Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/8f3b97-7bc4-4c8d-b5a5-296739745bdd/1/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.mft
File:                     fJe2kLYbWk-GcJEN2rTGWqh6iDQ.mft (raw, json)
Hash identifier:          Bk8aThcMecpo45Lm74mryrInpREPEQEA/v/U3R2+tPE=
Subject key identifier:   EC:C8:AE:7A:E3:ED:B6:04:23:68:24:7F:1C:91:F9:CF:9E:74:41:37
Authority key identifier: 7C:97:B6:90:B6:1B:5A:4F:86:70:91:0D:DA:B4:C6:5A:A8:7A:88:34
Certificate issuer:       /CN=7c97b690b61b5a4f8670910ddab4c65aa87a8834
Certificate serial:       01A0CA0FC22315B59C1C36BCBD5EBDFB26E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/8f3b97-7bc4-4c8d-b5a5-296739745bdd/1/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.mft
Manifest number:          01D6
Signing time:             Tue 22 Sep 2026 17:00:25 +0000
Manifest this update:     Tue 22 Sep 2026 17:00:25 +0000
Manifest next update:     Wed 23 Sep 2026 17:00:25 +0000
Files and hashes:         1: EXc86XlHMghABmd46_9YhwTFqyg.roa (hash: STPylVHN69IxUeHu9IEtRDj3HWN1YmaxpLQkEiE+qf4=)
                          2: fJe2kLYbWk-GcJEN2rTGWqh6iDQ.crl (hash: FMHlJBu/O6tWK+CQaKTd+MMUNYINIHw5hAAcKF7/CkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/8f3b97-7bc4-4c8d-b5a5-296739745bdd/1/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/8f3b97-7bc4-4c8d-b5a5-296739745bdd/1/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:0f:c2:23:15:b5:9c:1c:36:bc:bd:5e:bd:fb:26:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c97b690b61b5a4f8670910ddab4c65aa87a8834
        Validity
            Not Before: Sep 22 17:00:25 2026 GMT
            Not After : Sep 23 17:00:25 2026 GMT
        Subject: CN=ecc8ae7ae3edb6042368247f1c91f9cf9e744137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0e:78:fe:12:9b:a2:c9:f9:5c:82:bf:c5:30:
                    93:00:18:ec:c1:3d:1d:09:6e:d1:7b:bd:bd:25:91:
                    c7:48:a5:7a:69:75:b9:5e:fe:18:39:e8:8e:9f:6c:
                    e2:ec:5a:32:b2:64:29:11:e9:aa:78:2a:bd:f0:29:
                    c8:b1:47:7f:46:d6:5f:1b:11:d7:14:30:3b:b9:f1:
                    93:1b:5f:fa:b2:5a:93:67:ad:0b:cd:dc:2b:90:63:
                    45:f1:d3:2f:d7:8d:ea:09:93:97:a6:7f:90:55:b5:
                    fd:db:db:5f:b5:f2:4c:39:e5:37:1e:95:c4:d4:4e:
                    d0:88:38:83:bf:f4:d3:73:96:38:08:9e:4b:ca:9d:
                    61:c1:6f:5e:61:45:b0:13:c8:01:4b:6e:04:9a:14:
                    24:65:05:98:fa:2f:93:dd:fa:28:bd:70:91:66:08:
                    ad:3c:bb:66:30:76:71:b8:7a:89:7d:4a:43:8d:70:
                    c0:58:c0:ad:43:19:d3:5c:f7:21:cb:12:0b:4d:2e:
                    41:ac:b1:bf:f0:73:31:91:08:55:aa:b2:83:c0:4b:
                    52:52:6c:5d:37:33:b6:4d:aa:27:34:95:69:d1:86:
                    52:ed:39:3b:18:a8:a8:83:cb:f4:56:38:43:b0:7f:
                    35:4e:e5:db:88:e2:a1:48:9a:65:50:ac:ad:c7:64:
                    b4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C8:AE:7A:E3:ED:B6:04:23:68:24:7F:1C:91:F9:CF:9E:74:41:37
            X509v3 Authority Key Identifier:
                keyid:7C:97:B6:90:B6:1B:5A:4F:86:70:91:0D:DA:B4:C6:5A:A8:7A:88:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8f3b97-7bc4-4c8d-b5a5-296739745bdd/1/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8f3b97-7bc4-4c8d-b5a5-296739745bdd/1/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d9:5f:34:a5:66:ef:58:89:6d:e1:95:51:3d:18:16:b8:71:
         1d:0f:3e:51:85:67:28:3a:0f:57:81:3c:39:50:f8:90:59:73:
         2c:e0:66:fe:4f:ae:3d:af:84:c4:cf:8c:f4:db:29:93:2d:a9:
         7f:41:fc:20:dc:2e:f8:40:57:c8:3a:27:f1:c2:d4:09:4d:74:
         3f:f7:31:77:db:0a:26:b9:c0:8d:4f:7a:88:21:bb:b7:cd:fa:
         6d:86:97:1c:02:09:86:8a:a8:6b:9a:cd:48:65:43:1b:c8:72:
         5a:52:01:c7:ec:95:bf:f4:d7:b7:5b:34:60:dd:dc:97:e9:7f:
         42:d8:e8:65:ba:c2:56:ce:ee:4d:a3:5a:4d:a0:9f:00:bc:98:
         03:0d:05:00:86:56:7d:fc:7a:c9:80:42:4b:f5:f7:1e:79:01:
         0a:a0:51:c4:2e:b5:a7:9e:d0:32:44:d0:c7:d9:7c:2b:c1:a1:
         e4:ef:55:92:29:6a:26:1b:e7:e3:10:42:7a:7a:64:bf:4c:55:
         48:b4:74:fa:d6:27:f2:b9:72:ef:3d:43:6e:07:fb:de:b1:e7:
         91:39:90:86:00:2e:78:fb:66:d8:6b:2b:2f:90:a1:45:c8:2d:
         f5:86:cc:8f:d0:17:2b:68:13:e6:48:f6:d7:aa:24:e3:d0:ae:
         dd:d8:0f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:11:22 2026 by rpki-client