df:55:f7:b7:ea:5e:21:3e:c4:ac:c1:72:f8:e2:8c:3e:
         62:5b:bd:2a:5e:13:c2:99:c7:45:b6:14:3b:c8:c9:5f:3a:fd:
         7e:5b:ab:21:e3:88:cb:f3:84:b0:8a:59:a7:a4:38:e6:41:fd:
         2f:0a:17:47:e8:d9:e7:35:39:d6:8e:ba:c2:60:2b:67:ee:16:
         05:fa:cc:62:71:02:58:6b:d8:eb:5c:e8:9e:1e:5f:d4:a2:8b:
         8f:16:ad:5d:72:be:4b:8a:bc:c6:97:54:26:a3:f0:ff:a8:bb:
         4d:a8:ee:7c:ba:10:93:58:51:b5:bf:c5:1a:44:11:26:a2:38:
         b0:9a:45:8b:6b:f4:50:3c:bc:0c:12:29:26:eb:79:e9:ce:31:
         51:59:d3:8a:c1:87:ac:5b:1d:d5:1c:fb:cc:f2:9d:e6:05:04:
         1a:99:66:13:07:69:74:17:00:56:3e:4e:ad:bb:bc:10:dd:92:
         8e:09:2d:f2:2a:85:bc:e1:b4:30:b4:cd:10:a7:3e:1c:dd:6d:
         2f:28:0c:a1:92:74:70:59:9f:03:6c:63:bd:ca:d0:0d:53:4a:
         26:8c:0d:83:e7:24:bf:c6:57:c7:a0:b7:b2:00:cf:9e:42:73:
         59:95:a2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:11:11 2026 by rpki-client