Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
File:                     _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json)
Hash identifier:          i1osB1WNz0CHTH3NQdqcRQlK5qdNPSltxt1RSFewXmA=
Subject key identifier:   92:D9:C6:5A:C0:15:28:3E:D3:70:91:3F:8E:7C:F9:9E:08:4E:8E:AD
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Certificate issuer:       /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial:       01A0C7B35FF6221FDCC7905235F2143C4237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
Manifest number:          1A66
Signing time:             Tue 22 Sep 2026 06:00:16 +0000
Manifest this update:     Tue 22 Sep 2026 06:00:16 +0000
Manifest next update:     Wed 23 Sep 2026 06:00:16 +0000
Files and hashes:         1: VN6UE1yUAoIOdq7FN7_6LWg0xFQ.roa (hash: i1/itHXENkjfqquOuYnqwae8exirw7XvZQTu+xWF/aw=)
                          2: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: Tcidp4AHRLu8bgVV3Un630PjlxsPQ1LSLc7Z+nwsBnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:b3:5f:f6:22:1f:dc:c7:90:52:35:f2:14:3c:42:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
        Validity
            Not Before: Sep 22 06:00:16 2026 GMT
            Not After : Sep 23 06:00:16 2026 GMT
        Subject: CN=92d9c65ac015283ed370913f8e7cf99e084e8ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a8:cf:bb:b8:e6:cf:f0:cc:cf:77:88:27:b5:
                    2a:84:1f:28:0c:11:8c:9a:5d:c1:16:82:f0:d3:cb:
                    56:85:83:13:07:85:d9:e0:e2:a2:0d:36:9a:47:03:
                    3e:80:f6:f6:04:33:31:ca:0e:28:c9:67:e1:54:84:
                    bd:68:fc:41:a7:85:d9:43:dd:3c:f4:d6:81:32:59:
                    c9:20:1d:f1:54:43:88:97:fe:68:35:7b:6f:ea:9d:
                    95:88:9a:00:52:fd:3a:71:f2:ba:6f:18:e9:d4:cb:
                    f4:1b:f4:9d:a5:a4:54:dc:b4:e0:06:93:f6:66:e8:
                    c5:e3:65:80:b9:f5:9f:8c:58:b0:71:32:bd:f6:32:
                    10:2f:0b:86:01:db:cf:ea:df:6e:3e:07:21:40:ab:
                    06:ff:44:24:de:ca:95:13:66:89:40:9f:b2:d4:3c:
                    1b:87:e5:99:2f:12:7f:e4:11:2b:51:ee:41:8d:9b:
                    35:48:fe:93:fc:7a:b6:23:ad:59:61:64:06:e6:60:
                    94:e1:65:fe:12:f3:b7:41:c5:30:17:25:60:f6:cc:
                    43:2d:ee:2f:47:69:d0:2d:8d:fe:f2:38:3d:70:be:
                    eb:8d:b5:97:84:8c:e2:23:88:db:af:12:50:b8:7c:
                    42:bf:34:cb:f5:2c:bc:0a:f0:65:c2:bd:8e:59:75:
                    95:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D9:C6:5A:C0:15:28:3E:D3:70:91:3F:8E:7C:F9:9E:08:4E:8E:AD
            X509v3 Authority Key Identifier:
                keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:93:e7:39:1c:7b:12:e8:88:13:db:65:70:aa:55:43:20:86:
         1f:ce:89:d1:3e:cf:8c:7e:b0:fa:f4:92:37:c0:73:6c:c0:15:
         12:7d:21:25:9b:83:d1:55:41:40:47:09:57:28:ca:46:12:74:
         5b:0c:ad:58:6c:c7:6b:48:62:01:12:f9:39:42:f2:28:94:f6:
         54:e8:5c:48:ca:6e:c4:9a:61:e2:97:b5:a6:6c:9b:55:0a:a3:
         15:ac:1b:58:18:5b:d3:1f:43:a1:5f:73:bb:78:7d:76:39:a3:
         5b:11:cc:f3:05:b3:2b:d1:74:70:2d:f8:51:99:45:0f:60:44:
         c1:59:51:f2:d0:7f:55:23:35:d1:e5:8a:07:5d:d1:4c:91:7b:
         5d:2e:15:04:69:34:eb:bf:c3:fe:f4:69:c4:00:2d:83:07:1b:
         d6:66:dc:c9:01:4f:04:47:ce:2f:4e:56:e7:e1:1f:66:d0:1d:
         d7:7d:dd:3d:dd:7a:e8:0a:4b:ff:96:c8:30:32:4d:80:18:4e:
         50:c1:7c:18:55:36:83:17:e7:ff:2c:b4:a1:69:8f:75:eb:2e:
         58:5c:10:4c:b4:84:34:18:30:f4:3f:28:f6:2d:da:24:17:f2:
         66:82:0c:05:2d:19:07:8a:71:e8:7d:15:d0:51:06:08:89:d8:
         a0:fb:e6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:03:40 2026 by rpki-client