Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
File:                     fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft (raw, json)
Hash identifier:          /e+tkXzqkOtf5uXH8cgWQp5J7+FL94UKTMmQ6j9bKi0=
Subject key identifier:   4B:3C:F2:96:FD:3C:83:E2:88:59:F2:23:97:26:F4:BD:15:39:22:D0
Authority key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
Certificate issuer:       /CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Certificate serial:       01A0CE9169DB30EE2DAC93F967B9FD26088F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
Manifest number:          1396
Signing time:             Wed 23 Sep 2026 14:00:31 +0000
Manifest this update:     Wed 23 Sep 2026 14:00:31 +0000
Manifest next update:     Thu 24 Sep 2026 14:00:31 +0000
Files and hashes:         1: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl (hash: 9bit8EaA7Ap1xXNDJ3BbMdt7AsAUIyBxSa+0fZskW18=)
                          2: qoI8F0lbOVIzl_Chk1fw1atLi5k.asa (hash: N3/9TZTJb11e6EEEvsOn0LqdBXjtO+tXCNFld50vBf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:91:69:db:30:ee:2d:ac:93:f9:67:b9:fd:26:08:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
        Validity
            Not Before: Sep 23 14:00:31 2026 GMT
            Not After : Sep 24 14:00:31 2026 GMT
        Subject: CN=4b3cf296fd3c83e28859f2239726f4bd153922d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:c7:81:cc:ed:f6:1a:8b:a5:50:47:4b:d4:
                    0d:9d:b9:2b:9f:0e:d8:7a:54:e9:4d:52:aa:bd:79:
                    d2:ed:18:1e:8c:30:e7:99:45:99:c0:23:55:43:be:
                    cf:b1:24:22:c1:7b:5f:93:e8:b2:88:09:9a:00:4d:
                    3f:0e:38:8c:f0:d1:1f:60:33:2a:24:ce:ca:2d:09:
                    81:66:1c:ce:3f:90:c6:38:d7:e9:1a:1e:56:33:3e:
                    0a:d5:0a:68:d4:e5:ff:08:d7:84:f8:1d:9a:cc:4b:
                    d0:7a:ba:2a:0e:96:8b:1a:6e:9a:48:f6:f8:30:22:
                    2f:21:d8:be:cb:1a:e9:53:95:5f:40:a4:b7:ed:db:
                    64:aa:d3:b2:91:ad:3d:6e:6b:59:92:80:df:43:89:
                    f5:d3:a3:9a:c0:33:9e:42:ec:ce:21:61:82:54:94:
                    29:c5:8f:9b:9e:d4:b6:c1:6d:e7:66:09:7f:01:94:
                    38:96:49:1e:6f:ef:61:d9:93:5e:60:b7:a2:fc:ee:
                    c9:c9:c2:ad:7d:8e:ff:2d:41:39:b0:24:38:e4:a8:
                    dc:3b:e8:63:a0:d0:1a:1d:8c:95:a6:ad:8f:0d:63:
                    cd:dc:7b:b5:97:64:62:ea:b8:78:ac:23:6f:ac:00:
                    3d:65:a9:34:ae:be:8f:18:06:2d:24:b3:be:f0:5c:
                    9f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3C:F2:96:FD:3C:83:E2:88:59:F2:23:97:26:F4:BD:15:39:22:D0
            X509v3 Authority Key Identifier:
                keyid:7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:85:99:fb:1a:8c:90:4b:cc:86:6a:4b:a1:03:aa:d1:42:14:
         0d:e9:0c:2b:df:50:94:b3:7d:44:6a:a6:10:84:f6:0c:4f:fd:
         ef:52:69:85:27:0b:c1:65:e7:23:ef:36:78:84:39:f6:a6:c3:
         61:fa:51:89:f1:11:24:9c:c9:8c:b9:c9:f4:47:14:40:9f:88:
         da:74:32:a1:b1:b5:c8:b9:a3:7b:45:f6:27:59:ad:4d:3a:73:
         ef:46:ec:4e:2c:ec:7c:b0:50:53:54:c4:b7:db:d2:a6:cb:f1:
         72:11:44:86:17:29:a6:ca:b8:a8:ce:91:1e:1c:d9:70:2f:25:
         f5:d2:b7:ec:9d:54:fa:49:b1:bc:23:51:9e:d3:bc:00:71:62:
         a9:91:dc:90:9f:87:a1:04:1f:e2:cc:f0:0e:14:95:38:36:77:
         09:44:48:ea:b1:03:fe:ba:4e:eb:d4:e4:6e:6b:ca:c4:b1:2d:
         4a:dc:60:e1:94:f8:79:5f:e3:9f:ef:65:04:7d:aa:02:0d:dd:
         1c:b9:68:17:58:c4:df:9f:f9:a5:12:92:7b:5b:26:fa:3d:06:
         b2:d3:54:d1:17:be:00:52:89:cb:50:51:7d:8b:4c:35:24:9f:
         f8:49:19:da:e5:62:6d:18:9d:b6:87:ae:c0:63:4c:ad:9d:21:
         52:a0:39:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:56:31 2026 by rpki-client