Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.mft
File:                     FEDP2UKzzeZl7PLxqC2EWwRRTMY.mft (raw, json)
Hash identifier:          z1JxP1ocjFoZBSwJxFZ141vVjCwvoU0c6RWmgUoYfr8=
Subject key identifier:   78:28:F7:4A:FE:CF:74:38:89:1B:58:AA:56:7B:98:60:C2:5C:A8:C0
Authority key identifier: 14:40:CF:D9:42:B3:CD:E6:65:EC:F2:F1:A8:2D:84:5B:04:51:4C:C6
Certificate issuer:       /CN=1440cfd942b3cde665ecf2f1a82d845b04514cc6
Certificate serial:       01A0E4AC23199AF1D8AFE0009FE35F48057A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FEDP2UKzzeZl7PLxqC2EWwRRTMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.mft
Manifest number:          0176
Signing time:             Sun 27 Sep 2026 21:01:21 +0000
Manifest this update:     Sun 27 Sep 2026 21:01:21 +0000
Manifest next update:     Mon 28 Sep 2026 21:01:21 +0000
Files and hashes:         1: FEDP2UKzzeZl7PLxqC2EWwRRTMY.crl (hash: 05UZWYrtwG+1qtWrMw2bm3LzTVu1xVQ124nLZlGxxZ8=)
                          2: jlwmlKSUfHbKs6zt1m81RLJnNls.roa (hash: 0Wp49LsbSoKPdY1WwpNDwL8E5Fus4mwp+7pWa02+aqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FEDP2UKzzeZl7PLxqC2EWwRRTMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:ac:23:19:9a:f1:d8:af:e0:00:9f:e3:5f:48:05:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1440cfd942b3cde665ecf2f1a82d845b04514cc6
        Validity
            Not Before: Sep 27 21:01:21 2026 GMT
            Not After : Sep 28 21:01:21 2026 GMT
        Subject: CN=7828f74afecf7438891b58aa567b9860c25ca8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:03:84:4e:9f:62:32:d6:85:7e:e0:e9:b1:
                    98:61:f0:f8:d9:e9:e8:7f:78:a2:be:c9:69:3c:df:
                    62:86:22:02:ec:dd:5e:69:a9:45:2f:f0:33:a3:e6:
                    ac:ff:af:96:c5:16:aa:e2:5d:6c:76:d8:62:d7:be:
                    c0:a8:f9:63:e4:2c:41:88:64:58:3f:12:02:ac:4b:
                    82:f2:e0:db:85:5c:ec:10:b2:db:2f:f0:37:8a:76:
                    5f:df:4f:fd:d8:d7:7d:32:53:00:6e:09:f6:be:6d:
                    55:88:5d:8c:99:03:61:44:ab:62:d7:34:9a:a0:20:
                    18:00:c7:3a:ef:1f:01:54:bb:72:3e:a9:62:de:8a:
                    db:49:7b:b0:78:6c:19:a6:1e:f6:f4:2a:81:a2:08:
                    7e:f1:77:7e:34:15:3d:9c:34:a2:52:f3:20:a6:db:
                    59:59:5b:25:f3:1a:2f:7b:bb:e9:8f:7c:52:2d:ff:
                    f1:90:c4:2d:f1:f2:af:ef:ef:17:99:d3:9e:85:35:
                    80:94:65:f0:2f:5d:c7:f2:78:07:83:8d:45:e2:48:
                    4f:50:a5:ac:cb:37:03:96:19:4e:98:6a:c2:4e:dc:
                    43:80:78:05:3c:ba:65:1c:fd:38:b8:ea:c5:a5:b7:
                    51:16:0f:cb:57:a3:c3:47:27:b1:fb:2a:fb:c5:87:
                    80:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:28:F7:4A:FE:CF:74:38:89:1B:58:AA:56:7B:98:60:C2:5C:A8:C0
            X509v3 Authority Key Identifier:
                keyid:14:40:CF:D9:42:B3:CD:E6:65:EC:F2:F1:A8:2D:84:5B:04:51:4C:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEDP2UKzzeZl7PLxqC2EWwRRTMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e97b17-dc40-4ec3-9cd6-eabee12371bd/1/FEDP2UKzzeZl7PLxqC2EWwRRTMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:68:f5:3d:26:01:b6:a8:c4:e7:b3:9e:37:9b:3b:36:69:85:
         41:a3:f2:09:9e:c1:36:d9:65:37:86:66:11:e8:1c:e1:f4:73:
         af:aa:87:d2:ac:49:81:fe:17:c9:31:40:d7:ac:f9:27:b6:b1:
         02:34:87:c0:31:8f:61:ed:56:c9:0c:50:5f:0c:58:ba:20:fb:
         8b:fe:f9:ce:cf:50:c7:05:ee:23:01:80:08:a9:78:c6:1b:d2:
         38:0b:a7:e5:d0:91:3a:d0:33:46:a3:44:85:7d:7e:51:4f:1c:
         e3:43:ed:55:ce:c6:43:d6:4c:92:92:85:ae:3b:74:42:a0:56:
         4d:b2:5f:45:7a:19:43:34:f0:c3:70:a8:1e:fe:a4:9a:f9:1d:
         f5:4d:d8:14:bb:aa:28:0a:66:3d:aa:39:dc:15:54:e5:42:d5:
         f7:34:95:97:a8:ff:87:2b:19:70:5e:1f:ac:07:ae:b5:f1:a5:
         f2:bd:13:84:ef:71:41:d3:09:b7:58:4f:c3:5e:06:b6:d7:5f:
         3b:9a:2f:7b:4a:a4:a8:b5:79:7c:ec:78:b8:ce:e8:85:2d:c3:
         86:95:2c:63:65:8e:0a:c0:a2:c2:ac:8e:63:11:d7:73:02:2c:
         41:d1:81:3f:46:ac:4e:16:8e:a8:7f:d9:a8:af:5c:b7:92:f2:
         24:d1:d7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:46:58 2026 by rpki-client