Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
File:                     Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json)
Hash identifier:          Kz9d008uODCbmRrm+R+9LKXYEuOd2UqPD48DIxh5sgA=
Subject key identifier:   30:14:62:C2:9C:32:98:BB:73:D1:88:3C:F1:5D:54:F0:F6:0A:FF:87
Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
Certificate issuer:       /CN=15fdb088e98e4e6415d944142212448369005b48
Certificate serial:       01A0E43F13E10CE544733D59E153D5633D44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
Manifest number:          0588
Signing time:             Sun 27 Sep 2026 19:02:14 +0000
Manifest this update:     Sun 27 Sep 2026 19:02:14 +0000
Manifest next update:     Mon 28 Sep 2026 19:02:14 +0000
Files and hashes:         1: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: xVBr5EE17OA197P712c+1CZB5uL4srtGNzxALZyXGiM=)
                          2: UWFOafME42L6O6C8tCsylQ1qM5Y.roa (hash: kTp8dPuulE0KVt0WY/U+hGiw2jKgDTK8kmDYSbikY3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:3f:13:e1:0c:e5:44:73:3d:59:e1:53:d5:63:3d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15fdb088e98e4e6415d944142212448369005b48
        Validity
            Not Before: Sep 27 19:02:14 2026 GMT
            Not After : Sep 28 19:02:14 2026 GMT
        Subject: CN=301462c29c3298bb73d1883cf15d54f0f60aff87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:6a:b1:7c:86:f2:e9:10:f1:a5:c4:dc:96:
                    0a:98:8f:1e:ea:73:28:47:1d:a7:60:e0:29:a2:41:
                    6a:2c:d3:6a:9e:c6:2a:56:5c:0b:da:54:ad:6e:77:
                    08:b1:77:42:69:d9:08:a6:34:5f:6c:58:c5:26:60:
                    13:e6:dc:06:55:c1:24:d7:01:4e:85:41:50:26:09:
                    4c:0a:48:85:85:aa:5b:6d:ff:92:3b:5a:14:38:6b:
                    55:9b:0f:12:3e:3f:8b:fc:cc:9b:71:20:03:c3:16:
                    66:91:d9:5b:1e:aa:a2:7b:5b:58:99:5c:89:5e:21:
                    67:71:73:bc:ea:f1:59:8c:6b:08:6b:1a:f6:6f:9c:
                    c2:63:26:f9:7b:1b:42:2d:20:95:90:62:54:2c:65:
                    e1:a5:e9:40:9d:6f:a4:b9:e2:64:56:da:f9:b5:5a:
                    93:84:c9:eb:81:98:f8:e3:f4:9e:ce:4f:98:93:f9:
                    10:61:34:ed:06:a8:f8:fd:9d:29:c8:3c:41:02:08:
                    49:66:49:87:15:17:b0:1a:c1:a3:43:46:a0:42:07:
                    2a:06:bd:53:dc:e4:ab:e6:72:b0:8e:0b:e5:81:3a:
                    3a:fd:9d:9b:e0:8b:44:e4:92:08:c1:b4:bf:a5:20:
                    67:9e:87:24:9b:0b:36:f6:b8:0c:6c:39:fe:5a:32:
                    97:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:14:62:C2:9C:32:98:BB:73:D1:88:3C:F1:5D:54:F0:F6:0A:FF:87
            X509v3 Authority Key Identifier:
                keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:62:62:42:5a:f2:73:23:cb:23:dc:cf:e2:31:7a:e6:f4:c0:
         56:2f:15:4b:57:52:3e:47:64:34:d1:1a:8f:f1:53:f9:81:81:
         55:4b:b8:ff:74:6c:d0:a4:13:ad:2a:05:9e:b3:0c:f4:6c:b0:
         1b:9a:29:33:a3:5a:a3:fb:36:45:4a:be:2d:78:b5:be:37:7b:
         f5:9b:c3:ff:2a:08:20:03:be:f5:95:de:7f:7b:ac:81:83:0c:
         d1:26:99:c3:3a:80:77:df:84:92:dc:e8:67:1f:18:5e:7c:8b:
         69:27:39:c1:26:69:c5:86:76:f5:a4:01:71:8a:42:8c:de:03:
         b4:2c:a2:86:b5:8b:43:e8:f8:21:1b:c5:c2:38:89:43:e5:af:
         00:51:9a:41:a4:0a:61:18:8e:2f:bd:59:f1:66:bc:53:77:48:
         4e:31:25:26:41:9d:70:b3:f7:22:17:00:e9:7e:1c:51:8e:f5:
         67:10:d4:6d:96:ab:7c:d3:ac:0c:a7:61:b2:04:86:45:d6:7b:
         f3:1e:1c:d9:2d:19:1f:6b:a9:51:09:7a:5a:ad:90:8e:79:3b:
         3a:4c:46:9a:fe:23:ec:74:04:16:ac:6a:48:93:96:28:17:cf:
         08:55:fe:81:3d:00:db:08:b0:bd:c7:de:10:f2:ab:28:be:06:
         6b:52:2a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:17:07 2026 by rpki-client