Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
File:                     RABxct-fwtSi3bupNM68nwKG08o.mft (raw, json)
Hash identifier:          4ZHRoPAQfjt59z4rtDXPKZuREPO6H71ydGIUbRt3hvQ=
Subject key identifier:   FB:BC:45:5E:7E:4A:31:00:3E:16:A4:7A:1B:C6:6D:6F:4E:74:BA:53
Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
Certificate issuer:       /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Certificate serial:       01A0C1E86A146370EED46DF2AFE21FB43196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
Manifest number:          1A69
Signing time:             Mon 21 Sep 2026 03:00:29 +0000
Manifest this update:     Mon 21 Sep 2026 03:00:29 +0000
Manifest next update:     Tue 22 Sep 2026 03:00:29 +0000
Files and hashes:         1: D9L3F0MjFuI1mkGvBm8mGmwB0aE.roa (hash: d55W5CU5JP2xCsUj9oSlJV+ga7nmSkprH9KBPjXNOz0=)
                          2: Fn9mtyW8p7tf3NEs5ynDVX9fKWQ.roa (hash: Y3ktqWHPY4jaIf3oBnxCM/z1QkmvklY1/99J5dEJKUQ=)
                          3: JbYTcmeKPo3mOunx0Z-jMKOxz48.roa (hash: /zbvgZqj9ImK5wHvF50pz1/cbzu2MAYXngG5GwrR+io=)
                          4: RABxct-fwtSi3bupNM68nwKG08o.crl (hash: 3V89z0WARpogKNazPv6whKZsdXu2VvbOFUWT4n0W+9k=)
                          5: kKbHC__LJH-j0ex4EgJJmX98slE.roa (hash: FA7KYfTvFd4DkO8o/xkyqOnnhY/RKFo8GgvBljJcnfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:e8:6a:14:63:70:ee:d4:6d:f2:af:e2:1f:b4:31:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
        Validity
            Not Before: Sep 21 03:00:29 2026 GMT
            Not After : Sep 22 03:00:29 2026 GMT
        Subject: CN=fbbc455e7e4a31003e16a47a1bc66d6f4e74ba53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:e7:16:4a:0e:0a:a3:2b:27:a6:2d:22:07:
                    28:dc:e8:ac:e6:4d:56:88:63:ad:47:93:25:29:f1:
                    75:05:ce:f6:f3:7f:0d:19:a7:d8:a6:dc:2c:d7:df:
                    42:0c:fc:d5:85:7c:db:cc:22:76:5c:84:7d:aa:2e:
                    79:31:11:e8:26:30:1c:a8:3b:5a:2e:8d:f5:48:40:
                    ca:a7:99:13:16:60:8d:af:ca:59:30:dd:ed:f8:36:
                    85:b2:d2:03:eb:72:c9:ef:38:b2:8b:43:34:10:f9:
                    49:70:73:a1:a2:86:65:08:e9:71:05:22:bc:82:9c:
                    ab:f9:72:e5:06:e5:ff:00:4f:d1:09:6b:c2:72:37:
                    08:70:07:0c:1a:8f:f3:3c:b2:69:75:87:56:7f:8c:
                    b0:f2:54:ae:41:31:de:14:11:07:00:23:f5:75:93:
                    e1:c5:ae:d2:ec:0b:0c:66:45:6c:8e:51:2f:2c:a2:
                    78:07:4d:0c:2e:6c:1f:dc:27:bc:e8:c3:ec:4e:7b:
                    5d:2e:9a:99:6b:e9:56:87:35:24:6f:07:bd:55:f2:
                    85:d2:f8:83:b4:4b:1b:03:c8:3d:c0:30:10:fe:53:
                    c1:83:f1:40:99:e3:46:05:a7:e6:15:04:6d:3c:ca:
                    f8:62:6b:24:c3:60:5c:88:74:81:64:95:ba:ff:cf:
                    ec:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BC:45:5E:7E:4A:31:00:3E:16:A4:7A:1B:C6:6D:6F:4E:74:BA:53
            X509v3 Authority Key Identifier:
                keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:43:a2:2a:52:10:a2:8f:1e:b5:5e:74:c3:eb:b4:5c:fe:cb:
         2f:fb:5f:74:70:98:71:a3:4c:01:23:32:f3:43:95:fd:e7:01:
         03:d8:ac:61:60:1c:8f:9d:6d:df:81:5c:d3:c2:16:db:bc:82:
         0b:b0:b6:06:00:a4:31:38:20:3c:d3:d9:b1:83:90:12:7b:fd:
         ab:0c:54:7d:14:49:af:1b:6d:8f:8e:1f:c3:7c:0c:a2:71:bf:
         cb:64:7c:7e:a5:7b:9c:39:5b:1d:fa:dd:15:b7:3f:47:60:5a:
         77:86:3e:40:1b:f4:bb:f3:ff:09:1f:cd:5d:61:e6:e6:b9:33:
         19:a8:82:44:9c:57:9f:e6:52:64:30:6b:59:2f:43:8d:33:4c:
         47:3a:85:f4:ab:92:4a:a9:af:c1:cd:9c:4e:4d:10:c3:a9:f4:
         92:8f:90:3f:02:9b:df:5d:f5:16:36:ff:e6:7e:21:52:d5:d7:
         ee:ca:ab:c4:12:00:98:a8:28:35:6a:9f:c8:31:98:4a:fb:cb:
         3d:d2:15:83:22:c5:25:24:68:55:d9:97:64:5b:2a:0b:3b:39:
         9d:99:15:ff:67:55:a1:ba:30:05:72:d5:7c:da:22:21:84:b4:
         fa:c4:30:7f:36:de:09:13:cc:ff:50:dc:f0:4b:ba:87:41:4a:
         d7:5f:da:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:35:18 2026 by rpki-client