Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
File:                     FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json)
Hash identifier:          xGRuUIfAygoVeii1ZV9yGApseYYiGCFvIO1Q7GS6QPg=
Subject key identifier:   33:0F:90:66:EA:5B:2E:3B:06:60:2F:07:24:43:4B:05:EC:AF:F0:A7
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Certificate issuer:       /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial:       01A0D49474176DBB0531024457594DECA648
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
Manifest number:          1A75
Signing time:             Thu 24 Sep 2026 18:01:33 +0000
Manifest this update:     Thu 24 Sep 2026 18:01:33 +0000
Manifest next update:     Fri 25 Sep 2026 18:01:33 +0000
Files and hashes:         1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: 6sGKMU9rionxVR8TtUsTwooFJkq6prggJ70eODKbRys=)
                          2: Lns8WMwmeahDBAtfj1YhXNC9YpQ.roa (hash: 1VID+VxCbvu/x4LUFWGdXKIYuEKVOmm6njJ+kAa8PjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 18:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:94:74:17:6d:bb:05:31:02:44:57:59:4d:ec:a6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
        Validity
            Not Before: Sep 24 18:01:33 2026 GMT
            Not After : Sep 25 18:01:33 2026 GMT
        Subject: CN=330f9066ea5b2e3b06602f0724434b05ecaff0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:93:1c:c5:30:83:e5:b6:6d:20:c2:89:34:13:
                    d8:78:61:46:d8:bc:37:a8:1e:e0:4e:cc:46:0d:66:
                    34:80:31:d3:80:39:fd:de:3b:2e:31:32:43:f4:08:
                    38:b0:58:ae:89:cf:d0:14:9d:e1:d5:35:52:db:e0:
                    79:6a:b3:7c:e7:6c:db:05:02:f4:da:12:f7:21:a8:
                    1a:f9:06:ec:c6:5f:e9:43:5d:60:41:03:08:09:6d:
                    da:a5:34:4f:77:a7:03:63:c0:13:8b:da:f4:10:a8:
                    15:3f:ef:83:f3:c9:14:a6:01:16:e4:a3:11:91:25:
                    dd:1f:3a:fa:ba:91:2e:33:01:69:59:21:e2:2b:3c:
                    15:d5:4d:84:b8:e6:4a:2c:01:92:28:0c:5f:cb:bb:
                    4c:79:3e:59:fa:39:78:55:70:18:c2:4f:01:a1:1f:
                    73:dc:a9:a6:1d:3d:7c:63:e0:0b:23:b1:e9:a8:f1:
                    82:0e:f5:73:f4:b7:31:73:c8:7b:db:1a:8c:a3:55:
                    af:88:8f:12:00:53:dc:5a:3e:df:74:b2:0d:9e:c7:
                    2f:9a:bf:f0:0b:20:2b:0a:77:b4:fa:92:d3:02:0d:
                    7c:ff:26:92:75:a4:fc:ed:0c:70:e5:77:7f:bd:9e:
                    76:e2:09:5b:73:bb:a4:ea:2e:9d:53:0b:12:89:ef:
                    c9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0F:90:66:EA:5B:2E:3B:06:60:2F:07:24:43:4B:05:EC:AF:F0:A7
            X509v3 Authority Key Identifier:
                keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:99:5c:68:73:11:01:1a:f4:4b:43:19:2f:15:c9:37:f9:22:
         a5:98:fb:6c:69:ba:a0:e2:4f:79:d4:49:24:38:e7:81:34:df:
         89:09:4c:01:fe:ed:a4:64:96:f4:31:a6:8b:6a:4d:e9:6d:b8:
         eb:43:53:3b:66:0d:13:53:f1:c1:10:09:26:60:42:dd:99:26:
         38:04:b8:28:ec:51:40:57:0a:fa:db:ab:b3:94:f2:01:64:c9:
         39:6f:58:8c:19:31:3e:ad:63:3c:55:b4:99:5c:ac:14:b5:7a:
         ef:1b:01:1b:63:c1:e6:74:3e:39:17:e1:24:eb:c4:10:96:29:
         92:e5:4e:2b:33:bf:85:6c:6f:28:a1:74:aa:75:5b:fb:cf:a7:
         93:cc:f1:bd:a6:c2:96:c6:45:28:be:a4:c0:e5:b3:99:82:7d:
         ad:2e:8a:d6:32:bf:46:f0:8f:6c:fc:10:ff:05:be:6c:5b:3e:
         7a:3d:84:c7:33:93:3c:7e:03:f6:46:14:54:2d:21:36:89:38:
         78:3b:92:10:3e:7f:fb:3e:1b:8e:6b:31:6b:d4:46:1f:63:2b:
         64:26:a1:b0:10:ce:4a:c4:bc:71:93:bb:19:df:f3:9a:ad:4d:
         d4:df:35:b6:c1:17:39:ad:e9:96:73:3b:cc:7c:63:cb:76:f4:
         bf:28:11:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:51:31 2026 by rpki-client