Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
File:                     FumqrOUCeVhbXFpdjuhWEGhsJsA.mft (raw, json)
Hash identifier:          5MUiGeFKMIZ3xEOKV4yLK8NWVGZ8jeBDM8O7wZj/YNY=
Subject key identifier:   DB:B8:3B:86:13:90:64:03:61:B6:05:7B:41:AF:D0:EF:EE:18:1F:A4
Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
Certificate issuer:       /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Certificate serial:       01A0EDAF841A2C6E9AA65BEE37C0157ECE65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
Manifest number:          1A7A
Signing time:             Tue 29 Sep 2026 15:01:37 +0000
Manifest this update:     Tue 29 Sep 2026 15:01:37 +0000
Manifest next update:     Wed 30 Sep 2026 15:01:37 +0000
Files and hashes:         1: 04V3xL-wvyvCRWgSYkpGUkjiE8s.roa (hash: FQS7L+Hj2zSXnBRorh0m7ldyBShNLVTNeylqQBQZHwo=)
                          2: FumqrOUCeVhbXFpdjuhWEGhsJsA.crl (hash: ibZofbxDdfIw+Vd5oenO0vxF+9nvzqZUBgHkBtY7Pos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 15:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:af:84:1a:2c:6e:9a:a6:5b:ee:37:c0:15:7e:ce:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
        Validity
            Not Before: Sep 29 15:01:37 2026 GMT
            Not After : Sep 30 15:01:37 2026 GMT
        Subject: CN=dbb83b861390640361b6057b41afd0efee181fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:78:0a:e8:00:c8:cc:63:fc:0c:77:b6:9d:7e:
                    10:b1:23:65:04:bc:f1:df:c3:ad:ad:d8:e9:37:a1:
                    52:d5:fe:89:bb:4d:10:16:ab:ed:95:47:3b:e6:fa:
                    f5:f5:d5:89:f5:3b:32:3d:f3:07:02:6b:bd:28:a2:
                    db:26:64:87:72:e1:13:ca:eb:08:fc:6c:f8:65:83:
                    82:71:1c:99:ca:a5:aa:40:7b:06:29:0f:23:9d:82:
                    2c:4b:e3:c2:10:b8:10:90:26:fe:58:13:67:8b:f1:
                    6c:46:aa:20:34:56:9a:f8:42:23:bf:0d:d7:a9:c2:
                    6e:49:21:ad:4d:95:73:ca:c0:54:77:ca:66:48:68:
                    c5:20:b9:a0:e6:82:a2:e1:f9:e7:a8:14:04:60:57:
                    a7:14:1b:d4:ca:c1:41:1c:b7:e9:49:40:5a:8c:3f:
                    a8:40:61:16:68:02:b8:74:db:2e:cd:ea:92:a1:6f:
                    86:9c:44:2f:da:84:d3:87:16:56:02:43:44:26:34:
                    43:57:08:a6:e1:ca:46:39:fb:e6:e2:b8:6f:b3:50:
                    c9:0b:92:45:35:9b:50:01:56:54:84:84:17:0f:11:
                    23:35:4b:72:ff:8f:f0:81:ce:c7:a6:ed:89:cd:d9:
                    1f:c0:34:e9:fd:fb:da:63:83:19:ca:a5:cf:11:42:
                    98:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B8:3B:86:13:90:64:03:61:B6:05:7B:41:AF:D0:EF:EE:18:1F:A4
            X509v3 Authority Key Identifier:
                keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3c:2a:36:ca:a6:d7:9b:6f:47:f3:90:f7:de:1f:a9:31:db:
         72:1e:f0:37:ef:7c:bc:a4:3d:13:df:36:ee:e4:62:bb:a1:39:
         e0:00:f7:64:29:86:7a:fe:e2:3c:56:a3:ce:7b:e9:93:0e:ed:
         e8:03:43:ed:2b:34:f9:c3:f8:59:fa:a2:08:46:32:e1:ce:b3:
         fe:6b:cf:2e:94:15:eb:c3:cb:02:dc:de:f7:9c:c7:b5:23:6c:
         b7:42:07:60:11:f8:54:b0:fe:ca:15:7f:29:87:eb:f2:ab:87:
         66:c3:d5:cd:a6:18:18:7e:f0:40:4c:f3:86:40:df:6b:de:d9:
         d5:d8:3f:75:de:c5:29:55:5c:f7:18:5e:91:8d:53:cb:f9:6f:
         0d:e6:8c:bc:5a:c6:76:dc:8d:ca:61:cf:c4:2b:42:20:bd:fa:
         82:4a:89:ac:34:4f:a2:78:f0:81:a3:c5:0c:be:97:f1:41:9a:
         a5:48:62:97:1a:aa:b3:d2:1f:9d:bc:fc:01:e3:2e:97:56:63:
         9a:7e:a8:53:ba:52:20:61:a2:02:cc:ce:31:5f:a8:ee:9a:04:
         86:6c:59:4c:f7:ed:d8:08:98:b7:c2:31:15:e6:93:8e:8d:f3:
         4b:11:19:2d:4b:60:58:11:78:b4:93:90:60:08:27:d5:89:14:
         72:ac:f0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:01:42 2026 by rpki-client