Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
File:                     fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft (raw, json)
Hash identifier:          rHX9Yq5Df+kQAQu5XA7tgIpRI/u9+YUWJSf6+yDNvcg=
Subject key identifier:   A4:7B:43:F0:4C:29:6C:CF:04:1B:4D:E2:AD:B5:A0:7D:8F:D8:0F:EE
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Certificate issuer:       /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial:       01A0C40E69CFF346AA3618724D72E4DEA3F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
Manifest number:          1A52
Signing time:             Mon 21 Sep 2026 13:01:13 +0000
Manifest this update:     Mon 21 Sep 2026 13:01:13 +0000
Manifest next update:     Tue 22 Sep 2026 13:01:13 +0000
Files and hashes:         1: B2UAskXV_gpw_1Zd54EWgMp-uLk.roa (hash: Wztu5tKf6yPbKoTbElxbMgfRBQR7WU+p4qYB7HBJmO4=)
                          2: QuZtuYtxwjnkIizW_uZP621GARI.roa (hash: l+b9n1Wks+lJy53mwiELzEXTzeKjuCLSgRja0TBj0Gs=)
                          3: fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl (hash: kYNRmgn+stQkuWJAByDKg80Cam6yenMuont9PYivr/s=)
                          4: hYBDxPKgpEBy-0HqIG0AVKIIGv4.roa (hash: LN1o3/IUnxwvsUL4vj6kqV3IpcbqWaMlyNgv17b6oto=)
                          5: k1pADmn6GMiQRtZPNSp61p00vu8.roa (hash: 1SQM1MMTHspOQ+oTUfXQ2BweUAM4ByW84Vk4jd23GqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0e:69:cf:f3:46:aa:36:18:72:4d:72:e4:de:a3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
        Validity
            Not Before: Sep 21 13:01:13 2026 GMT
            Not After : Sep 22 13:01:13 2026 GMT
        Subject: CN=a47b43f04c296ccf041b4de2adb5a07d8fd80fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:5b:b2:da:eb:1c:9a:62:9a:b5:7a:d1:2b:
                    99:c9:fd:14:a6:64:2b:60:ef:fe:d5:a7:bb:b0:2b:
                    9d:9b:3e:0f:6e:a9:5d:06:bd:38:0d:95:4d:a7:21:
                    f0:18:0d:9b:10:65:3f:da:45:dc:ad:3f:89:95:a5:
                    f0:be:62:08:9e:c0:ad:09:f3:91:67:c1:3f:6c:03:
                    45:0f:38:b4:05:64:b4:38:db:61:9e:f1:65:dd:4f:
                    96:8c:cb:aa:59:87:24:ad:9d:6d:42:33:13:b6:3c:
                    57:5b:a2:b3:39:9b:9c:d8:a9:15:f4:c1:7f:66:6e:
                    bf:e4:e6:ca:2c:01:a0:24:1d:09:3c:7b:2a:93:3d:
                    6a:22:25:0d:6c:cb:a9:3d:25:f0:f4:33:f5:43:74:
                    53:b7:51:86:98:92:94:d3:53:11:47:a5:08:da:ea:
                    cf:9a:29:f2:cc:ca:c5:08:ab:e3:58:0b:38:75:7b:
                    cf:6c:f8:16:69:39:99:c0:99:37:89:3d:7f:7c:a7:
                    91:2d:5e:ab:84:fb:a5:44:9f:5f:b5:bb:71:15:c0:
                    28:72:3a:24:75:d5:cf:11:1f:b1:a5:1d:0a:c5:9d:
                    87:ff:16:18:8e:d9:3b:a7:7c:e9:6c:9c:16:6c:9b:
                    14:21:99:bb:5e:fe:98:61:6a:8d:6d:57:fd:b6:51:
                    68:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7B:43:F0:4C:29:6C:CF:04:1B:4D:E2:AD:B5:A0:7D:8F:D8:0F:EE
            X509v3 Authority Key Identifier:
                keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8a:04:04:16:18:68:68:58:d4:ab:c4:25:df:11:fb:5e:62:
         ff:2b:8e:57:c6:e5:58:45:db:18:e8:e0:1d:a8:16:1d:7c:e4:
         77:8e:d7:7a:4f:00:96:c2:2d:6c:48:d7:22:aa:d2:f4:b5:63:
         c7:b7:d5:27:41:c4:63:82:47:e9:1b:99:8b:8f:4d:09:e1:8c:
         9a:2f:03:f2:f1:e8:a9:36:6e:63:30:00:81:95:fd:a3:74:1d:
         a8:8c:10:14:1a:e1:70:fa:45:8f:94:49:ca:06:a0:8e:72:61:
         20:ef:4a:0e:3e:ea:e6:07:2f:05:9f:f7:d9:36:c7:ba:9c:29:
         61:8e:4b:74:56:c7:4d:fb:c4:88:ee:75:ce:64:25:d2:ac:13:
         3d:36:c7:90:dc:4b:19:ee:10:a7:35:bc:1c:a1:4d:95:12:76:
         39:24:b7:8a:17:17:38:23:3f:30:f0:72:a7:85:fb:db:a5:81:
         cb:95:07:35:7c:37:24:1b:b9:66:88:e7:24:e5:0d:30:f9:32:
         5d:25:8c:30:9d:c6:6c:ca:c1:1f:4b:61:d3:76:1b:4b:ef:44:
         5d:f6:8a:bd:6d:dd:d2:e3:04:31:3d:62:15:14:d7:ca:30:8f:
         2b:14:9c:90:05:3c:da:ad:c1:8d:02:2c:05:32:86:ef:a4:04:
         a9:b1:40:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:32:12 2026 by rpki-client