Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
File:                     FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft (raw, json)
Hash identifier:          VSiZAI+LxU1P+kyMPVuMpPYgtwroSH+mhr48mCOvDFY=
Subject key identifier:   04:DA:16:5F:26:4C:D8:7E:63:A5:A1:63:66:44:E0:CD:A2:D9:22:55
Authority key identifier: 16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16
Certificate issuer:       /CN=16992f451372c7a20b624bcfaa3d9753926c5c16
Certificate serial:       01A0C9D894D8460AC2B94B66CC16F7E2A610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
Manifest number:          0280
Signing time:             Tue 22 Sep 2026 16:00:09 +0000
Manifest this update:     Tue 22 Sep 2026 16:00:09 +0000
Manifest next update:     Wed 23 Sep 2026 16:00:09 +0000
Files and hashes:         1: EYbnkdsGi0cWbkFU3UiOzuHllwM.roa (hash: FBbq4acRcJHICFhiug0/npiuCo5RqLFSogoLF21zVfA=)
                          2: FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl (hash: URHTA8ucnuZo1N+giTfPp5fqis8FYBtIgsGmzCYluAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d8:94:d8:46:0a:c2:b9:4b:66:cc:16:f7:e2:a6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16992f451372c7a20b624bcfaa3d9753926c5c16
        Validity
            Not Before: Sep 22 16:00:09 2026 GMT
            Not After : Sep 23 16:00:09 2026 GMT
        Subject: CN=04da165f264cd87e63a5a1636644e0cda2d92255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:61:19:d2:03:9f:b7:61:0f:23:f6:91:fe:b5:
                    4d:3d:0b:40:b3:be:28:04:46:e9:dc:9d:52:15:5a:
                    b8:a9:15:55:a1:4f:18:2a:bc:75:4b:0f:ed:ba:cb:
                    2b:9d:b7:f8:21:6a:cb:3e:93:15:d8:28:4e:65:d9:
                    26:66:22:bb:3c:61:b8:5a:8f:a3:de:cf:87:28:6e:
                    5e:bd:5e:ae:49:37:f6:35:8d:52:b1:da:d9:da:04:
                    93:08:a8:50:e4:9d:0c:8c:3e:71:c7:e2:32:1e:34:
                    c3:c4:ed:55:04:d9:1c:72:59:c3:0c:22:ea:98:59:
                    2c:c7:be:b0:a9:20:32:84:10:c4:44:ba:6a:7a:1b:
                    c7:c7:26:4e:ec:5c:21:7d:83:82:dd:8d:71:2d:62:
                    95:71:23:d4:b8:a2:0c:3e:9e:de:ac:98:e3:41:b4:
                    31:46:4a:77:d8:8e:00:aa:55:7e:f9:66:ca:2c:84:
                    ee:3b:e7:88:4b:71:dd:ad:78:81:88:de:76:14:41:
                    c4:a0:05:9c:d1:82:17:6c:bc:51:4b:4a:da:26:29:
                    ce:c5:17:fb:fc:d4:45:eb:d1:0f:80:9b:87:68:5c:
                    9a:74:c4:23:6e:17:ba:c0:fc:bb:70:4e:d2:c7:4d:
                    ed:55:a3:fe:f3:2a:c1:31:b5:8a:79:c4:66:0b:69:
                    35:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DA:16:5F:26:4C:D8:7E:63:A5:A1:63:66:44:E0:CD:A2:D9:22:55
            X509v3 Authority Key Identifier:
                keyid:16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:52:63:ad:62:bf:d9:5c:22:59:e4:41:3d:72:60:a9:60:b5:
         3d:e8:70:2b:c9:f6:43:b4:bf:7c:2e:54:f5:e1:fe:0f:fc:58:
         c0:04:27:8b:51:15:dc:86:74:53:bc:b8:95:87:a4:5f:ad:43:
         4a:3c:49:10:5c:0b:de:42:ef:a3:31:a9:e2:54:27:3e:c9:f4:
         e2:31:95:63:4a:e8:d7:e0:01:5f:7e:a0:a5:1f:62:a9:94:08:
         1e:22:57:a0:7d:e9:f4:05:5f:5f:ee:7f:97:ad:71:56:07:f3:
         36:85:26:4d:13:cb:6d:5b:ba:90:f3:c3:9b:62:a8:53:14:46:
         98:cc:30:70:40:64:03:fc:f6:ac:4d:4a:d0:cf:a3:1a:7a:0b:
         e8:ad:73:4a:3d:75:b5:e1:73:33:bc:b0:17:67:d6:8d:24:fd:
         d5:13:44:7d:1e:ec:f4:5f:ab:80:29:2d:31:4b:a5:9a:07:6b:
         e5:cc:84:b3:30:20:8f:24:af:92:d5:98:35:76:65:62:a6:61:
         70:ba:99:71:83:bd:dc:73:90:40:d7:64:93:8e:38:29:2f:9b:
         a7:fe:07:0b:f1:6a:96:fb:bd:bf:04:05:b7:df:a6:00:2c:e2:
         b9:36:5d:fd:1e:51:20:f4:ed:84:8a:36:e3:3f:79:2d:47:22:
         f4:42:c1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:50:46 2026 by rpki-client