Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
File:                     81TlIOe7fhP1Ms7PBagtK3l5UqI.mft (raw, json)
Hash identifier:          3bq2h/OIGgoBCbmCgopubOFT5ux/CqCBrqQs9hRwpLY=
Subject key identifier:   F0:B2:5F:F2:6E:A6:03:4C:93:82:DD:ED:77:85:5C:D0:B7:85:70:A6
Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
Certificate issuer:       /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Certificate serial:       01A0C2FBBE889EA341EA55ADFBFB3CCF36BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
Manifest number:          0FBD
Signing time:             Mon 21 Sep 2026 08:01:13 +0000
Manifest this update:     Mon 21 Sep 2026 08:01:13 +0000
Manifest next update:     Tue 22 Sep 2026 08:01:13 +0000
Files and hashes:         1: 28zXLFeRXoHKQibLR_FN7To5SA4.roa (hash: 0h5lbt3CG3w27XHBcRA+PH1NQ7TLUhzbv0Xa/y3+zNw=)
                          2: 81TlIOe7fhP1Ms7PBagtK3l5UqI.crl (hash: 4DlyZfniXqSYlqBe6Kx3x+6s4nuCmp3DCzW0Ea3OXdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fb:be:88:9e:a3:41:ea:55:ad:fb:fb:3c:cf:36:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
        Validity
            Not Before: Sep 21 08:01:13 2026 GMT
            Not After : Sep 22 08:01:13 2026 GMT
        Subject: CN=f0b25ff26ea6034c9382dded77855cd0b78570a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:72:a3:81:64:47:67:a1:82:ea:e2:26:ca:4e:
                    f8:c2:69:c5:6f:08:24:c4:21:88:54:97:8d:a3:4c:
                    52:14:39:76:58:5c:7a:c6:66:80:68:4c:92:f1:82:
                    61:7d:7d:51:95:3a:13:45:53:64:d3:dd:85:1d:9e:
                    35:b3:cc:0b:e8:35:80:9d:2a:80:e0:2d:f0:db:00:
                    9f:a4:08:7f:76:82:85:96:f0:7b:13:6f:a8:02:65:
                    f7:64:61:e9:aa:bf:da:43:b6:89:42:e6:00:a5:cd:
                    ec:64:67:97:38:7f:31:14:77:ed:db:1e:92:bb:f2:
                    52:c4:91:ee:82:b7:2d:bb:8b:64:fe:a0:2f:b6:fa:
                    ee:60:bb:75:38:4b:51:20:af:d6:a4:a9:97:9c:47:
                    6b:40:a1:26:90:47:29:fd:19:1e:5d:a0:09:30:61:
                    90:43:2e:b3:f3:38:41:e0:8a:ba:1c:d6:af:a6:57:
                    8e:e5:e8:7f:6c:55:1f:be:70:44:c9:15:24:08:b4:
                    de:85:f3:88:64:a5:59:cc:cd:a0:73:b1:81:83:01:
                    e1:9c:d0:c3:b9:72:11:1c:64:d4:08:53:4b:14:0d:
                    e7:6c:b8:b6:c7:8f:63:97:f7:75:5b:c3:35:f6:4a:
                    d0:62:51:3e:50:b4:37:27:4e:18:f9:32:22:bd:fc:
                    cf:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B2:5F:F2:6E:A6:03:4C:93:82:DD:ED:77:85:5C:D0:B7:85:70:A6
            X509v3 Authority Key Identifier:
                keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:18:37:6e:60:6d:89:dd:cf:99:fc:90:37:2f:89:94:87:57:
         62:5a:5c:11:64:86:15:10:cd:93:01:5b:c4:c5:d2:93:2d:1b:
         70:3f:a3:e7:56:7d:80:24:c0:56:b9:28:bd:e1:d8:47:b8:da:
         9a:32:46:05:31:16:ad:4f:38:11:34:3f:20:17:94:04:be:12:
         bf:81:d2:84:56:e1:4f:a5:90:54:51:c2:21:01:53:17:18:1d:
         75:6c:74:96:a7:ce:58:84:92:8e:3f:cd:49:30:ba:e2:e3:38:
         a5:27:54:ac:8e:a4:52:d9:87:ad:de:6b:f2:42:88:15:5a:fe:
         79:19:2c:30:bf:f9:a4:27:9a:2f:87:14:23:23:87:8d:11:70:
         39:e4:42:00:da:59:47:44:ff:c3:bd:4d:37:5a:40:1c:07:b5:
         a6:03:b8:bd:45:46:ac:5e:a2:1a:99:13:bd:5c:c5:ce:b3:5a:
         ff:f7:1a:73:10:a9:46:6c:48:fc:84:a1:af:20:9a:d2:6a:39:
         d6:08:cc:1c:88:72:b9:76:30:f7:1a:18:70:e0:b0:65:fd:98:
         da:75:b1:0b:00:ab:7d:51:27:6f:dc:f6:5d:80:f0:b7:53:5c:
         1d:b0:82:eb:d7:8b:e4:6d:4e:45:a0:c5:e7:cc:0d:c4:78:07:
         5a:3f:74:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:41:35 2026 by rpki-client