Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
File:                     mFW4DEXftep6qn3R2O2LFPnB3EU.mft (raw, json)
Hash identifier:          FyTFkTGKuX4aRgvtDqUPin4jUt8rgVUy2phfelyAqgg=
Subject key identifier:   44:2C:13:71:83:64:2F:DE:65:E6:A0:8C:86:80:6A:89:25:C4:42:67
Authority key identifier: 98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
Certificate issuer:       /CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Certificate serial:       01A0D5DED7CCD243DBD4A0C8C6406B994078
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
Manifest number:          055A
Signing time:             Fri 25 Sep 2026 00:02:26 +0000
Manifest this update:     Fri 25 Sep 2026 00:02:26 +0000
Manifest next update:     Sat 26 Sep 2026 00:02:26 +0000
Files and hashes:         1: V40XeqVh6l4DbCmS7UQsikJ2-iM.roa (hash: 5u4CbQ5JG4yrJVoWscvPthJuNktPYvJ7kXfZHFgxd10=)
                          2: mFW4DEXftep6qn3R2O2LFPnB3EU.crl (hash: Vul5u0imXH0BDYelilA6GRxzXLJu70ynd7PsVzGfu6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:de:d7:cc:d2:43:db:d4:a0:c8:c6:40:6b:99:40:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
        Validity
            Not Before: Sep 25 00:02:26 2026 GMT
            Not After : Sep 26 00:02:26 2026 GMT
        Subject: CN=442c137183642fde65e6a08c86806a8925c44267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e6:31:55:d5:91:df:4c:8d:33:ab:82:c8:8c:
                    a4:9f:4f:6d:7d:b8:54:82:ba:65:f8:de:e8:e0:bd:
                    73:82:fb:a4:7d:bc:86:00:e8:14:ed:ae:0e:c0:e7:
                    da:a7:f0:94:e0:b4:41:42:de:a1:b9:a3:63:80:23:
                    43:47:c4:e6:1c:42:f0:e1:ba:87:29:a1:8f:63:19:
                    cd:55:c1:c5:80:17:af:c3:0a:70:05:0a:3a:a8:3b:
                    07:05:3f:bf:eb:b9:42:0b:07:29:c4:e5:94:aa:36:
                    97:6a:80:d0:ef:a3:a7:f2:72:21:0f:ac:99:ea:a9:
                    5c:85:85:63:9c:54:34:cb:17:ae:e0:d1:41:df:bc:
                    99:85:5d:a2:09:d7:82:13:1e:a6:22:99:76:6b:a0:
                    83:6b:1b:2e:e2:10:6d:86:00:da:0d:db:99:31:2a:
                    68:58:b2:0d:dc:d5:98:10:6a:55:87:46:eb:15:08:
                    08:40:91:5e:da:2c:1d:dd:30:1f:9f:dd:6d:94:4f:
                    91:36:ba:36:f5:e3:2e:6f:b8:ab:ec:28:fd:3a:48:
                    c6:bb:0e:8a:a8:f7:a2:1f:a5:c2:3d:3d:72:7c:81:
                    a9:5f:a9:c1:3e:61:32:2b:2d:4a:ca:64:d7:57:80:
                    f2:d6:85:27:9f:ca:76:e1:11:76:8a:15:16:30:7e:
                    e8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2C:13:71:83:64:2F:DE:65:E6:A0:8C:86:80:6A:89:25:C4:42:67
            X509v3 Authority Key Identifier:
                keyid:98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:da:1a:46:fb:b9:56:6e:2b:a0:46:b7:ed:a7:a6:4f:b5:81:
         b8:8f:19:8c:21:fb:bb:c5:da:5f:4e:ce:d7:35:fa:6b:29:9d:
         4b:58:f0:f3:c6:1f:8b:c2:17:2a:df:a4:89:ab:0e:0e:86:14:
         39:5a:e8:f5:7e:b6:9f:f6:9e:c4:53:d2:a4:bf:ad:69:a0:f5:
         e6:ca:04:98:11:ed:22:6b:f7:e9:f2:3e:77:17:fc:3f:8e:92:
         20:f5:61:77:56:16:0b:23:10:e9:37:c2:31:7d:ba:90:ed:3c:
         70:b0:49:ad:eb:8d:f8:cb:25:5d:d0:49:0e:14:5c:3c:85:3e:
         53:d7:94:4f:ee:1b:06:84:05:97:bb:fe:86:5b:e5:22:0f:d1:
         77:e3:b6:1e:a4:5a:c9:1b:b2:b6:23:df:0c:07:6f:57:f9:50:
         a8:cd:6d:7a:14:a6:01:27:8b:46:eb:01:8b:31:5b:f8:f7:d6:
         70:ec:62:10:f6:c7:d4:fd:77:f2:c0:74:34:e5:74:41:cb:34:
         b7:6d:ad:13:f8:7d:d2:0e:76:b9:82:9c:c2:2f:fb:96:8e:05:
         d3:3e:38:51:60:25:b1:c7:5f:93:05:c8:9f:7c:23:ec:d7:0e:
         f3:36:5a:00:01:f0:37:83:6a:f5:e2:d6:77:7a:31:dd:8b:1f:
         cb:2a:8d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:48:32 2026 by rpki-client