Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
File:                     fEuRfckEagZWeK4N9NPjA2nFnGk.mft (raw, json)
Hash identifier:          CDoB292F154SP1R3V5CC89r1m1IY0hMrYD1TV21xOsU=
Subject key identifier:   A9:58:E4:F0:97:2A:7E:5C:53:89:05:E3:D1:53:4C:BE:13:1D:CF:13
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Certificate issuer:       /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial:       01A0CD7F0A5CD6CC3B8E24085625E55ECF42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
Manifest number:          1A72
Signing time:             Wed 23 Sep 2026 09:00:50 +0000
Manifest this update:     Wed 23 Sep 2026 09:00:50 +0000
Manifest next update:     Thu 24 Sep 2026 09:00:50 +0000
Files and hashes:         1: 2WzfG0V96raprl5tsrksiHfaCdM.roa (hash: cj3zFnBwwSp9dR2SjduOa1CA7OqZ5tws9MqCW7cLVIs=)
                          2: GwGQYsMzCM-acyFwRTD_V6RJb1M.roa (hash: yUvTGQ5x8/a8Em1WiCW5G1UcimmI7vXu3ljW5sL9lrQ=)
                          3: ay0zAsb-sMRwuqTNi_w0IDfhaZI.roa (hash: 3u1jyhcVn10YQbx/gEpZqXx9qUydqj7K6pIwggoaC9c=)
                          4: fEuRfckEagZWeK4N9NPjA2nFnGk.crl (hash: dzoufJEsBWYbC2tnDew0wlrmGH1GR7us+OBHz84O2Io=)
                          5: rjeQuso8QDTQv-e8DadgkyEpULg.roa (hash: 4fHbwtCeYsUoufkC59D0UmTlBIXmN4qyj78Mnr4mr2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:7f:0a:5c:d6:cc:3b:8e:24:08:56:25:e5:5e:cf:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
        Validity
            Not Before: Sep 23 09:00:50 2026 GMT
            Not After : Sep 24 09:00:50 2026 GMT
        Subject: CN=a958e4f0972a7e5c538905e3d1534cbe131dcf13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:cc:0b:ea:27:d6:19:85:96:fb:b5:71:af:92:
                    65:9b:03:ff:20:1c:b0:79:3e:74:b1:c4:53:e0:6a:
                    26:44:48:86:0d:7e:18:f7:42:74:45:8b:8f:86:19:
                    c5:86:13:bd:3f:cc:77:9b:69:f2:bb:b3:9a:42:34:
                    01:a9:fe:09:ba:27:fa:2a:60:02:21:c7:16:5a:5a:
                    d4:ae:f4:50:a9:e0:2b:10:0d:04:c3:c7:09:3a:fb:
                    74:3e:df:a3:f5:77:23:99:0c:9e:d6:b7:1f:59:86:
                    af:18:ed:bc:fa:97:1e:a8:a2:39:4c:76:3a:7a:5c:
                    81:4b:44:ec:1d:5f:f4:77:f9:3d:75:e5:f2:ee:43:
                    1d:c3:0b:b4:07:77:fc:2f:03:f6:b2:ff:fd:2b:a4:
                    46:9a:8d:cf:d5:52:9b:24:9d:05:77:cc:56:22:f7:
                    7d:de:62:b2:4b:08:98:08:f6:b2:60:f5:9c:52:43:
                    a6:bc:29:6e:44:00:02:61:b3:a9:22:b8:30:d7:e3:
                    83:b9:9e:e4:1f:a2:71:91:08:bb:ac:0f:c1:ba:a6:
                    f8:18:88:af:42:d4:02:3e:15:9f:b8:42:2f:b7:93:
                    1d:7e:9f:f4:1e:fe:8f:14:c1:f4:00:80:83:86:60:
                    dd:bc:1d:86:36:e9:91:62:2a:da:bd:79:80:fc:c0:
                    17:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:58:E4:F0:97:2A:7E:5C:53:89:05:E3:D1:53:4C:BE:13:1D:CF:13
            X509v3 Authority Key Identifier:
                keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:bc:ae:47:50:3a:36:bd:61:51:ef:96:66:4e:25:fe:b6:0e:
         34:ad:33:c5:cd:05:75:96:77:69:31:7b:1e:68:d5:28:64:4d:
         00:86:81:70:e1:4b:73:06:77:3c:1a:44:07:27:e8:61:3e:ed:
         94:fc:66:97:05:03:0f:e7:af:ee:38:e0:b2:25:e4:b3:2e:c0:
         39:c3:ae:14:6d:00:5e:d3:88:2e:29:ae:09:fc:5e:46:70:d1:
         07:38:fc:37:c6:6d:18:db:8f:d2:17:df:ca:56:2a:0d:d7:88:
         b1:48:2e:10:99:ad:1d:54:0b:b8:44:94:4f:00:7d:ec:66:30:
         61:c7:10:50:8a:e2:72:d6:92:8c:ee:59:ae:cf:55:3e:6b:3b:
         aa:58:ff:66:db:3d:10:de:95:c8:73:a0:dd:d8:27:23:da:b2:
         bb:25:3f:e4:0b:cf:eb:b6:da:a2:35:56:9e:44:62:72:4c:c7:
         3f:e3:d6:cd:eb:64:29:d7:cf:96:c9:01:6d:24:25:7e:de:38:
         f0:98:ed:a4:41:a6:f1:ec:a3:cc:d7:b6:ed:64:9f:99:05:0c:
         5a:da:8c:6d:c4:35:d7:20:75:2c:a2:15:b6:e8:a4:63:22:78:
         69:8d:54:93:60:c0:9c:74:dc:a3:68:02:90:71:f5:02:90:d1:
         9d:01:46:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:26:32 2026 by rpki-client