Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
File:                     fPySsKdbia0uPFf3y6DkeGhCGc4.mft (raw, json)
Hash identifier:          GfvsaSf3SHEJfdK4fVIyKTkBSbT3rdO4LBapB9CCPYM=
Subject key identifier:   5F:D9:04:C5:05:E4:38:54:2F:CE:CD:29:1E:C7:4D:B0:50:6F:D7:93
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Certificate issuer:       /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial:       01A0C88F8488CE422F4F2B6690094D328BBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
Manifest number:          1A72
Signing time:             Tue 22 Sep 2026 10:00:43 +0000
Manifest this update:     Tue 22 Sep 2026 10:00:43 +0000
Manifest next update:     Wed 23 Sep 2026 10:00:43 +0000
Files and hashes:         1: 06zDVhvC2wG0GB9x97qsiQizFTM.roa (hash: JvVnPN4nSkUYGY1CjK3ZJoX6NrGYaNBFt7orDkPoKJY=)
                          2: 9t14f8NJnYJxST_d861SOf1-DLo.asa (hash: y3Qy+wowjGxSW6aQhtKllIneMrr2j9m6LF7e6fp3vxo=)
                          3: QZQCliYt7_SkiNgn0oBCrt9JnJA.roa (hash: J1S9YQoNzohLr1YwHRGBK6/jtI3laoaPMu+xmQQPktQ=)
                          4: SFBk5U763P1fy8w9IXg_u7J_QVE.asa (hash: HY3zuNVCk+vA8waHsSxh/gtJfK12g23OYWACA1L2CUs=)
                          5: V6-lWwiSN3YZ_1Fg_iJqT1p7VC4.roa (hash: i3ycFbVY9dPK7tSJSKbK9FY7bHTAq2RPB68f/mcwtHU=)
                          6: fPySsKdbia0uPFf3y6DkeGhCGc4.crl (hash: lVdJYKixOjBjH47zLtfx2IUzTrBAxzw+cKdqk+eOex0=)
                          7: xMWnV7ol9l_wC_K2pCVvOegFcOM.roa (hash: wuyIQgfX1EXhzZlkZ7KFL4OhLtwA6X9esaNzluB3laQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 10:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:8f:84:88:ce:42:2f:4f:2b:66:90:09:4d:32:8b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
        Validity
            Not Before: Sep 22 10:00:43 2026 GMT
            Not After : Sep 23 10:00:43 2026 GMT
        Subject: CN=5fd904c505e438542fcecd291ec74db0506fd793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:42:d0:d9:2f:1e:38:ef:e9:db:ed:f5:88:a3:
                    c2:c3:5b:9c:6d:3f:73:10:45:e4:19:c6:df:26:5d:
                    03:d0:15:48:3d:2d:4e:c4:e9:fd:11:5e:8e:4d:a7:
                    66:f1:eb:2e:e8:89:cd:4a:3b:45:f7:09:3f:97:22:
                    d6:c5:a0:23:9c:60:5b:6c:12:d2:d5:21:d7:a0:55:
                    5a:cb:53:e8:89:0d:e5:f3:16:8a:0a:f8:ec:1e:1c:
                    83:b2:35:75:67:2d:c7:a4:b6:f8:cf:48:03:49:20:
                    ca:fd:82:96:ae:29:84:51:33:52:55:50:d8:04:0d:
                    60:65:11:05:3e:11:b7:84:85:b8:e2:99:0d:38:4b:
                    4a:0f:bf:fe:29:f8:d2:a5:29:af:93:78:9f:e1:8f:
                    10:9a:ee:4c:64:e2:c8:cc:7e:6e:bd:04:5b:65:34:
                    9e:81:6e:df:44:df:0e:ee:f2:61:0d:8e:b6:6b:94:
                    33:e1:94:e8:70:8b:ac:5c:e2:0a:30:0a:df:45:b8:
                    a7:82:e4:83:62:36:35:b3:23:8b:15:1f:be:d6:8e:
                    6f:19:0a:70:7e:db:30:1b:fa:fd:44:61:3d:6a:88:
                    b1:7f:60:7a:36:3d:46:88:bc:2a:4c:98:e8:36:f1:
                    f4:6c:ec:8e:1f:27:87:44:57:63:a2:53:b2:7b:9a:
                    4e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D9:04:C5:05:E4:38:54:2F:CE:CD:29:1E:C7:4D:B0:50:6F:D7:93
            X509v3 Authority Key Identifier:
                keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:cd:c2:30:fe:14:d7:c4:c4:57:e7:7f:4e:9b:98:ac:68:b8:
         cb:32:f7:88:ce:14:bc:6c:a6:05:a9:6b:11:a9:57:24:c7:ab:
         d7:62:a6:70:2b:e3:6f:a7:ad:31:c5:ac:27:e0:97:2c:1a:0a:
         c7:f0:dd:06:93:1b:f7:09:7c:a1:4a:f8:84:a5:8b:82:35:d4:
         ca:1c:0d:54:ed:70:93:08:d5:dc:44:7c:ba:c4:cc:69:3d:6a:
         74:f4:6c:e8:56:ab:c4:5c:a9:ce:aa:e9:b7:13:70:ad:c5:3e:
         a6:a6:c8:42:3e:d4:0b:d0:cd:71:1c:d2:5a:0a:1b:96:1c:16:
         9b:f1:c1:33:34:92:1e:30:0d:76:e1:c7:6f:2c:e0:4a:78:b4:
         44:e3:41:fc:3b:e1:b9:5b:b8:84:ed:b5:95:c1:c8:1c:21:a0:
         75:2f:96:f9:21:04:25:3b:b2:7e:d6:1c:73:f8:84:ef:f1:89:
         b6:71:48:22:7c:17:cb:23:2d:f5:91:3f:73:55:80:f5:c9:80:
         6b:63:66:90:64:94:f4:61:cb:e6:15:2d:b7:68:b9:95:1c:9b:
         40:f3:d9:06:84:9e:89:a6:1f:17:d2:3a:12:27:69:1a:db:07:
         2c:64:42:75:c4:cc:f2:a1:a9:3c:17:16:e0:36:9b:a6:74:58:
         5b:cf:a1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:37:52 2026 by rpki-client