Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
File:                     FfXEJ7UOueKq98WswbIoljOrU1M.mft (raw, json)
Hash identifier:          GqZnOOceiBDVo/GwI83qM3BAz36c/a/jiLYtWIppuVg=
Subject key identifier:   12:93:CE:62:85:6D:70:C1:9E:FC:E5:A0:13:C4:F3:A9:96:DF:77:6A
Authority key identifier: 15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53
Certificate issuer:       /CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353
Certificate serial:       01A0D804C9727AF631A0AB3F074D3FF50E39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
Manifest number:          035D
Signing time:             Fri 25 Sep 2026 10:03:07 +0000
Manifest this update:     Fri 25 Sep 2026 10:03:07 +0000
Manifest next update:     Sat 26 Sep 2026 10:03:07 +0000
Files and hashes:         1: FfXEJ7UOueKq98WswbIoljOrU1M.crl (hash: AuhWpA7s6JPy+0QRuO6oXUIIwDIBrMNJqHn5zYVGPeM=)
                          2: QB6IjG25mOKNaxsVjuB38lmC2hs.roa (hash: R3eK+TP7VbOaPSIht9zdm6FFs2zJ4wqUGZxjbXUn4oM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:04:c9:72:7a:f6:31:a0:ab:3f:07:4d:3f:f5:0e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353
        Validity
            Not Before: Sep 25 10:03:07 2026 GMT
            Not After : Sep 26 10:03:07 2026 GMT
        Subject: CN=1293ce62856d70c19efce5a013c4f3a996df776a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:a4:68:de:31:ac:4b:de:4f:0b:49:81:41:
                    5c:a4:41:d5:b4:7c:6a:cb:c8:f4:49:25:20:7e:b2:
                    20:93:cb:5a:88:b4:b7:0f:63:ad:1a:5e:17:f7:e9:
                    e9:bb:ab:41:66:c1:bc:aa:70:05:6f:24:77:74:85:
                    f1:c9:5c:6e:99:0e:65:04:92:03:98:b8:7b:74:4c:
                    ff:c6:f8:31:16:1e:4e:75:33:a8:74:1b:0a:94:63:
                    29:b5:a3:f5:f2:79:e1:13:1f:d4:2d:12:e5:06:9d:
                    05:50:16:a3:c0:7b:80:a6:c2:a2:e6:31:ad:19:a3:
                    5a:7d:f6:ff:19:46:85:f0:b3:b7:4b:6c:c8:dc:05:
                    93:05:9f:40:88:d3:6f:aa:06:1a:fc:67:4e:63:14:
                    5f:85:87:f1:cc:c6:37:7e:9e:2e:ec:f7:f1:45:de:
                    f7:83:bd:44:ec:ef:9d:aa:63:08:a2:a3:02:bc:b6:
                    0c:24:c9:86:f9:76:2e:2b:30:9f:a8:fd:1d:f1:f6:
                    d7:a7:3a:cb:15:f7:70:57:e8:b3:a1:34:2d:61:3c:
                    78:83:fe:d4:33:d0:bc:d8:f0:d8:1d:d2:4e:46:7b:
                    b1:fc:2c:bf:56:ba:62:83:b0:c3:ff:72:96:b1:4d:
                    d1:d1:70:ff:28:8e:63:8f:cf:15:e0:24:80:d6:9e:
                    22:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:93:CE:62:85:6D:70:C1:9E:FC:E5:A0:13:C4:F3:A9:96:DF:77:6A
            X509v3 Authority Key Identifier:
                keyid:15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:2f:99:75:29:99:5d:6f:d9:de:88:b5:fb:f0:e1:ca:16:a5:
         26:ed:e0:96:05:c7:28:60:2c:e8:e1:18:59:5a:68:f1:fe:1e:
         9d:2c:0d:ba:4d:98:27:6c:df:af:93:da:6a:cd:07:63:ca:9b:
         06:62:62:3e:56:81:d9:87:d5:c9:bd:fc:01:3e:52:17:86:c5:
         0a:8f:d0:9f:90:e9:38:23:fe:3a:ad:06:18:6a:d9:a1:29:17:
         81:a5:59:d0:f0:9b:3a:66:b4:23:ca:21:c5:5a:72:a6:10:94:
         f0:5f:d1:b6:4c:bc:bc:44:6d:25:1d:0d:e7:e7:d7:65:d5:b3:
         0c:da:9f:00:10:f2:bb:6c:4e:87:2d:88:68:1f:39:9f:5b:13:
         53:f0:49:d7:dc:45:2b:cf:2e:09:7e:6e:5e:3f:58:6e:7f:24:
         14:65:74:ee:f5:a5:6b:d5:37:92:05:e5:81:21:15:98:d6:f2:
         73:d0:26:aa:ea:1d:cc:db:d0:6f:4c:66:fe:02:5d:50:02:84:
         13:95:ae:bc:aa:b8:ab:e3:37:de:f8:15:b4:44:b1:97:6b:e6:
         d8:77:30:3d:27:f8:72:8d:f6:2a:39:0e:2f:a3:93:f3:8a:65:
         7c:a3:47:42:95:42:35:a9:a1:4d:8f:60:f4:47:b2:a0:0f:b3:
         7c:ea:05:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:01:16 2026 by rpki-client