Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File:                     1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier:          H9b3lMr771ztF6YqHarL3Xerqq86gjikvtfP8ZWhbyI=
Subject key identifier:   75:5B:49:7B:5D:CF:7B:2C:D9:D2:47:1E:7E:E2:BD:B0:90:DF:27:69
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer:       /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial:       01A0C85852A4DE5288E6695B43CC43AAD01A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number:          1342
Signing time:             Tue 22 Sep 2026 09:00:26 +0000
Manifest this update:     Tue 22 Sep 2026 09:00:26 +0000
Manifest next update:     Wed 23 Sep 2026 09:00:26 +0000
Files and hashes:         1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: +ev9Tol0FnVKdTZbE3ib1CXorEi2rUBbSvDvTJllCpM=)
                          2: TbbaXC5Vr5TmaMd_xbm8WF6u2S0.roa (hash: +nAGfw2iTYghUOUt6Pu3fvtqpyelpRx/U3nYc4p6P9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:58:52:a4:de:52:88:e6:69:5b:43:cc:43:aa:d0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
        Validity
            Not Before: Sep 22 09:00:26 2026 GMT
            Not After : Sep 23 09:00:26 2026 GMT
        Subject: CN=755b497b5dcf7b2cd9d2471e7ee2bdb090df2769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:66:e1:e3:4e:b5:47:3b:91:d1:1c:57:21:55:
                    ef:25:6e:dd:a4:11:95:3a:28:6e:3e:a2:37:96:24:
                    a2:ed:26:ef:b4:36:57:5f:f5:8c:7e:f0:39:07:d1:
                    e4:ae:8f:a0:94:ff:b3:af:f2:b5:a6:c8:54:63:60:
                    6d:1c:20:a4:59:58:1f:f7:bf:8d:22:ab:cb:f6:e5:
                    2b:1f:b5:52:20:a9:35:30:59:0a:62:f5:ee:5d:38:
                    9b:f7:fc:2a:25:df:51:a7:b7:71:5b:7f:da:e7:63:
                    fc:f4:14:23:6c:e1:ae:74:e2:d8:ec:8b:cb:73:c6:
                    5e:18:55:e8:02:fe:83:5d:8c:46:b8:65:20:ef:e7:
                    49:5a:61:e0:b5:90:28:40:96:7f:53:df:1e:36:51:
                    a3:76:b7:ee:2f:d7:a1:1d:ee:8e:b8:59:b2:8e:86:
                    0f:0c:81:89:f6:0a:c4:45:7d:e7:6d:49:54:11:cb:
                    61:29:50:5d:2a:dc:3a:c2:52:73:49:cb:02:32:b2:
                    c2:8d:85:4e:75:8a:f7:41:7f:97:fe:1e:1f:0e:ae:
                    74:1b:97:8d:fe:51:72:e6:e8:02:ac:d4:2f:97:fa:
                    78:7c:b0:9f:e7:fb:9f:c5:23:20:b3:0f:6c:56:66:
                    93:38:33:2f:3c:15:88:62:db:31:f0:f8:6f:e7:e9:
                    57:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5B:49:7B:5D:CF:7B:2C:D9:D2:47:1E:7E:E2:BD:B0:90:DF:27:69
            X509v3 Authority Key Identifier:
                keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ef:55:8f:6c:24:2e:46:6d:9c:95:d9:11:2c:8c:75:bf:1a:
         4d:67:0c:09:f8:e7:5e:eb:cc:a6:b1:e7:a4:5f:f2:02:c7:ca:
         d0:12:0b:d7:a6:7c:59:7b:21:9f:c9:18:f0:fd:8d:71:df:2b:
         4c:70:aa:14:5b:b8:4c:c1:ce:2b:ae:82:6f:86:fe:32:4c:1f:
         88:7a:60:26:ac:3c:db:11:05:1c:97:47:b8:22:9b:78:2c:00:
         fb:e5:67:59:05:ed:9b:9c:80:7d:f7:d4:7c:bf:b0:6d:9f:08:
         37:61:41:15:c8:0d:0d:f8:d9:4d:e5:07:3a:59:c8:e1:1c:68:
         72:ca:de:b5:9b:8e:e9:04:da:c1:1d:2a:c0:51:e9:ca:4d:ca:
         56:ab:d6:56:35:4c:8e:a2:46:66:12:11:1e:e0:bc:ff:0e:8b:
         15:c9:2b:6e:2b:63:02:f7:76:65:8e:33:af:27:6a:53:b6:df:
         ab:58:38:9c:56:b8:cb:8a:d9:d8:c1:b1:4b:64:44:06:90:c6:
         ab:9e:37:63:8a:9a:20:80:da:dc:0d:27:26:60:3d:5b:aa:b4:
         56:51:b6:3e:ea:e7:e2:c7:d9:ca:71:99:d6:d2:64:b0:a2:60:
         70:5a:6a:0b:8e:f7:33:f0:c7:5f:9a:ec:ff:c2:9d:68:cf:07:
         e4:84:fb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:49:41 2026 by rpki-client