Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File:                     FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier:          oPOBYEnuKF3zxkVZAGUqifd93Q3ZNmnSjsmc0I7/TaM=
Subject key identifier:   95:41:28:16:D3:B4:DE:86:27:88:EC:36:68:FD:13:CD:8A:56:6F:28
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer:       /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial:       01A0CEC823AD213EFD3BE6F3A37817B9AC2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number:          19D6
Signing time:             Wed 23 Sep 2026 15:00:17 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:17 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:17 +0000
Files and hashes:         1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: sEFnjVuplE0eDu1E7wCyiDblYSdqf1K77aS0UW5+oK0=)
                          2: ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa (hash: rUWPt9ieqVy+Gp/oD9EsBpO1X47eqDC+02qK6K5SPS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:23:ad:21:3e:fd:3b:e6:f3:a3:78:17:b9:ac:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
        Validity
            Not Before: Sep 23 15:00:17 2026 GMT
            Not After : Sep 24 15:00:17 2026 GMT
        Subject: CN=95412816d3b4de862788ec3668fd13cd8a566f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ad:c8:21:35:36:47:b0:28:9a:e0:83:b7:12:
                    ca:39:32:56:46:18:85:ca:d5:f6:20:08:83:c4:3e:
                    bd:3f:e7:a6:a5:51:7b:39:8c:96:44:5d:32:03:cd:
                    c1:69:31:34:e5:d6:43:90:a4:99:26:83:a2:74:5d:
                    1e:63:a6:e7:24:b9:9e:e6:25:00:37:b3:bd:bf:a2:
                    39:27:2a:8a:a1:37:85:09:e9:a8:1b:22:c5:a3:1d:
                    03:ae:34:fd:e2:be:bd:15:38:05:c5:94:4b:c2:0e:
                    60:d1:4e:1d:b8:37:92:82:e3:a1:ce:6c:81:63:fd:
                    d7:6c:3c:8b:75:a4:33:2a:5a:5d:58:e1:6e:b1:87:
                    c4:8d:95:1a:cd:c5:ae:f5:bc:23:2c:33:a6:f9:73:
                    74:21:30:b3:65:59:8a:cf:20:4d:3a:2b:31:12:bd:
                    dd:2c:0c:63:4d:db:97:b3:d4:ce:ee:25:bd:54:47:
                    51:1c:20:8a:ca:d2:0d:2d:45:bd:eb:af:96:57:27:
                    a7:68:d2:bf:62:06:de:ae:5f:46:a0:b5:12:50:f9:
                    cf:7a:46:ef:f0:bc:cd:93:79:51:e4:a0:80:64:dc:
                    bf:c7:fb:b2:91:8e:81:7c:f1:1e:5d:15:10:c6:14:
                    cb:b4:23:df:49:a6:c3:de:db:f5:f9:d3:92:d8:fe:
                    72:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:41:28:16:D3:B4:DE:86:27:88:EC:36:68:FD:13:CD:8A:56:6F:28
            X509v3 Authority Key Identifier:
                keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:0a:bb:c1:d7:16:72:df:cd:3c:20:24:1f:e4:af:1e:6a:73:
         e5:bd:6f:59:08:14:ff:4e:4b:8d:d3:ef:25:3b:51:37:42:eb:
         2b:bf:c7:85:b4:ea:e1:bb:00:c9:80:f1:59:c8:03:4c:83:da:
         d6:58:9d:8b:22:bd:be:60:d0:f4:ac:10:ae:55:37:58:20:86:
         32:53:28:66:c6:06:31:2d:87:c4:48:28:18:98:5c:6e:1e:f3:
         fb:be:cf:41:33:83:3c:16:22:c3:da:9d:a8:2d:03:0f:02:3e:
         0a:70:47:6a:a3:ef:f0:ee:df:ce:be:39:dc:8e:2e:d9:35:2f:
         a7:a1:c0:a8:b1:7e:7c:1c:6f:68:9c:77:fd:96:a5:1d:7f:97:
         54:16:3c:4e:88:10:b0:24:c5:1e:2b:55:d8:dd:d1:f0:16:b1:
         3e:e7:b8:26:51:67:fc:93:6e:99:59:9f:91:35:2a:a0:b2:ef:
         03:cb:f1:b8:7e:30:7b:d8:fc:38:32:c7:c0:c5:25:4e:d3:19:
         37:95:f2:d0:71:4a:e5:12:84:de:cf:2a:47:80:bd:d4:af:25:
         c2:67:3b:56:36:9c:1d:ca:0e:37:ae:c5:ea:1f:d6:f0:11:96:
         8d:73:cf:76:a0:e8:1d:d9:9a:33:59:e8:de:90:4b:27:a8:99:
         ea:4c:18:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:53:47 2026 by rpki-client