Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/aa87c7-edef-4b84-9164-368e3ffb9f50/1/FVyGOUifFGOmhVPNwF0ZZKAXoac.mft
File:                     FVyGOUifFGOmhVPNwF0ZZKAXoac.mft (raw, json)
Hash identifier:          IWWLE0bIa5aN5fvJXUcmlQmUsLyv+wnZED00gF/F7Fk=
Subject key identifier:   92:C3:00:B0:BF:B4:AE:24:5B:01:25:74:3F:11:2C:F5:EA:CD:F4:48
Authority key identifier: 15:5C:86:39:48:9F:14:63:A6:85:53:CD:C0:5D:19:64:A0:17:A1:A7
Certificate issuer:       /CN=155c8639489f1463a68553cdc05d1964a017a1a7
Certificate serial:       01A0BF556689F2AEC367D6240F7BD9D1E677
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FVyGOUifFGOmhVPNwF0ZZKAXoac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/aa87c7-edef-4b84-9164-368e3ffb9f50/1/FVyGOUifFGOmhVPNwF0ZZKAXoac.mft
Manifest number:          3B
Signing time:             Sun 20 Sep 2026 15:00:40 +0000
Manifest this update:     Sun 20 Sep 2026 15:00:40 +0000
Manifest next update:     Mon 21 Sep 2026 15:00:40 +0000
Files and hashes:         1: FVyGOUifFGOmhVPNwF0ZZKAXoac.crl (hash: LvDqq2BZ2NE0We384gfRSMJ2pW8M14soa0zWsR+TU24=)
                          2: idT0R1HkBpvz-S3yQxmn_MoANr0.asa (hash: lR17MLIKlOQLm8nrwr7pO36RN7SXU12UrDM6XUqOiZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/aa87c7-edef-4b84-9164-368e3ffb9f50/1/FVyGOUifFGOmhVPNwF0ZZKAXoac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/aa87c7-edef-4b84-9164-368e3ffb9f50/1/FVyGOUifFGOmhVPNwF0ZZKAXoac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FVyGOUifFGOmhVPNwF0ZZKAXoac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:55:66:89:f2:ae:c3:67:d6:24:0f:7b:d9:d1:e6:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=155c8639489f1463a68553cdc05d1964a017a1a7
        Validity
            Not Before: Sep 20 15:00:40 2026 GMT
            Not After : Sep 21 15:00:40 2026 GMT
        Subject: CN=92c300b0bfb4ae245b0125743f112cf5eacdf448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:80:0e:31:37:ba:04:1c:0e:ef:ca:fa:18:
                    1f:7f:68:e3:45:57:d4:bb:94:24:ec:b2:cd:f0:7e:
                    d5:7b:a2:74:5c:ef:c3:cc:06:d8:08:66:2c:25:d4:
                    fe:42:d4:ee:f1:4e:35:35:2c:51:b6:d8:d0:9d:16:
                    ab:ff:8d:c6:6e:5a:c8:b1:b2:af:4d:74:ae:35:47:
                    8a:49:5d:dc:80:ff:e2:86:3d:0f:7c:8f:8b:a1:e9:
                    8c:db:23:7b:be:c2:31:8e:b8:c3:fa:b5:68:78:ef:
                    91:00:d6:95:b9:0a:a4:36:68:5e:15:d0:ad:e8:74:
                    06:8a:11:49:85:38:6d:62:ac:d7:a3:35:7b:e0:19:
                    ff:e6:40:38:37:30:7f:7f:40:45:0b:83:b3:91:0e:
                    e0:b6:7d:c3:09:3f:0e:df:47:aa:af:94:e7:cf:ff:
                    b1:6f:ef:ba:28:00:3b:4d:c6:79:d3:5a:41:9a:b1:
                    bb:61:f2:73:b0:1d:9e:a0:89:f1:89:50:85:57:48:
                    bd:a5:5f:e0:87:f0:de:e3:ec:94:06:6f:a2:eb:16:
                    fc:09:23:52:40:9a:81:88:39:39:d1:c8:e9:6d:d3:
                    d5:4e:cd:29:77:c1:de:03:b0:78:e2:56:4e:49:7d:
                    5a:03:d8:66:68:5e:df:33:96:11:ea:f5:06:d9:ba:
                    a0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C3:00:B0:BF:B4:AE:24:5B:01:25:74:3F:11:2C:F5:EA:CD:F4:48
            X509v3 Authority Key Identifier:
                keyid:15:5C:86:39:48:9F:14:63:A6:85:53:CD:C0:5D:19:64:A0:17:A1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVyGOUifFGOmhVPNwF0ZZKAXoac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/aa87c7-edef-4b84-9164-368e3ffb9f50/1/FVyGOUifFGOmhVPNwF0ZZKAXoac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/aa87c7-edef-4b84-9164-368e3ffb9f50/1/FVyGOUifFGOmhVPNwF0ZZKAXoac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8c:65:75:f1:2f:b1:b5:36:ce:10:9e:48:4a:cf:2a:d5:5d:
         87:41:cb:7b:ca:6b:29:ca:8c:76:4c:4c:fb:fd:6c:9c:34:09:
         84:f7:d8:f3:73:a9:e6:d1:3c:14:14:cc:c5:1c:a9:81:5c:9e:
         77:24:db:4a:02:be:a6:13:dd:ca:71:ea:b2:55:b7:e3:ad:a4:
         60:17:67:d8:60:f5:50:91:68:21:66:81:d2:04:73:ed:a0:c7:
         5d:ee:6e:7a:e6:6d:f1:07:fa:00:92:ac:f5:51:e3:56:81:f6:
         6f:94:5d:d6:7b:e1:c2:a7:18:2d:54:ec:69:4a:e3:1e:0c:9f:
         1b:2c:d7:e8:23:10:15:dc:c3:25:9c:d1:e5:97:31:ca:15:26:
         ab:b1:bd:eb:22:a2:22:8c:88:a4:29:84:e2:9e:ba:19:4c:6f:
         5f:6d:61:13:cc:31:86:e9:90:2b:88:5d:e9:ee:59:d0:e3:e0:
         78:4a:af:c1:08:1a:7d:aa:b9:64:4d:7c:ab:99:33:7f:92:5d:
         ec:d2:e9:fb:46:02:03:b9:00:ed:c5:e3:a0:e5:52:0e:fe:cb:
         fa:60:e7:77:b7:bf:32:1e:a9:e9:a6:1d:9f:7e:e0:21:82:86:
         34:57:89:0d:37:c6:1b:69:1e:c1:68:c5:76:3d:3e:5a:ab:66:
         1f:81:a7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:07:48 2026 by rpki-client