Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
File:                     Fi5IMpyL6O8gnplY2marAkAUXhk.mft (raw, json)
Hash identifier:          R9BPXure9WtvoZAgnnLweTeJ6a8BIKbJSzAzdHsUkVE=
Subject key identifier:   3F:F6:EB:73:A2:BD:FB:BB:25:0A:47:FF:86:2D:E7:67:44:46:A9:84
Authority key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
Certificate issuer:       /CN=162e48329c8be8ef209e9958da66ab0240145e19
Certificate serial:       01A0BFC369A929990B813BBAC83B72D88EC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
Manifest number:          0B41
Signing time:             Sun 20 Sep 2026 17:00:49 +0000
Manifest this update:     Sun 20 Sep 2026 17:00:49 +0000
Manifest next update:     Mon 21 Sep 2026 17:00:49 +0000
Files and hashes:         1: 62jZg4gngBAnPwivfw6fHLKrFR8.roa (hash: x5Xq81WhPxvz0KcW7Qb+lmuqrFvDsxsxDYK9R0dFh5A=)
                          2: Fi5IMpyL6O8gnplY2marAkAUXhk.crl (hash: 0YsrFbk2yCVo8j72qxt2BQsTBSkOF0fvcuwqLGjFJ/o=)
                          3: L1zbFMwgTo8k0cGpa43eL9rJSvs.roa (hash: 3nOYFWDqeUlGtXtuv/0p8OtC8pzPOMkeWtIsBYndPi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 17:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:c3:69:a9:29:99:0b:81:3b:ba:c8:3b:72:d8:8e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162e48329c8be8ef209e9958da66ab0240145e19
        Validity
            Not Before: Sep 20 17:00:49 2026 GMT
            Not After : Sep 21 17:00:49 2026 GMT
        Subject: CN=3ff6eb73a2bdfbbb250a47ff862de7674446a984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ea:34:3d:ed:b5:22:1f:01:d1:e9:c5:9f:ac:
                    6f:99:e8:ac:e2:1f:a5:11:1c:a2:b4:a8:30:f2:b0:
                    0f:e6:70:1c:62:3c:5f:fe:13:1e:58:e1:cd:58:b5:
                    34:37:e7:da:de:a6:13:2f:bb:cb:f3:45:41:0a:d7:
                    18:3b:b0:47:f3:54:fa:cf:ae:93:8a:2d:38:72:b8:
                    a2:b2:99:2f:e5:e0:2f:8c:a1:59:21:37:25:8a:8e:
                    53:c6:4d:cf:a4:a7:e4:e9:f8:aa:8b:15:c2:20:ce:
                    95:ca:f3:0a:ea:87:38:77:d4:03:a7:b1:ae:ec:37:
                    91:43:de:cb:8e:d0:64:ab:47:10:e8:9f:cc:ea:10:
                    f2:0d:7f:a8:14:cc:a1:2d:68:c6:c9:59:6a:d0:5a:
                    a5:5c:a3:ea:4a:dd:fe:19:e1:ab:e6:6d:39:69:7e:
                    2e:9a:f9:80:6a:3a:75:dd:2c:98:af:30:75:05:a6:
                    2c:1f:2a:df:22:4a:fe:a2:8f:b9:59:42:74:c6:a0:
                    ed:db:b5:15:85:0f:00:c8:5a:15:a7:df:5f:ea:b7:
                    44:af:d7:40:7f:6a:aa:4f:14:d9:c8:10:4b:0c:2b:
                    e4:b0:53:d3:28:ae:73:c4:02:3d:b1:ac:0a:c9:01:
                    b0:de:8a:f7:3c:4a:38:6a:62:c1:91:d0:d4:ce:b9:
                    33:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F6:EB:73:A2:BD:FB:BB:25:0A:47:FF:86:2D:E7:67:44:46:A9:84
            X509v3 Authority Key Identifier:
                keyid:16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9c:e2:3b:6a:79:41:f1:24:01:dc:fc:ec:a0:be:bd:b5:f4:
         68:f2:4a:86:d7:b2:52:13:18:89:c9:96:a2:3d:c9:1f:8f:eb:
         6e:2e:2d:c0:75:d8:29:c5:84:b9:57:7d:21:7b:6c:28:5c:5c:
         79:71:22:ae:0a:75:c5:b1:db:f1:69:45:c8:c8:b1:bc:ee:9f:
         4d:60:c1:66:c7:9a:b2:78:63:d3:1a:e4:77:84:42:8a:68:bb:
         50:25:56:d5:6b:d7:c3:01:d7:b1:ab:b7:9e:42:8c:41:32:19:
         fd:0e:aa:50:72:23:52:4f:3e:9b:b7:6d:c6:20:aa:b2:64:a4:
         63:33:e4:ea:b1:2e:23:58:8b:f8:8e:d1:0b:0b:c4:1d:15:8f:
         e6:c7:c1:52:86:a0:ae:93:dd:a1:63:13:19:4a:49:be:1f:3d:
         1f:4e:63:fd:48:ba:cb:fe:8a:8d:6c:97:bb:d0:24:ad:f8:4f:
         63:7e:5a:7c:6f:3d:1c:af:a0:b5:1c:61:f6:02:54:55:72:7b:
         a4:00:27:9d:ba:f9:59:1b:47:ca:0a:62:b7:d0:db:54:30:5a:
         f0:85:91:8b:02:54:5d:06:e9:80:9d:bb:ed:6f:f1:87:65:f6:
         d3:b2:69:d6:34:36:38:86:a7:8a:3c:be:50:5b:ea:d6:44:de:
         36:12:66:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:10:01 2026 by rpki-client