Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File:                     FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier:          9/43HGzAvPdINuhPOD1WIj0p+RDIKRfo6oEr7wU0ak4=
Subject key identifier:   E2:85:F7:E0:F0:6A:D5:17:5F:29:2A:3D:75:6E:8D:E8:A6:4F:78:16
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer:       /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial:       01A1298D43259E5F72CBB21EC3289B79D9B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number:          1091
Signing time:             Sun 11 Oct 2026 06:01:25 +0000
Manifest this update:     Sun 11 Oct 2026 06:01:25 +0000
Manifest next update:     Mon 12 Oct 2026 06:01:25 +0000
Files and hashes:         1: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: 7fSMxgGfCPQXl4fC3rb8iw6xOz+j7gFZrpOiznO+DQs=)
                          2: KDLd_3rPD976SC3XcGSVNGzbbrw.roa (hash: 9uOq1GB8z5yH6EUyG7/81m/WIFx1QPWTnjtsr+U7cVg=)
                          3: RnUS1igSJL82HjX33CCsU61QZck.roa (hash: Ca4C5GBPcPOUxC7vkHsVjTSt9X2mkmWbGHVff1pumQA=)
                          4: Sm4dMxxnP8iPlpaArNe_lrYOoWs.roa (hash: CxwMb0XJuXM900emiizD6nilfu0y7bF1zGc6ZqIFhXo=)
                          5: nenXOTdR_MN811e1s9Lg1rInHxY.roa (hash: hyWjywUgqQpYVmd438IBWEVlqHt+CxuJlbA1x1JMEic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:8d:43:25:9e:5f:72:cb:b2:1e:c3:28:9b:79:d9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
        Validity
            Not Before: Oct 11 06:01:25 2026 GMT
            Not After : Oct 12 06:01:25 2026 GMT
        Subject: CN=e285f7e0f06ad5175f292a3d756e8de8a64f7816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:9a:0a:3b:c7:43:05:11:ce:5f:d6:d0:15:
                    7c:4e:31:c1:32:b1:ea:33:f4:2e:8e:56:fb:11:d0:
                    1f:ba:c7:ca:df:8d:8f:fe:6b:cd:f7:3c:52:9a:33:
                    78:5d:64:8b:0b:26:9c:dd:51:32:28:0d:fe:fd:31:
                    8f:07:0c:9a:e3:d4:26:0b:7e:03:c6:4e:9e:91:13:
                    01:d4:9f:a6:ed:18:9d:73:df:63:9f:7b:03:97:e4:
                    90:d9:71:25:9f:21:e7:0b:84:2b:57:53:ce:1d:ff:
                    c9:53:c9:94:eb:cf:68:dc:e3:7d:c8:ff:83:63:9b:
                    9f:0f:b5:71:a8:89:c7:ea:45:e0:2b:ff:21:41:b1:
                    30:4d:63:75:4a:fb:dc:f9:17:9b:9c:4d:87:e7:f0:
                    db:11:7c:5c:5e:48:f0:98:12:2d:94:d7:49:f7:06:
                    2d:d7:a6:d4:ba:3a:e1:01:1a:33:bf:4f:a6:92:84:
                    39:01:2c:85:3b:8e:3d:c8:4e:67:42:e5:88:44:a1:
                    60:7d:e4:8f:eb:ff:71:03:56:d3:fe:7e:a4:66:47:
                    14:90:a8:e7:6a:2a:f9:55:f2:a2:0d:fc:3c:76:9b:
                    23:ec:57:71:2a:7e:33:4d:01:20:dc:c4:1a:a7:f8:
                    00:63:97:d3:b5:52:36:5a:92:59:17:79:f7:cc:7d:
                    1f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:85:F7:E0:F0:6A:D5:17:5F:29:2A:3D:75:6E:8D:E8:A6:4F:78:16
            X509v3 Authority Key Identifier:
                keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:db:62:c5:69:0a:63:a3:4c:bc:2c:60:aa:e6:ce:92:00:45:
         9b:53:fe:59:e9:03:7d:88:a2:f8:39:23:95:a9:b4:74:24:2c:
         df:12:bc:87:30:18:16:63:4b:50:27:37:96:40:3a:5c:6b:a1:
         0f:42:5a:ea:49:30:72:8c:dd:6f:75:27:9b:8d:fb:e7:f0:57:
         fd:dc:05:06:61:61:6c:0e:81:66:cd:52:0b:e4:46:2c:34:ca:
         a4:c1:a1:51:ac:6c:af:6f:ba:b4:81:b3:18:08:36:12:28:7f:
         4b:70:6d:64:6e:3c:20:08:4f:52:50:42:01:4d:d9:95:3d:6b:
         77:fb:e4:d3:d0:d9:0d:e2:6d:11:c7:94:36:38:61:7f:bf:c3:
         6c:8b:c3:9a:d9:14:db:b7:c7:bc:27:4f:97:09:81:2e:99:b0:
         30:ce:eb:87:51:fa:00:e5:2f:ed:dc:26:e8:cc:a0:aa:13:83:
         d2:71:2c:ce:e2:51:24:ee:1a:64:cd:3a:a8:77:c4:ef:2e:5c:
         3f:a2:88:09:3d:87:af:89:35:46:c1:d8:c0:71:f4:15:3f:f7:
         4c:de:17:57:9f:9c:99:77:be:77:39:6d:de:cc:b6:0a:bd:f6:
         76:14:05:21:19:6e:68:d8:ab:39:ac:76:ee:a0:36:66:d7:df:
         79:c4:41:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:25:39 2026 by rpki-client