Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
File:                     fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft (raw, json)
Hash identifier:          7t5vVmGUD2XVLmweaBQNPkUg85tw85zXVKnl1d8za10=
Subject key identifier:   7F:98:C2:D6:A0:0F:57:4A:75:E1:71:5B:67:4B:C4:A1:80:E9:E6:EE
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Certificate issuer:       /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial:       01A0D3EFAA3057D014A71C593A72F2367387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
Manifest number:          1A25
Signing time:             Thu 24 Sep 2026 15:01:34 +0000
Manifest this update:     Thu 24 Sep 2026 15:01:34 +0000
Manifest next update:     Fri 25 Sep 2026 15:01:34 +0000
Files and hashes:         1: fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl (hash: 4oJxwCxcHxkTki1V5pnF58axpeUhVZOOLz8OzfgbONg=)
                          2: k_G1ZFjYUPyK2QRfmzTUpmsw2pI.roa (hash: uVOKy0IsUQzC+AmA38qUj8H8RAvlkN0eTQJ2zY0TLiQ=)
                          3: mUrmdVAmGjiB7zwfPp3bUNP6nc0.roa (hash: CKlXjn15KiqQ6c64HVpnruwpKB/QDTcGzdHGePWVYy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ef:aa:30:57:d0:14:a7:1c:59:3a:72:f2:36:73:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
        Validity
            Not Before: Sep 24 15:01:34 2026 GMT
            Not After : Sep 25 15:01:34 2026 GMT
        Subject: CN=7f98c2d6a00f574a75e1715b674bc4a180e9e6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:09:95:4d:45:7f:9b:01:ee:e3:e8:49:d8:f2:
                    a4:90:eb:c2:89:62:38:a2:bf:6f:33:5c:68:92:9f:
                    2d:93:be:06:41:c5:ca:c2:c6:e2:b9:f0:c6:4b:36:
                    47:8a:e0:e7:a2:9b:c1:ed:ec:16:b9:ea:90:56:2e:
                    7e:ad:1b:30:d8:da:32:20:77:84:86:9f:41:02:ad:
                    09:ec:eb:21:27:9a:a8:0e:6a:2a:9c:26:25:eb:98:
                    b8:b4:26:35:31:aa:05:30:ac:c6:9a:1a:33:e1:ab:
                    60:b3:0a:b8:b9:2e:38:bb:34:2b:68:07:a5:58:08:
                    63:77:d0:17:0c:da:e5:50:96:75:37:a8:52:be:71:
                    9f:d7:a6:8e:57:67:e9:40:ca:15:a8:7e:28:d6:87:
                    05:0e:71:f5:ff:36:29:c0:cc:89:a0:3d:e4:7a:56:
                    9f:5b:3c:99:00:a8:07:fc:59:f0:68:c7:69:63:56:
                    91:40:b7:2e:a5:66:01:a4:37:f4:cb:7c:e0:f3:6e:
                    2c:83:ce:d1:41:5e:4a:79:6c:f4:b1:ee:7f:c7:c3:
                    0f:0d:cd:18:42:04:1f:7c:56:eb:29:e9:21:4d:b3:
                    c0:a1:07:f5:80:35:35:99:d9:92:47:9b:af:25:2a:
                    c8:66:5c:bb:2d:eb:2a:2c:d4:7c:94:33:9e:7f:09:
