Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
File:                     mfa_Doxu_Er_r3JiiEacr_QX3mY.mft (raw, json)
Hash identifier:          CbiOaueSQyXQp2IgNzPEmIERIltEVUVeOgMsZas2NCg=
Subject key identifier:   83:FF:88:58:E5:83:C4:F5:2A:05:61:11:FA:71:19:91:6C:30:9B:7E
Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
Certificate issuer:       /CN=99f6bf0e8c6efc4affaf726288469caff417de66
Certificate serial:       01A0DA281B478206CE46B42686081D99C6F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
Manifest number:          0328
Signing time:             Fri 25 Sep 2026 20:00:56 +0000
Manifest this update:     Fri 25 Sep 2026 20:00:56 +0000
Manifest next update:     Sat 26 Sep 2026 20:00:56 +0000
Files and hashes:         1: TB2o93JdI3_5bR6pFMnn0o3Vigs.asa (hash: tU5Nk49tozCWJHFaeKvDt9q8L3Ki/m4tjnKrcr2Wp1E=)
                          2: mfa_Doxu_Er_r3JiiEacr_QX3mY.crl (hash: NFsc90NVVHhlEWsGao0DfSczqDATp4xPqVy0rpbQ2Fk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:28:1b:47:82:06:ce:46:b4:26:86:08:1d:99:c6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66
        Validity
            Not Before: Sep 25 20:00:56 2026 GMT
            Not After : Sep 26 20:00:56 2026 GMT
        Subject: CN=83ff8858e583c4f52a056111fa7119916c309b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:55:5d:84:2c:03:73:07:e6:a2:26:1c:85:
                    cb:a9:e7:93:ec:15:d5:ac:a6:11:de:4b:24:d8:50:
                    98:ff:b3:c0:98:c5:f5:ed:de:24:9d:6e:4b:bb:f0:
                    fc:f2:b3:36:89:26:05:ef:71:d4:8f:12:f7:a4:9d:
                    35:d9:a0:73:ab:75:31:ba:95:82:32:b5:97:46:23:
                    22:e2:6b:f7:c9:f3:e1:83:96:27:80:f0:19:44:76:
                    42:aa:5f:9d:4a:d5:27:ef:b3:27:22:63:59:d7:a2:
                    e2:fc:a8:96:ca:e4:28:66:e7:a1:61:07:e1:c2:77:
                    59:cb:3e:fd:0c:a3:d1:56:d7:00:4f:1c:f5:a6:18:
                    c2:6b:52:8c:ee:41:41:d0:9e:03:5d:09:f2:b2:21:
                    18:68:65:0c:6b:95:0c:56:43:84:22:e0:9c:d4:88:
                    08:8a:3a:ed:25:ed:a4:73:70:5a:ec:50:45:03:f5:
                    7e:d7:f0:4a:6e:10:31:ad:f8:2b:a0:c6:75:90:3a:
                    ce:6e:c3:a7:26:2e:df:bc:2a:6a:4b:cd:1f:cf:a8:
                    29:0f:1a:65:05:46:40:e8:f7:81:34:29:e0:4d:15:
                    f0:a6:67:6b:75:61:05:e2:53:64:ea:b5:55:13:1b:
                    ec:e2:c4:59:43:dc:64:cf:93:1a:14:09:d0:37:9a:
                    8c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FF:88:58:E5:83:C4:F5:2A:05:61:11:FA:71:19:91:6C:30:9B:7E
            X509v3 Authority Key Identifier:
                keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c6:5b:89:94:c6:1e:24:ec:79:11:01:e8:73:2d:16:f7:a2:
         f2:a9:be:e1:f5:d9:ca:4b:6c:93:33:31:77:1e:ea:b9:82:b3:
         ca:69:41:0c:61:33:ff:ad:24:8a:83:cf:0e:0b:2d:a7:29:53:
         b5:7d:f4:81:d2:72:91:06:bf:3f:fe:19:2e:c5:ef:ea:51:53:
         d2:24:67:43:d7:67:33:c6:a5:a0:d9:d9:d9:bd:73:74:93:f0:
         a4:26:d5:d2:38:e5:9f:07:e0:c9:a2:5b:73:0e:ed:f3:45:d5:
         a8:f9:4e:59:11:b3:27:c0:51:62:ab:eb:56:fe:0a:ce:65:a1:
         75:1d:c9:b9:62:ff:01:31:be:21:c1:30:2b:0f:3a:68:03:21:
         77:53:70:c5:4e:b0:92:f3:90:95:26:52:7f:23:1d:9e:6e:0f:
         f6:71:9a:ee:6e:2c:3f:4d:12:f5:19:07:4a:95:ee:4a:ae:22:
         69:4d:db:48:51:f9:25:74:67:6f:ad:6c:03:4b:b4:2a:f3:72:
         67:2c:de:0e:12:25:d9:b1:6d:c2:8d:56:fc:6e:b5:6e:b3:2d:
         d2:49:3d:c9:c6:cd:e6:a2:45:56:21:1c:59:a6:23:da:41:9b:
         94:eb:52:3f:bb:65:d9:46:19:c3:ff:71:03:b7:7d:9b:3a:48:
         0e:fb:a0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:27:12 2026 by rpki-client