Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
File:                     femPSOmIeQ0OB5NTeUG0E9LmAwY.mft (raw, json)
Hash identifier:          Ghu8F1dvBEzS1Lx2EtKtvzwu6zyotwwtkTxwyw/rBSU=
Subject key identifier:   FF:6D:FC:6A:76:FD:2D:3F:1B:E5:0E:A2:EC:06:EC:14:D7:5B:33:50
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Certificate issuer:       /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial:       01A11003A42C6B8F0C48D9DC54E2BDA363CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
Manifest number:          1A92
Signing time:             Tue 06 Oct 2026 07:00:36 +0000
Manifest this update:     Tue 06 Oct 2026 07:00:36 +0000
Manifest next update:     Wed 07 Oct 2026 07:00:36 +0000
Files and hashes:         1: femPSOmIeQ0OB5NTeUG0E9LmAwY.crl (hash: qyH1p4IOFpPTbo74fgdy7H3UD2/KCQ9lL14nRpHpQ8c=)
                          2: n8PnHmCwzgn6eidtrMYT9W9uiDg.roa (hash: dF3BGFPmyqPtI2B8bvqeTEPzNVlA2M9oqYLGZ2qLNSM=)
                          3: uecVeJQRs_BN6Djr0u6Ge1udZ80.roa (hash: FRfMOut6ccdt0L9ml9WddidM813JHcrO1vInq1+Nlsg=)
                          4: yyeX8Lf7MoEXWE2nqjcL3MDHjGo.roa (hash: XTYQm0X78zzYn/UlRMeOq+rCLV2TTg08A4Y5J/JPyHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:03:a4:2c:6b:8f:0c:48:d9:dc:54:e2:bd:a3:63:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
        Validity
            Not Before: Oct  6 07:00:36 2026 GMT
            Not After : Oct  7 07:00:36 2026 GMT
        Subject: CN=ff6dfc6a76fd2d3f1be50ea2ec06ec14d75b3350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fd:52:78:70:e6:04:f3:5d:a5:26:05:48:c2:
                    c5:78:0f:3b:93:4e:4f:25:99:7f:d6:c0:16:62:70:
                    9e:f2:88:6c:ce:eb:8f:0d:f0:79:d1:2f:a7:63:44:
                    f2:ad:8d:af:ef:27:b9:5f:3f:97:78:cd:ec:0b:0f:
                    65:e5:3b:7c:09:23:96:b9:5f:93:5b:f5:82:35:06:
                    68:3a:56:07:95:46:d8:3f:bd:88:34:a1:57:eb:52:
                    35:5d:39:72:d3:69:cd:b3:e0:09:f7:b4:5f:34:01:
                    7e:8e:fc:38:c2:f7:85:fd:a8:0a:cf:e0:ad:7d:e9:
                    39:aa:ed:25:f6:80:fc:7b:ef:fd:20:cf:fc:62:5e:
                    b7:ef:8f:ed:eb:cd:1b:59:30:0b:36:b5:34:aa:c7:
                    53:e6:26:8f:66:90:6a:a2:8a:25:db:07:8b:a0:86:
                    14:5d:fe:f5:ac:ac:78:e2:bf:e8:d0:a4:64:8a:e6:
                    d5:93:5a:67:a7:5c:76:85:d0:4c:c1:59:44:47:ff:
                    fe:ef:19:33:e8:8f:57:31:60:c1:ce:7e:c2:43:a1:
                    39:7a:a6:53:92:88:91:95:3a:15:fd:24:29:ca:72:
                    28:a9:06:38:36:d9:42:33:4b:af:7d:8c:f6:3d:b9:
                    2f:12:a2:c1:7d:73:68:f0:d1:de:a9:df:b9:02:bf:
                    2f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6D:FC:6A:76:FD:2D:3F:1B:E5:0E:A2:EC:06:EC:14:D7:5B:33:50
            X509v3 Authority Key Identifier:
                keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b7:f2:68:8d:17:ee:70:2e:e8:bc:19:82:08:f7:69:2e:ea:
         01:a5:96:92:e2:ac:61:e4:a3:2f:bb:cf:30:7b:05:63:f7:7e:
         1c:7a:00:23:04:7a:48:97:28:bd:7a:cf:7b:fa:27:0f:ef:a8:
         f0:be:26:4a:98:a2:41:30:c0:1a:3a:f1:01:97:71:52:e8:09:
         b3:58:7e:e5:94:90:79:df:80:3f:e8:fb:ac:d4:3f:64:dd:c5:
         65:60:12:b8:76:86:58:f2:ff:2f:15:86:50:02:73:67:a4:9d:
         47:ca:f4:33:f6:eb:54:ca:3a:a7:fb:d0:94:d8:20:d2:91:53:
         b2:1c:bb:18:21:62:62:0c:a4:e8:76:b7:a3:54:cc:a1:d6:56:
         c9:5a:81:00:23:db:f6:4b:77:36:2f:e0:a5:d3:b5:50:f3:e8:
         e4:98:87:22:ad:01:10:c4:d3:14:37:65:65:27:47:ec:eb:07:
         fa:9d:f8:e7:54:c6:e0:15:16:3d:c6:d8:14:90:23:23:87:3c:
         14:c6:aa:11:fd:8a:5b:9f:ed:e2:f5:6e:7a:04:3a:84:b4:02:
         1e:64:b4:82:69:35:fb:72:47:ba:2e:94:44:d4:bb:d2:2c:99:
         06:70:bc:a3:8c:cb:a2:55:bf:38:ac:21:d6:8e:83:11:f6:2d:
         e3:72:9d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:06:41 2026 by rpki-client