Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
File:                     f_sBFcSs3dG0rcQHN4Byas_AGvk.mft (raw, json)
Hash identifier:          xGusa/fWge9Y0Iul4+qhCSo/+m0ljNHURDkK3gp5oZE=
Subject key identifier:   7D:EF:C2:10:75:BA:F9:A7:8C:BB:AA:84:DF:B2:5D:E7:76:13:D4:5B
Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
Certificate issuer:       /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Certificate serial:       01A0CFA4543D91F1713AF9FBB5C11A7AE051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
Manifest number:          0F74
Signing time:             Wed 23 Sep 2026 19:00:48 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:48 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:48 +0000
Files and hashes:         1: f_sBFcSs3dG0rcQHN4Byas_AGvk.crl (hash: UynHUhUi50q64Y/AxXJ8HwlbuxKIXBipZncBYv4fbbU=)
                          2: iuDASUb0OcEG7E9NhPvGrlzMShY.roa (hash: ap/QCleQpzEp2XCCBDxsxK10769HbmIBZHWPFMwID/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:54:3d:91:f1:71:3a:f9:fb:b5:c1:1a:7a:e0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
        Validity
            Not Before: Sep 23 19:00:48 2026 GMT
            Not After : Sep 24 19:00:48 2026 GMT
        Subject: CN=7defc21075baf9a78cbbaa84dfb25de77613d45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c8:fb:a4:f1:25:b4:a4:b9:55:e5:e0:b8:30:
                    e1:ac:67:46:e8:6b:0f:04:40:9a:f5:95:b6:ae:99:
                    40:9e:ad:28:df:32:0b:9e:b7:70:39:7e:af:54:d9:
                    5a:c5:c1:ba:84:6f:24:97:9d:0c:2e:cb:4e:91:51:
                    87:82:54:4c:ae:7d:56:df:b3:05:81:c5:65:77:8b:
                    9f:fb:42:71:89:0a:0a:cf:3b:4a:ce:d2:e0:06:34:
                    79:39:b0:d2:11:46:ab:f4:15:ea:b6:7f:b4:f4:a7:
                    31:35:d5:5a:f0:4b:ae:d2:e2:4e:0d:19:b1:96:c5:
                    63:4d:36:da:e0:74:9d:d2:9f:82:97:e3:21:5c:55:
                    9e:49:71:48:5b:57:79:ba:d8:1b:d0:96:31:c5:41:
                    f1:27:88:18:01:02:86:1f:bf:5e:ff:cd:5d:bd:c2:
                    5f:7c:84:a7:6a:e9:26:c0:20:34:44:98:b9:b4:be:
                    4a:8c:08:fb:36:d5:e8:c5:05:cd:f3:06:67:28:b0:
                    d6:cd:94:a8:d8:e0:2d:c0:27:28:2a:0f:b3:88:18:
                    be:a9:09:d5:e7:13:2d:f8:54:56:eb:10:d4:17:79:
                    b1:6b:9f:09:44:c0:cc:52:d1:7d:fb:04:8f:1c:e3:
                    7b:45:f6:0f:a9:e8:9e:ce:fb:c1:82:b1:2d:b8:91:
                    29:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EF:C2:10:75:BA:F9:A7:8C:BB:AA:84:DF:B2:5D:E7:76:13:D4:5B
            X509v3 Authority Key Identifier:
                keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:94:28:bb:51:ca:50:da:2d:d1:a5:68:88:b1:5b:05:f5:74:
         f1:39:1b:4f:c6:29:3a:e7:55:91:50:b0:dc:a4:c0:4f:35:b5:
         ec:3c:73:63:5f:f8:e9:a6:48:40:6e:b6:0a:c6:85:6e:8b:1e:
         88:f4:b2:29:b8:ad:db:b9:9d:10:22:66:dd:3b:be:3c:8a:9f:
         df:36:4a:61:0c:e0:f6:53:c7:ab:33:43:c3:97:02:60:82:d3:
         53:54:8f:23:21:a7:3b:73:ee:9c:1d:21:49:7d:a5:8f:03:bb:
         c3:be:4f:cf:bf:54:3b:91:08:44:04:a1:4b:22:1d:f8:27:64:
         b5:06:5d:f2:1c:30:46:57:19:f6:6d:f4:83:ef:84:fe:42:d5:
         52:99:7e:bd:0b:ae:d1:16:49:1d:b2:50:75:93:e2:ac:d7:94:
         41:2d:d4:1e:30:c8:51:56:b8:c4:43:c3:64:ca:77:66:79:eb:
         d0:4f:4a:b1:0f:f7:70:4d:a9:c3:05:eb:44:6c:1a:49:bc:5a:
         61:83:13:b3:f3:6d:4c:82:6e:ec:d5:14:1b:3c:84:2f:76:c7:
         b0:98:3c:01:f2:8b:0e:16:6a:43:35:4d:3f:53:86:f3:34:a4:
         59:8c:40:74:fe:59:07:6b:a3:ec:21:e2:ff:26:8d:66:4d:48:
         95:50:84:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:52:35 2026 by rpki-client