Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File:                     fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier:          Pa5rMzOz4zRWAC3AnIMJwoIj4it/DM1XzJ6kfbzMj/E=
Subject key identifier:   84:46:F4:81:D3:BC:47:84:8E:80:5F:51:7C:DF:98:88:66:2D:6A:17
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer:       /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial:       01A0CD4784350E802D901F25D5A78F3CDB74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number:          0B7C
Signing time:             Wed 23 Sep 2026 08:00:11 +0000
Manifest this update:     Wed 23 Sep 2026 08:00:11 +0000
Manifest next update:     Thu 24 Sep 2026 08:00:11 +0000
Files and hashes:         1: Wx2W2x44SbNMpet_nxHfcd54RRg.roa (hash: RaqqpE5anacxSOoNS8mABkC5o0iVF+x65+b349Ql+4w=)
                          2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: eS1zei9RclA8SSIy1qcBTB5BgDSN1DKdYNx9SM5iWUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:47:84:35:0e:80:2d:90:1f:25:d5:a7:8f:3c:db:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
        Validity
            Not Before: Sep 23 08:00:11 2026 GMT
            Not After : Sep 24 08:00:11 2026 GMT
        Subject: CN=8446f481d3bc47848e805f517cdf9888662d6a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:81:33:04:ba:4c:ad:bf:5f:74:a9:d4:5d:
                    ab:28:cc:33:d9:f7:ce:29:7a:9b:17:3e:81:97:3f:
                    7e:45:c8:bf:84:a8:bf:c4:ff:a3:2d:56:d9:14:bd:
                    45:2a:48:7e:80:17:08:d6:69:53:5b:e5:15:38:49:
                    60:b0:4e:c8:67:a2:8e:47:ff:a3:07:78:e7:95:79:
                    a6:ea:85:b4:b5:10:c5:cd:f4:5d:1e:3d:84:40:62:
                    3b:fe:5f:3f:92:e4:4c:2c:af:0a:a9:48:97:e6:af:
                    7d:3f:e0:ad:25:bf:96:e0:b0:35:1e:6c:e8:1f:72:
                    c0:68:5d:64:33:2f:6a:2a:28:a2:5c:57:a2:00:e6:
                    23:f1:37:9e:07:9c:6f:a1:50:e4:1a:90:84:bc:53:
                    43:50:c7:17:fe:54:54:71:70:a8:cc:25:be:d8:e1:
                    81:58:18:46:18:0b:48:9e:b9:ee:43:9b:a4:df:cb:
                    95:a0:b1:9a:2e:66:7a:b9:6b:a6:d2:9c:ce:56:8b:
                    99:1d:dc:bf:a5:19:36:00:04:5b:c9:63:6f:75:55:
                    c2:40:a9:a9:16:f2:7a:ec:71:6a:2a:cd:d9:35:ec:
                    81:ad:a2:19:a0:93:89:43:d7:1f:dc:05:e4:92:1e:
                    eb:16:bd:fd:99:a6:64:d3:6f:39:1f:5f:37:34:f9:
                    c8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:46:F4:81:D3:BC:47:84:8E:80:5F:51:7C:DF:98:88:66:2D:6A:17
            X509v3 Authority Key Identifier:
                keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:97:9f:37:04:34:ae:96:e0:dc:fb:7b:26:d1:24:43:fa:36:
         38:8d:fe:08:83:af:ce:f5:5a:b2:5c:bf:91:60:8c:d5:65:ab:
         60:40:1e:d6:9d:26:8a:47:54:c4:be:e2:fc:ee:e8:59:b9:d6:
         05:35:66:f4:9e:67:0d:14:1a:fd:88:ef:2e:6e:07:12:f4:b6:
         ed:41:3a:13:8a:ec:1a:c6:86:23:8b:4b:b6:18:2c:4d:90:de:
         49:50:66:45:38:2c:89:66:5e:36:04:11:97:81:42:84:54:49:
         28:8e:07:5c:38:10:6d:87:d3:c6:2b:82:40:97:b4:01:a7:3a:
         b7:ec:50:b7:3e:30:09:a1:e1:05:0b:88:df:34:d0:4c:d0:36:
         01:d4:5e:a5:6f:6c:11:59:fa:99:5f:dc:14:a7:13:c6:d2:64:
         53:eb:56:6b:ae:71:b2:2a:d5:51:a4:1b:5f:37:9d:69:ce:29:
         6f:a1:8f:18:d6:2a:9f:e3:9b:f2:51:31:10:e8:81:f4:1e:de:
         00:27:cb:66:e8:72:65:f2:43:1e:a0:62:7e:e8:d4:50:35:fc:
         b1:22:48:9d:17:12:fe:6c:1a:29:c6:bd:32:14:38:ef:8e:c1:
         cc:66:dc:a4:5f:c7:87:62:45:64:75:9e:91:7d:43:72:c1:6e:
         04:e6:7b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:48:04 2026 by rpki-client