Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/9b5ad2-201f-4b4f-8bb8-54d17347c120/1/FGVbCx488K1_W-p1J-Hb4YxlLxQ.mft
File:                     FGVbCx488K1_W-p1J-Hb4YxlLxQ.mft (raw, json)
Hash identifier:          fEG93mucidDDT59wmcNSuE5QHPteS/iz8FZQ2taI3AI=
Subject key identifier:   4C:38:97:4D:10:BB:66:0B:2E:A8:1D:1D:38:D0:28:9B:32:67:6C:82
Authority key identifier: 14:65:5B:0B:1E:3C:F0:AD:7F:5B:EA:75:27:E1:DB:E1:8C:65:2F:14
Certificate issuer:       /CN=14655b0b1e3cf0ad7f5bea7527e1dbe18c652f14
Certificate serial:       01A0E24F991625D37E1D8A8B686FC4D938A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGVbCx488K1_W-p1J-Hb4YxlLxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9b5ad2-201f-4b4f-8bb8-54d17347c120/1/FGVbCx488K1_W-p1J-Hb4YxlLxQ.mft
Manifest number:          B8
Signing time:             Sun 27 Sep 2026 10:01:02 +0000
Manifest this update:     Sun 27 Sep 2026 10:01:02 +0000
Manifest next update:     Mon 28 Sep 2026 10:01:02 +0000
Files and hashes:         1: FGVbCx488K1_W-p1J-Hb4YxlLxQ.crl (hash: i1WILPRwnNODDIH5MhE25ZmvTOan/VUjtSBgocMrLCk=)
                          2: rP_iL3YlKk2j27EGy1gjBiPhqWk.asa (hash: VdGAuCTZJ+tfevhKttwjpobcQd2Q6iTpWsuzsp314mE=)
                          3: rWivvZbK-_-PLbSTb3xCtdcPRkI.roa (hash: zNsiulWbX1295mH8M5QpZmvcAkpl2nKdGL8wUJs7Flg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/9b5ad2-201f-4b4f-8bb8-54d17347c120/1/FGVbCx488K1_W-p1J-Hb4YxlLxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/9b5ad2-201f-4b4f-8bb8-54d17347c120/1/FGVbCx488K1_W-p1J-Hb4YxlLxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FGVbCx488K1_W-p1J-Hb4YxlLxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e2:4f:99:16:25:d3:7e:1d:8a:8b:68:6f:c4:d9:38:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14655b0b1e3cf0ad7f5bea7527e1dbe18c652f14
        Validity
            Not Before: Sep 27 10:01:02 2026 GMT
            Not After : Sep 28 10:01:02 2026 GMT
        Subject: CN=4c38974d10bb660b2ea81d1d38d0289b32676c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:2b:28:4e:d7:9a:fa:c1:e2:61:ba:ed:46:
                    cb:10:6b:73:8c:0e:5d:75:94:78:b1:09:b6:fe:25:
                    da:3e:5f:4b:e1:62:6b:69:7f:95:ba:68:20:a4:cb:
                    98:d0:f5:9a:46:41:07:df:39:fc:9c:ed:11:9c:47:
                    d3:eb:1a:d5:13:33:ff:ce:f1:96:dd:61:11:a2:cf:
                    56:d8:7f:96:ca:2a:8d:5d:7b:41:7d:34:34:81:86:
                    b3:a9:08:c5:3e:2b:b4:fb:a2:a7:5c:d6:ce:8a:e5:
                    78:fe:51:44:49:a9:dc:b9:ea:97:f4:d4:14:51:0e:
                    5e:3b:7f:bb:1e:84:5d:b3:0d:72:bf:a1:70:69:b5:
                    62:8c:e4:e2:f5:9f:37:c0:ea:03:a1:46:a0:c4:00:
                    4c:48:cc:2e:ed:af:87:9d:5e:0a:cd:c3:77:88:16:
                    b1:f0:71:6a:dd:6b:5e:5d:9d:a8:7e:04:c9:2e:c5:
                    35:ad:88:d2:c2:6e:e6:bc:1a:94:a2:f8:db:b2:a9:
                    e8:8c:ab:98:62:c7:40:23:d4:67:3e:9b:d1:2e:32:
                    48:92:5e:81:6e:06:6f:8b:1f:fd:71:e6:f1:46:d8:
                    40:76:aa:1c:4d:45:70:13:70:21:73:44:2d:6c:4e:
                    c9:86:80:6d:37:e2:79:24:b0:b5:16:5b:78:b8:4b:
                    4e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:38:97:4D:10:BB:66:0B:2E:A8:1D:1D:38:D0:28:9B:32:67:6C:82
            X509v3 Authority Key Identifier:
                keyid:14:65:5B:0B:1E:3C:F0:AD:7F:5B:EA:75:27:E1:DB:E1:8C:65:2F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGVbCx488K1_W-p1J-Hb4YxlLxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b5ad2-201f-4b4f-8bb8-54d17347c120/1/FGVbCx488K1_W-p1J-Hb4YxlLxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b5ad2-201f-4b4f-8bb8-54d17347c120/1/FGVbCx488K1_W-p1J-Hb4YxlLxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:22:2c:68:d1:a7:93:df:eb:fa:11:bf:ef:e1:f3:a1:55:fb:
         11:6e:ab:e1:c8:20:91:67:a3:1f:4f:4b:c6:f6:46:d5:f4:fe:
         17:93:07:7e:19:fa:1f:9c:5f:4d:96:c6:59:b8:fb:e6:a9:b3:
         d9:98:30:2d:69:85:81:0d:2b:63:68:5c:d5:f3:3a:57:d8:05:
         79:84:1f:80:1e:0d:a0:af:af:a7:51:e2:f9:ed:5c:1a:64:45:
         15:0c:d4:7b:64:af:ff:ad:39:44:3a:87:aa:7d:5b:f7:01:50:
         73:04:81:90:ab:fb:b6:f8:85:15:99:b4:3b:e2:c0:4c:94:27:
         15:f0:7d:6a:a0:26:f3:21:1d:a3:6c:ef:e8:29:75:b7:0e:41:
         92:e0:4d:26:6c:04:23:66:45:c0:14:eb:07:7f:62:74:1e:92:
         8a:ef:b6:d0:63:cb:32:6d:0e:26:f5:14:a7:47:f4:c9:f6:b3:
         ab:92:6b:ee:fa:a7:e2:8c:7f:a2:f6:30:91:47:f6:0e:98:dd:
         e5:03:3e:66:0b:d5:f2:73:48:29:19:9d:87:57:ab:de:7a:7a:
         1e:71:f0:03:30:39:8f:ed:b3:06:e5:0a:54:fa:91:db:b6:fb:
         19:3b:ed:4e:33:5c:9f:ff:5b:fe:b3:5c:6d:ca:5d:19:da:e1:
         01:e1:0e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:28:48 2026 by rpki-client