Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
File:                     f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json)
Hash identifier:          H04bXk27qsG6GnYVitwBHeVMalPVvYnO94QOlfM+6gQ=
Subject key identifier:   05:BB:AF:70:70:EC:2D:B0:82:A3:D4:44:AE:CB:FA:B2:E8:35:01:A0
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Certificate issuer:       /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial:       01A0CFDAE7BC2B8DDBE2291643C13B8C383D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
Manifest number:          07AC
Signing time:             Wed 23 Sep 2026 20:00:24 +0000
Manifest this update:     Wed 23 Sep 2026 20:00:24 +0000
Manifest next update:     Thu 24 Sep 2026 20:00:24 +0000
Files and hashes:         1: 2BwDzZ1-4qodQHGn7IRXAaLWAn8.roa (hash: KLT4hK24Sh8oeO2o5C+Q82TS186W3R8CPounbGac6TY=)
                          2: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: Ey5EsSNOAt0AVPRv9FFeNpf0tSCtMw5NH4gAZhukZGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:da:e7:bc:2b:8d:db:e2:29:16:43:c1:3b:8c:38:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
        Validity
            Not Before: Sep 23 20:00:24 2026 GMT
            Not After : Sep 24 20:00:24 2026 GMT
        Subject: CN=05bbaf7070ec2db082a3d444aecbfab2e83501a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:24:06:4e:a3:64:71:47:8a:a8:3e:93:26:9c:
                    9d:75:bb:66:1b:7b:c5:b3:25:e9:ff:59:01:e4:43:
                    b0:de:14:f0:7b:77:21:78:85:07:8c:27:01:04:26:
                    43:df:c7:8d:91:f3:c1:88:1c:f1:1d:88:0d:7e:ae:
                    e5:48:5c:fe:0b:92:e6:52:1f:05:e4:3f:f6:10:b0:
                    0c:ce:78:1f:11:e6:37:94:10:b2:1c:59:e3:a4:46:
                    94:1f:ce:0c:4d:3f:69:28:b4:3a:a2:d1:65:67:f8:
                    04:7f:19:fc:fb:77:af:32:35:ba:62:1d:e9:76:a0:
                    a5:14:a0:f6:50:52:24:24:d4:c5:af:ef:a1:d2:af:
                    71:3a:e9:78:91:f1:2a:78:dd:69:6b:63:bf:f3:77:
                    8f:7c:e8:80:77:25:8a:ec:16:02:0f:ef:8c:03:cb:
                    a7:79:3c:81:1f:97:6d:08:04:9f:9b:3c:dc:c9:bf:
                    52:1f:d6:55:4a:c6:da:cb:e9:e1:e5:ee:c4:c1:2e:
                    9e:95:05:27:91:e0:b3:d3:53:1b:9d:d7:0c:82:15:
                    7f:a4:8c:0d:de:92:ce:36:2d:cd:db:c9:5e:e0:94:
                    1c:8a:e0:24:08:9a:6b:ad:47:4f:ae:4a:c5:f1:b0:
                    1b:17:86:7e:e2:8d:7b:8c:97:ae:80:ea:72:8f:9e:
                    cd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BB:AF:70:70:EC:2D:B0:82:A3:D4:44:AE:CB:FA:B2:E8:35:01:A0
            X509v3 Authority Key Identifier:
                keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:47:98:33:34:47:dd:3a:b0:0f:df:c8:0d:c2:b7:d6:00:84:
         df:60:53:7b:01:de:b5:7e:e1:a5:70:4c:93:5c:86:94:c8:6e:
         fa:cf:07:0a:c3:eb:79:a3:91:47:9f:4b:94:c1:10:b4:5e:b9:
         32:fb:f9:0a:e2:55:44:5e:57:99:44:78:a6:51:b0:ea:c6:68:
         36:81:3f:04:db:46:41:c5:29:a7:6a:cb:3d:6f:79:cf:78:d5:
         79:19:01:ee:c3:9e:15:aa:d5:ad:8a:ad:05:cd:f4:93:be:ae:
         ab:f3:70:5b:da:57:c4:9a:b8:4f:4a:91:e6:35:09:92:c9:e2:
         d1:df:94:f9:3a:14:a2:d4:1d:a1:71:62:91:9f:82:78:c4:48:
         62:7d:c9:df:67:a9:dd:1f:c2:d8:57:5f:a5:b1:9f:59:35:09:
         aa:00:75:15:99:52:63:25:f6:af:f3:68:16:b7:13:de:c8:3c:
         58:5d:5b:75:62:31:00:0a:38:8c:aa:9a:b4:b7:b4:a5:5d:f7:
         da:9c:54:fb:b1:58:b3:f6:b6:e5:d0:8a:2d:c0:25:97:92:10:
         fc:19:1d:11:30:92:1c:d0:fa:0e:58:7e:42:c3:97:e8:2e:5d:
         13:e4:42:4b:93:7b:06:4f:39:5c:7e:1a:72:90:20:b0:f0:fb:
         c4:f2:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:54:36 2026 by rpki-client