Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File:                     FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier:          DgL+gDsh+63kew9VhA10USStKScZs2S7tO6q7jcXbb4=
Subject key identifier:   18:02:58:18:3A:24:3D:24:E7:89:28:66:11:93:80:79:14:D6:2D:73
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer:       /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial:       01A0DD984D12C9EC9D82D93DAF080EAAE2E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number:          0B92
Signing time:             Sat 26 Sep 2026 12:02:20 +0000
Manifest this update:     Sat 26 Sep 2026 12:02:20 +0000
Manifest next update:     Sun 27 Sep 2026 12:02:20 +0000
Files and hashes:         1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: rF5TgMrb7SKmxwWzquq2laUwAtkxHIARODiksewroek=)
                          2: MBwPXOKM_iWsdzlsSXqDs7ZTH3I.roa (hash: 6X+PmBDPGX3JlUhHkCIG/oJUZITMm91IUs89tz0dREE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:98:4d:12:c9:ec:9d:82:d9:3d:af:08:0e:aa:e2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
        Validity
            Not Before: Sep 26 12:02:20 2026 GMT
            Not After : Sep 27 12:02:20 2026 GMT
        Subject: CN=180258183a243d24e78928661193807914d62d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:92:17:cd:df:1e:c5:da:87:21:4c:78:93:d9:
                    4d:9c:b4:34:c8:63:a0:c7:8f:39:0e:1e:63:b6:ab:
                    ef:5d:18:39:08:6a:f5:a1:04:c6:55:18:e0:50:75:
                    43:81:7e:4e:51:3f:fb:bc:45:56:0f:07:35:45:96:
                    a2:87:dc:3b:99:6c:0c:64:b2:3f:99:51:a9:e2:64:
                    b5:de:d7:3e:4f:84:d9:f2:8c:33:8b:30:41:39:00:
                    d7:d7:b0:d6:01:da:e1:47:b1:2b:2c:a7:b4:49:d9:
                    d7:fc:32:a8:7b:09:04:52:d5:32:d1:66:55:b5:30:
                    39:4d:cd:5b:ba:1a:54:71:8b:57:ca:de:4c:4c:4f:
                    3f:3b:41:d5:ce:cc:b1:71:f3:de:ab:7c:3a:0d:7f:
                    7a:db:f0:2d:bb:5c:3a:b9:67:9d:29:8e:10:d6:8c:
                    cf:db:70:ac:a3:4e:40:de:f5:df:de:fe:4c:ae:4f:
                    53:71:40:b2:88:0b:f0:8a:94:86:08:9e:ac:a0:88:
                    6e:02:9e:19:c8:2c:5e:8c:aa:49:0d:64:fb:af:da:
                    22:2c:42:8e:f4:15:d8:60:90:a7:be:6b:b2:19:70:
                    62:78:84:8c:27:bf:64:5f:27:42:b8:53:f2:21:d4:
                    42:0e:66:4a:38:75:bf:f6:3c:66:27:49:44:5a:2a:
                    45:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:02:58:18:3A:24:3D:24:E7:89:28:66:11:93:80:79:14:D6:2D:73
            X509v3 Authority Key Identifier:
                keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:38:fd:9c:b1:cc:db:8a:17:df:6f:49:fc:52:5b:d6:26:03:
         10:37:00:92:57:b8:f8:f2:af:cb:6b:d4:de:e4:b6:e0:6d:e5:
         45:f8:ba:14:c6:3e:43:ae:9a:7f:89:59:78:0f:91:e1:d3:1f:
         76:14:e6:88:8c:64:03:e7:4d:dc:0f:b4:ff:a9:0e:cb:08:f1:
         3c:6b:05:d2:2a:c4:ae:ac:f9:32:9a:c5:f9:54:96:72:96:0c:
         2e:a3:f1:42:7f:ce:c6:84:7a:ae:7b:9b:af:70:4a:37:19:8c:
         d3:1b:15:8e:50:6b:d6:ca:9c:74:9a:23:34:3e:56:28:65:68:
         57:e1:e5:14:0b:fa:db:5f:56:87:c3:0c:95:c8:15:93:35:0b:
         f2:2f:9a:de:3f:14:41:d6:cf:fb:89:2d:96:5a:69:ed:c4:76:
         7d:6a:2a:37:b0:80:24:4c:37:69:a3:d5:d0:ea:6f:c2:4f:e5:
         2b:93:0a:0c:8e:f5:85:04:db:d9:20:0b:e9:e1:74:ec:ab:db:
         8c:b7:80:4e:0b:7b:d8:49:65:3a:b0:17:a2:93:51:50:5a:69:
         2e:d1:25:1d:ee:6b:b5:b6:44:46:8e:e4:f1:05:7c:c8:c5:e4:
         8b:51:9b:61:4d:01:65:e3:1c:7a:81:e6:ec:8f:20:3f:56:ac:
         76:4e:bd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:16:43 2026 by rpki-client