Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
File:                     FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft (raw, json)
Hash identifier:          Sd/wNfEgnUV1F9v90GQmLG6XBs6uRUk9xbNMYbtW4gQ=
Subject key identifier:   A2:1F:B5:93:07:1E:62:5B:7A:9F:95:12:91:0C:C4:79:AF:37:D0:9D
Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
Certificate issuer:       /CN=167782bea46fd271768ff46d9b45c057a9df5481
Certificate serial:       01A0D15BFB1ED60E3D7F70B9098B7CD8D7CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
Manifest number:          1A6D
Signing time:             Thu 24 Sep 2026 03:01:01 +0000
Manifest this update:     Thu 24 Sep 2026 03:01:01 +0000
Manifest next update:     Fri 25 Sep 2026 03:01:01 +0000
Files and hashes:         1: FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl (hash: B2hCf6kHvrqzjUWrTiL5MLpkmQHtrWxvtdJ2/yaOZJM=)
                          2: ivXhF8HUZHKEYR2EUtQx0A5y1L0.roa (hash: XQATR8bU8IBZH5tjUzM6YW6W1aJgryoOIOyHkr8fKR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:fb:1e:d6:0e:3d:7f:70:b9:09:8b:7c:d8:d7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481
        Validity
            Not Before: Sep 24 03:01:01 2026 GMT
            Not After : Sep 25 03:01:01 2026 GMT
        Subject: CN=a21fb593071e625b7a9f9512910cc479af37d09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6b:ab:51:c3:5e:68:91:4c:c7:d5:5a:c1:84:
                    03:ec:f0:72:fa:6a:27:d2:c1:29:dc:84:65:3e:16:
                    28:96:15:24:79:fb:a5:4b:8f:3b:f4:4c:43:42:5d:
                    0d:4e:4b:1d:1b:fa:6b:d7:8f:60:f6:95:d4:40:3c:
                    d1:18:53:47:27:5a:eb:a0:69:c9:d3:a7:ef:d7:a2:
                    20:a3:b7:18:1b:ae:a0:09:28:6c:27:d0:79:31:f1:
                    26:b6:7d:87:5f:a9:de:38:f3:ad:2b:ee:32:16:fc:
                    ea:e1:30:13:47:94:b6:12:94:b0:7a:36:fe:c3:0f:
                    d8:65:32:13:b7:7f:30:ef:07:7d:52:a8:e2:38:f1:
                    55:95:58:88:f2:c0:41:0b:02:f2:84:58:a4:7f:08:
                    8e:50:b7:19:06:43:90:ae:09:fc:e9:b8:bc:fd:c3:
                    e6:34:0f:a7:2f:4a:ec:2a:55:cc:11:1a:e5:87:06:
                    de:16:85:bf:02:c3:67:1f:7c:eb:c1:57:a7:f1:47:
                    23:cf:bd:56:e9:80:ae:b5:80:12:1a:07:3c:2e:7e:
                    d7:ac:9a:be:b8:10:2c:00:12:88:bb:f6:17:94:e7:
                    93:14:7c:97:6b:73:31:f9:80:98:62:a3:8b:68:49:
                    2c:95:c3:ca:38:8a:1b:07:74:67:6c:23:1b:d0:64:
                    ca:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1F:B5:93:07:1E:62:5B:7A:9F:95:12:91:0C:C4:79:AF:37:D0:9D
            X509v3 Authority Key Identifier:
                keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:49:c3:ed:78:c9:13:f7:e4:32:53:4e:6a:de:98:61:2d:a0:
         7f:5d:a4:02:38:dd:04:69:37:f5:06:da:46:c2:80:09:63:18:
         da:43:1b:14:ac:55:5b:a3:8d:d7:1a:94:4d:01:d3:b4:df:32:
         cd:42:1b:3f:b4:5b:84:a6:8c:8d:3f:a1:dd:ac:e2:b6:62:ce:
         12:70:0e:d9:47:2b:0a:1c:fa:54:a4:67:7d:e6:b9:40:83:29:
         9f:08:eb:0d:b7:5d:63:ab:b9:e5:5a:3c:86:d3:20:7e:6f:c1:
         03:7d:1a:fd:a8:32:bf:fd:dd:e9:0e:5f:55:61:03:18:95:89:
         1b:7b:85:41:c0:de:b7:73:17:99:cb:dd:3d:96:bd:4d:6a:49:
         ba:cc:d1:21:a5:dc:7c:74:fa:61:40:7d:fc:e0:fd:dc:27:aa:
         d1:5e:8e:0a:f5:fd:c1:7e:dd:ae:45:8a:4d:35:37:4d:3c:d8:
         eb:88:27:6f:e9:9b:2c:72:55:43:9c:1a:2a:93:ec:2b:b9:73:
         7c:d6:1b:4e:5d:dc:11:9f:6f:33:fc:38:6b:68:ea:b7:4e:5b:
         39:c1:f6:4e:db:cd:9b:46:b7:0a:5d:d5:bf:8e:cf:b4:1f:77:
         28:31:e6:e3:11:85:f9:58:c7:bd:6b:d3:0d:6f:71:d6:80:9f:
         52:9d:a9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:12:39 2026 by rpki-client