Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
File:                     pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft (raw, json)
Hash identifier:          4W3B03QR7dN0mX5JWdmw2IgYSeLNB2rhn5+6mKV/XLQ=
Subject key identifier:   89:17:1B:C3:74:18:D5:23:99:7A:76:5C:79:AE:23:94:38:3F:75:06
Authority key identifier: A4:5A:3D:EE:A2:2A:D7:0F:44:BD:FF:F3:DA:CA:78:7C:FA:B7:3A:FC
Certificate issuer:       /CN=a45a3deea22ad70f44bdfff3daca787cfab73afc
Certificate serial:       01A0D9BABD074D4B6C604CED39D45FC7320F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
Manifest number:          016D
Signing time:             Fri 25 Sep 2026 18:01:28 +0000
Manifest this update:     Fri 25 Sep 2026 18:01:28 +0000
Manifest next update:     Sat 26 Sep 2026 18:01:28 +0000
Files and hashes:         1: ZhmfZOQthLNwaXu66U6ErWqlalA.asa (hash: qf+Z2Ej6j2Id/dJp4k8hFnsz0b10rm8/N0nNZYscrA0=)
                          2: pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl (hash: RGHLn2ZOf6my924Ut+g5WK/Ut/0YlXB9KE3S5zPnFtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:ba:bd:07:4d:4b:6c:60:4c:ed:39:d4:5f:c7:32:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a45a3deea22ad70f44bdfff3daca787cfab73afc
        Validity
            Not Before: Sep 25 18:01:28 2026 GMT
            Not After : Sep 26 18:01:28 2026 GMT
        Subject: CN=89171bc37418d523997a765c79ae2394383f7506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:e2:2a:7a:4b:c7:1a:13:99:d4:e4:99:95:
                    7b:5c:fd:76:97:c8:7d:6e:f1:b6:99:72:1d:7b:9c:
                    e3:65:0f:da:0b:36:e2:49:b4:1b:6f:ea:f0:50:1e:
                    38:0e:09:39:f4:6e:63:0c:36:5c:ad:49:7c:b0:1f:
                    5a:d4:13:c5:a8:e2:16:c8:89:5c:0b:e4:54:35:83:
                    0a:0d:b8:7d:58:8d:2e:e2:a9:8c:1e:1e:17:1d:a4:
                    fa:4d:9f:31:7a:ca:83:ab:c0:a2:ad:bb:01:39:62:
                    71:29:b8:ce:5d:09:2b:1a:ea:81:2c:a0:c8:b7:7e:
                    c5:cf:31:ed:67:10:70:df:4d:e6:45:dd:52:bc:a0:
                    40:a2:92:10:7e:c4:de:09:7f:55:0f:4a:26:33:f1:
                    5a:fe:02:c1:04:fb:34:f9:eb:92:f1:a8:fd:28:4c:
                    80:13:13:cb:2d:de:95:87:f8:f0:9e:2f:8e:37:3a:
                    93:68:a2:01:da:a8:1f:9b:6f:2e:2a:85:f6:e0:04:
                    79:f9:22:44:04:61:dd:50:ed:ef:c3:90:ba:4f:01:
                    45:ec:8f:3d:e7:37:79:05:a0:2b:02:64:7f:6e:f0:
                    db:58:d6:3b:bd:e6:f3:6b:23:25:a5:f2:6b:48:75:
                    a5:6b:45:33:68:0f:c2:04:c5:64:6f:ce:91:b8:26:
                    fa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:17:1B:C3:74:18:D5:23:99:7A:76:5C:79:AE:23:94:38:3F:75:06
            X509v3 Authority Key Identifier:
                keyid:A4:5A:3D:EE:A2:2A:D7:0F:44:BD:FF:F3:DA:CA:78:7C:FA:B7:3A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:a8:99:d7:f2:f8:66:64:93:71:0e:62:7f:5f:0f:17:db:c2:
         b5:91:c1:ac:5b:70:2e:8a:89:5c:38:58:65:b0:bc:b2:f2:f5:
         57:32:27:51:32:08:bc:fd:03:4e:cd:24:f4:6d:6c:94:9e:2b:
         bb:c0:bb:26:3d:5d:eb:b7:d5:83:47:4a:c1:a9:8f:1b:d4:90:
         80:e5:33:2b:6d:a7:ce:87:b2:9a:2d:70:22:95:33:cb:79:05:
         b7:ed:7b:5a:c2:c5:ac:77:f9:9f:70:1a:75:2e:4f:a2:70:92:
         6b:42:75:32:93:fa:3b:59:f6:8e:8b:bb:c7:33:d8:fe:69:73:
         f5:11:fd:6d:b2:af:79:1e:3b:5d:8c:5b:74:41:dd:c8:cf:07:
         e2:11:c2:fe:14:7c:ee:64:cc:5e:b1:96:73:06:d7:58:47:38:
         2c:6b:c0:ce:fb:9b:47:f7:28:b5:3e:5d:e5:f8:1b:8c:8e:8c:
         75:98:1b:f2:1c:9c:d6:27:1f:8b:e1:5b:91:db:eb:5d:c3:11:
         ab:f9:5a:2d:43:9c:7c:15:e6:a5:7b:e8:0a:2e:ff:b4:81:ae:
         e6:57:dc:8c:b0:51:06:d8:a8:6b:71:80:73:85:c9:52:92:0e:
         10:5f:fd:58:ad:74:f1:02:a0:68:35:9b:4d:60:4a:f3:0c:25:
         35:6f:35:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:14:30 2026 by rpki-client