Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
File:                     Fd3Uydwj-sNVdPzitClDmK3YUhw.mft (raw, json)
Hash identifier:          3PP0jOphpnz2AkOSU/e2uS7Aon/rGoP5jlE6cYh3YBg=
Subject key identifier:   49:31:4B:8A:EA:D1:E1:7D:A5:77:B6:68:87:CA:76:54:9F:4B:33:0C
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Certificate issuer:       /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial:       01A0C3D6C8F37401BD05AF64E02F53983146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
Manifest number:          1201
Signing time:             Mon 21 Sep 2026 12:00:28 +0000
Manifest this update:     Mon 21 Sep 2026 12:00:28 +0000
Manifest next update:     Tue 22 Sep 2026 12:00:28 +0000
Files and hashes:         1: 3x_eNlfqr-pzS31r85Kyh1RTzhw.roa (hash: ca0B1hA6S7RSMd4p7jDgIrOLafYEE67HR7dN2aYSue0=)
                          2: AU0mK3kvJWDL6WvTMDBwruIk9Yo.roa (hash: UJ521U9kX8KbpPJ5yoTgLuBYMW8RZw/CsvE9VFkznzw=)
                          3: Fd3Uydwj-sNVdPzitClDmK3YUhw.crl (hash: mWuam94sR+WopLvIj83JuXPPYVYJ2fXk5fnjbrBgUuY=)
                          4: k3Io6XWMMdN-bVtwln4_8KO-IVA.roa (hash: Aa8iwiJFepHxrsbFSA+APkKdOhzyuMHdrvQewpxY1oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:d6:c8:f3:74:01:bd:05:af:64:e0:2f:53:98:31:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
        Validity
            Not Before: Sep 21 12:00:28 2026 GMT
            Not After : Sep 22 12:00:28 2026 GMT
        Subject: CN=49314b8aead1e17da577b66887ca76549f4b330c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:e7:74:78:74:d4:02:7a:73:dd:fd:23:6b:
                    8d:2f:21:a2:71:c5:bb:c3:15:9c:a2:f0:4e:45:df:
                    c6:c0:6d:cb:a3:81:71:6d:22:2d:d8:05:d9:5c:75:
                    b5:f0:b6:3b:8a:90:8b:a0:d3:5b:6d:ba:d2:2f:ac:
                    06:26:fa:15:20:21:fd:fc:85:6d:4d:6b:54:f5:a6:
                    31:c6:a0:12:9b:7b:f5:b7:2b:a8:32:a7:7a:f3:43:
                    c5:b8:82:a0:79:21:14:fe:49:30:dd:e5:07:2f:47:
                    cf:36:3a:e6:2d:3c:7c:6d:57:07:23:5d:29:fb:8c:
                    ca:64:db:51:f3:94:ca:98:65:7e:16:24:5f:71:ea:
                    ac:aa:e3:d2:d5:5e:29:6d:06:b1:41:24:e6:30:e2:
                    4c:db:6c:a5:ba:6c:52:f5:8d:12:5a:c1:90:b4:ae:
                    4e:c3:88:9a:1d:a7:a0:21:14:8a:dd:ab:08:ee:5c:
                    de:fa:88:b4:ff:40:af:f2:93:6b:0e:7d:d6:bc:95:
                    be:b2:56:5e:d8:a7:52:dc:15:97:f7:fa:15:66:76:
                    c9:9d:6a:cd:8b:92:5c:ed:b1:0a:95:20:68:93:ed:
                    7a:bd:c4:c4:65:86:8b:00:cf:98:43:bc:f0:cd:95:
                    99:66:ee:3c:cd:40:f3:7c:e2:c3:ad:6c:53:5d:4b:
                    71:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:31:4B:8A:EA:D1:E1:7D:A5:77:B6:68:87:CA:76:54:9F:4B:33:0C
            X509v3 Authority Key Identifier:
                keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:0c:27:23:83:61:6e:9f:6e:8f:87:83:10:dc:a5:cd:8b:72:
         33:cf:57:ad:57:a5:28:eb:08:7c:44:dd:29:9d:98:d8:11:cc:
         7b:a4:e7:2b:de:af:6c:f3:28:ec:bc:27:16:db:17:a2:25:e2:
         3c:fb:14:2d:24:15:2c:1c:e7:68:cb:65:c7:72:99:10:c9:d4:
         63:34:d5:f5:5e:c5:56:a4:96:43:77:ed:5c:06:f3:d9:93:55:
         d3:aa:12:1f:1b:7c:87:90:b8:d2:ae:1f:b8:bd:a2:ff:2f:cf:
         fc:80:67:fd:8e:4c:1c:dc:0c:e3:23:bb:ab:db:bf:62:04:a0:
         d6:69:48:01:4b:27:14:c5:c0:b2:9d:da:a0:6d:49:29:cc:99:
         94:6b:f8:68:58:d8:3d:79:06:30:de:3b:13:02:99:7d:09:da:
         09:a9:73:ff:b2:69:71:d4:2a:48:e9:0f:da:65:2b:78:01:a1:
         ff:4c:80:3b:07:97:47:3f:67:7f:7b:45:35:18:ff:07:01:04:
         85:ce:5b:dc:5c:2f:60:d6:5f:39:67:46:5e:dc:0d:6f:48:83:
         39:1a:03:65:01:d9:2e:f8:dd:e1:d6:61:d1:92:ea:66:29:3c:
         78:08:70:2f:b3:17:78:b3:4a:84:19:62:05:20:65:28:26:a7:
         69:0e:37:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:08:21 2026 by rpki-client