Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
File:                     17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json)
Hash identifier:          Amw1nyomD8vtAObtyuDUcqLYTqtIgpDgU6yQ40inapw=
Subject key identifier:   FC:F8:47:65:3B:C8:32:73:03:CB:62:AC:5F:4D:15:27:F4:81:25:6E
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Certificate issuer:       /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial:       01A0CFA3F4019B5B126B687CCC6B5649A7DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
Manifest number:          1155
Signing time:             Wed 23 Sep 2026 19:00:23 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:23 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:23 +0000
Files and hashes:         1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: oHCTOHze6Fy+q34EHP+hTGalUkndLH9y6F0y32+DqCw=)
                          2: 7G0NCEWyAUUTld6dbhxspAdwKu8.roa (hash: x0W+qVErOolxMsYnIkgUBz4sjWMNnyVZEzok5cCvMGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a3:f4:01:9b:5b:12:6b:68:7c:cc:6b:56:49:a7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
        Validity
            Not Before: Sep 23 19:00:23 2026 GMT
            Not After : Sep 24 19:00:23 2026 GMT
        Subject: CN=fcf847653bc8327303cb62ac5f4d1527f481256e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:a4:c1:29:2e:74:ec:dc:63:6e:d9:c3:a3:
                    70:e4:bd:12:9d:6e:61:b6:49:fa:91:ae:44:5a:85:
                    19:6b:18:e5:3b:47:f1:13:14:c3:52:ff:6e:89:35:
                    20:79:d5:7e:71:41:88:5e:94:c6:b2:b5:20:a3:9a:
                    3d:99:fe:e2:cb:d5:68:1a:ff:81:64:75:4a:ba:78:
                    94:82:ac:8a:2b:66:2e:89:f5:ad:02:ff:fd:7b:b3:
                    33:cc:7e:0c:74:bc:1a:21:b1:b4:50:15:a2:32:2d:
                    da:fd:83:e3:36:f7:0a:01:36:6f:71:1a:52:81:33:
                    1d:38:2e:c0:0e:cf:0f:18:5f:dd:34:79:c3:69:11:
                    ea:60:c8:39:0b:8d:7d:a9:14:5e:c9:00:48:65:72:
                    cd:af:a7:b0:45:d7:3f:84:f1:8b:15:95:ef:24:63:
                    b9:b2:68:89:3e:c5:8d:a9:f6:85:79:42:f3:1f:a7:
                    fb:55:84:1b:c7:50:6c:d6:78:77:84:48:f2:46:17:
                    bc:e6:25:7a:54:8f:cd:43:f9:6d:f8:6b:80:33:13:
                    3b:3c:32:1b:b5:be:f8:ae:94:09:36:2a:ac:57:6e:
                    38:0d:25:2c:b1:a7:f0:17:0b:38:26:e7:36:dc:25:
                    5a:c9:da:ce:53:8b:38:7a:c0:1e:2d:16:84:2f:61:
                    24:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F8:47:65:3B:C8:32:73:03:CB:62:AC:5F:4D:15:27:F4:81:25:6E
            X509v3 Authority Key Identifier:
                keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:bc:a9:57:23:99:68:2f:38:0e:c7:d0:a5:67:93:0f:f8:37:
         f8:fe:4c:77:a4:6a:fd:27:e4:5f:cf:24:cc:21:29:69:f9:24:
         5d:43:05:9b:72:b5:b5:6a:ab:92:91:0e:38:6a:71:bc:74:a4:
         56:5f:7a:bd:b8:e0:b0:03:a2:3d:0b:fb:27:35:e7:3d:26:c8:
         2b:c2:9d:73:80:e5:5a:6d:f7:a9:d8:04:7e:ad:0a:e4:c6:37:
         4b:bb:5e:90:73:86:31:10:2c:c8:9c:e3:ed:d3:40:c3:f5:cf:
         d9:99:2f:f9:f3:2e:ce:50:2c:ef:75:db:06:44:76:4d:52:cc:
         39:30:dc:16:38:7c:1f:95:90:d1:44:67:53:4e:8a:de:a8:ad:
         b6:13:f0:7c:8f:17:ac:54:ce:43:26:f1:58:ef:47:5e:70:9a:
         ea:fe:18:40:cf:78:c3:df:03:0d:8a:85:91:51:3b:f8:22:c1:
         f1:c0:3d:03:3d:74:1d:71:47:74:ab:0b:35:54:37:e5:17:0e:
         34:a5:df:82:31:47:f3:0d:f8:d7:de:b2:6b:e8:ed:5d:8e:ef:
         bf:04:f3:d7:1a:a2:9e:6f:58:bd:ec:b6:98:19:d3:cc:54:9c:
         f9:83:a2:62:2b:2b:ad:d7:11:a3:51:eb:0d:7a:10:49:16:c7:
         6b:eb:15:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:08:11 2026 by rpki-client