Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File:                     FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier:          SME5tqFj+rlf6gViLfg+QaqOHbEjGMR0FMUBbzPkdzw=
Subject key identifier:   8B:84:3A:2A:D6:6E:5F:87:AD:3A:BF:60:D1:24:C5:CB:FB:8E:42:89
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer:       /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial:       01A0D494933432FBA5E07ECB2AF8F7720CB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number:          084D
Signing time:             Thu 24 Sep 2026 18:01:41 +0000
Manifest this update:     Thu 24 Sep 2026 18:01:41 +0000
Manifest next update:     Fri 25 Sep 2026 18:01:41 +0000
Files and hashes:         1: DryZPdsnz8wKaTiw0pPMUAKMwos.asa (hash: DE1MBRda0AF506miFfOnjiVNIDiBBy3JyuXMEw9Jwn0=)
                          2: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: WqwQ2LmOWmkUMEUqpiMoBlcfulu89fp8CR/XdBj+SW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:94:93:34:32:fb:a5:e0:7e:cb:2a:f8:f7:72:0c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
        Validity
            Not Before: Sep 24 18:01:41 2026 GMT
            Not After : Sep 25 18:01:41 2026 GMT
        Subject: CN=8b843a2ad66e5f87ad3abf60d124c5cbfb8e4289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:68:a4:b4:7d:8f:82:dd:29:3f:14:02:a2:
                    4d:cf:30:49:be:ef:43:ce:6d:0f:a0:79:3e:f4:d8:
                    5e:7c:92:16:9c:32:7b:61:89:bf:3d:62:1a:ff:fe:
                    15:06:d8:c3:88:13:f7:5c:c7:e3:48:b3:0a:11:0a:
                    11:a1:7a:46:58:11:a5:91:e9:44:b0:74:17:69:ab:
                    91:3c:d6:89:c8:c8:e0:97:e0:1f:58:cd:a6:d3:56:
                    e7:78:3b:6b:be:d8:29:45:3b:d2:e8:9a:76:5e:93:
                    b6:15:98:55:fc:58:1b:10:c2:f4:09:6a:d0:0f:55:
                    e4:22:10:7c:d5:dd:38:7e:a7:b3:ca:34:95:bf:f8:
                    b9:f6:1f:bb:b1:90:2c:c5:c4:3c:50:9c:b4:86:e7:
                    2a:50:7b:79:14:0b:42:ee:04:60:eb:3f:fc:58:10:
                    98:4c:88:f7:a1:3e:71:59:8d:a0:6a:08:b2:ff:00:
                    15:04:f4:66:96:16:1d:44:c7:ad:4c:f6:0d:05:34:
                    03:d6:51:c4:0c:9e:fb:ca:d0:7b:3a:f2:7b:e6:54:
                    f4:dd:83:f8:e4:2b:9e:f1:84:d4:d2:fd:da:2b:5c:
                    fd:97:ca:22:05:c5:c3:6a:cc:ae:87:8c:84:20:27:
                    aa:3a:5c:0f:76:68:eb:e0:ea:ff:2a:fc:67:2f:c7:
                    e9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:84:3A:2A:D6:6E:5F:87:AD:3A:BF:60:D1:24:C5:CB:FB:8E:42:89
            X509v3 Authority Key Identifier:
                keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c3:3f:b6:b1:e0:ab:ee:38:e6:ec:e3:ad:80:d5:13:73:76:
         18:b7:7e:8f:68:a1:93:d4:7a:5c:3c:7f:65:ac:23:49:5a:6e:
         8b:1e:ea:15:07:10:aa:dd:98:f5:a5:92:c2:88:0d:72:fb:33:
         16:ad:18:0c:8a:94:d0:e2:62:28:3a:dd:cc:67:5e:57:21:10:
         59:6d:0b:d7:c0:47:b6:c1:d0:8a:9e:b8:d7:1d:44:37:3d:d9:
         f1:85:af:e0:9c:32:65:7c:dd:6c:7b:be:8e:c3:0d:57:e9:87:
         c2:78:69:65:13:6e:bc:15:9a:cf:82:0d:88:73:33:00:91:90:
         fe:76:f1:0a:01:d2:0a:5b:49:39:4d:be:db:31:45:49:cd:45:
         12:ca:2f:27:72:48:43:7a:d1:9e:de:87:e4:61:db:4d:b7:43:
         78:dc:b3:3e:0e:c2:b2:c9:84:a4:c5:c6:4b:91:c5:ab:c2:3b:
         4e:54:57:62:d9:fd:88:de:8e:b7:6c:c6:a4:78:02:85:3f:4b:
         ff:7a:5e:93:23:30:aa:bd:71:39:cf:2b:59:88:9c:7d:43:39:
         79:86:c3:28:32:cf:1f:96:fd:b7:d4:86:02:5f:75:6f:6d:a0:
         eb:fd:2b:11:db:a2:3d:fd:b6:59:af:5b:d6:c2:81:79:f5:22:
         42:2e:76:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:09:41 2026 by rpki-client