                    5c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:98:C2:D6:A0:0F:57:4A:75:E1:71:5B:67:4B:C4:A1:80:E9:E6:EE
            X509v3 Authority Key Identifier:
                keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3a:95:28:86:cd:f0:38:99:09:a1:12:81:35:48:6c:86:af:
         0c:51:18:bc:c4:e3:d1:b8:e1:dd:d9:0f:bf:ae:de:c1:da:bd:
         ed:7f:ce:57:2b:f5:ac:1a:77:3c:3b:43:59:31:2b:f1:ac:f7:
         3a:b9:b8:64:fe:8d:57:a0:ff:e0:c3:1f:74:6c:6f:32:9d:25:
         7c:e9:2e:f3:0c:f0:c8:78:bc:75:4a:3e:f3:81:2c:a8:21:39:
         1f:b4:64:91:e9:6d:e9:1d:f2:45:53:b8:3f:91:0b:70:65:8c:
         c6:d8:f9:cd:59:08:36:97:48:00:cd:58:2f:d8:b0:bc:b5:0f:
         5b:49:16:bd:1a:b9:fd:79:6a:6d:a5:72:83:17:cf:00:93:96:
         38:ce:54:f2:f2:ba:3e:4a:00:55:24:d3:1d:55:c2:08:dd:aa:
         f6:a2:79:c0:a4:95:be:4a:47:03:a1:26:cf:c9:03:0c:34:14:
         1d:e7:cf:4d:08:d0:67:03:3d:f3:b0:0f:1e:b0:c3:0a:95:18:
         6a:e2:a4:73:cf:e6:47:4d:b0:3d:61:67:02:5f:b8:7c:c3:1e:
         46:d9:0d:2c:68:c3:37:d8:30:0b:61:e5:ac:64:33:43:01:c6:
         7c:c6:39:9e:3d:ec:a1:c1:33:77:ca:04:02:8a:07:fe:ab:64:
         4c:b2:5c:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT76owV9AUpxxZOnLyNnOHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMDNhMWY4YzMzNGZkYmY0Yjc4ZGVmMGM1OTJmZjA0OTBk
ZGY0YjAwHhcNMjYwOTI0MTUwMTM0WhcNMjYwOTI1MTUwMTM0WjAzMTEwLwYDVQQD
Eyg3Zjk4YzJkNmEwMGY1NzRhNzVlMTcxNWI2NzRiYzRhMTgwZTllNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QmVTUV/mwHu4+hJ2PKkkOvCiWI4
or9vM1xokp8tk74GQcXKwsbiufDGSzZHiuDnopvB7ewWueqQVi5+rRsw2NoyIHeE
hp9BAq0J7OshJ5qoDmoqnCYl65i4tCY1MaoFMKzGmhoz4atgswq4uS44uzQraAel
WAhjd9AXDNrlUJZ1N6hSvnGf16aOV2fpQMoVqH4o1ocFDnH1/zYpwMyJoD3kelaf
WzyZAKgH/FnwaMdpY1aRQLcupWYBpDf0y3zg824sg87RQV5KeWz0se5/x8MPDc0Y
QgQffFbrKekhTbPAoQf1gDU1mdmSR5uvJSrIZly7LesqLNR8lDOefwlcYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+YwtagD1dKdeFxW2dLxKGA6ebuMB8GA1UdIwQY
MBaAFH8DofjDNP2/S3je8MWS/wSQ3fSwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8zZmUxYTAtYzZmZC00YmM0LWFhZTEt
OWVlMDA2OTQyYjRiLzEvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8zZmUxYTAtYzZmZC00YmM0LWFhZTEtOWVlMDA2OTQyYjRi
LzEvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTqVKIbN
8DiZCaESgTVIbIavDFEYvMTj0bjh3dkPv67ewdq97X/OVyv1rBp3PDtDWTEr8az3
Orm4ZP6NV6D/4MMfdGxvMp0lfOku8wzwyHi8dUo+84EsqCE5H7Rkkelt6R3yRVO4
P5ELcGWMxtj5zVkINpdIAM1YL9iwvLUPW0kWvRq5/XlqbaVygxfPAJOWOM5U8vK6
PkoAVSTTHVXCCN2q9qJ5wKSVvkpHA6Emz8kDDDQUHefPTQjQZwM987APHrDDCpUY
auKkc8/mR02wPWFnAl+4fMMeRtkNLGjDN9gwC2HlrGQzQwHGfMY5nj3socEzd8oE
AooH/qtkTLJcDQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:07:00 2026 by rpki-client