Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
File:                     Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft (raw, json)
Hash identifier:          a1gkKF6SEnmPWJ/mtWXlZDg4QaWsNLaQTI8jbJrt/gI=
Subject key identifier:   C4:38:79:61:97:3E:81:9E:C7:D8:D1:A4:D6:3E:1A:1D:AA:2C:48:E0
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Certificate issuer:       /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial:       01A0FCEBE4994A8FF19B3CB4FE66E1ECB797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
Manifest number:          1A90
Signing time:             Fri 02 Oct 2026 14:01:52 +0000
Manifest this update:     Fri 02 Oct 2026 14:01:52 +0000
Manifest next update:     Sat 03 Oct 2026 14:01:52 +0000
Files and hashes:         1: 9SI52VgDBaEJ9HFrw-u80rGAzb0.roa (hash: Wz599kBFdu7Ri93DGJbDH1V1UHfOg0eqQwOYmctUo4M=)
                          2: Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl (hash: TbqAlmjhChawAOxwsL0VXYu592XtSX96xCqaaZc+Dx4=)
                          3: HiZTjeXxPL5UIfjY96XqMWqTBQQ.roa (hash: p6Iat8BE8A2SkYe418gBt7rVZPajqInsyq2ODAIMOIM=)
                          4: JP3ZqqPVjIUPq-e1w5zTwtk5l-c.roa (hash: ncOs8+yJ75qvDSJg0W6CwoVuPbowDw3Ob5yRHAaZTeg=)
                          5: MgNPqmfdLw3dFFQvzMAsH6Gco_c.roa (hash: 3dPNmqEImz9izlskaSl23VXdEgJ+dMdOOKT1JBG1FlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 14:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fc:eb:e4:99:4a:8f:f1:9b:3c:b4:fe:66:e1:ec:b7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
        Validity
            Not Before: Oct  2 14:01:52 2026 GMT
            Not After : Oct  3 14:01:52 2026 GMT
        Subject: CN=c4387961973e819ec7d8d1a4d63e1a1daa2c48e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ef:2c:9f:83:85:ff:bd:0f:37:3f:fd:5f:c7:
                    a2:d0:e0:86:f2:09:1c:b8:9c:c4:cb:63:96:97:fb:
                    15:96:78:a2:7a:84:0c:41:2b:51:f3:05:9c:aa:66:
                    45:eb:fd:df:6a:d7:97:e4:15:9e:27:3d:ce:72:1a:
                    e3:a3:0c:9f:80:4d:b0:05:01:67:38:bb:9a:84:2b:
                    bf:43:e4:be:92:da:dc:9f:e1:a4:98:04:7f:b8:52:
                    da:88:e9:87:84:3b:2d:ba:16:4d:15:51:72:09:28:
                    4a:81:7f:00:fb:cb:57:70:b6:31:c7:dc:7f:c3:c9:
                    ce:0c:7d:1b:dc:cd:3f:5e:1e:12:2d:71:da:c0:ee:
                    c4:aa:4c:1e:f4:a5:69:7a:8f:f0:4c:3f:ee:51:44:
                    15:3e:86:46:c0:f7:7b:be:59:98:0e:9f:5a:6a:fb:
                    3b:a4:fd:76:c8:af:6f:04:d3:bd:4f:de:8e:e3:e5:
                    31:2c:55:dd:3b:41:86:0a:35:5f:cf:c4:1f:7b:7f:
                    af:51:4b:18:e0:7a:44:0c:dd:e1:8d:4a:6d:d9:32:
                    b1:d9:5d:5f:6e:30:31:3d:99:da:10:d8:b8:0a:e5:
                    c7:60:90:be:4d:ab:b9:89:e3:b1:7c:e1:25:93:60:
                    b6:0a:a6:64:b2:61:68:f5:ea:bb:c5:ef:82:e2:a0:
                    b0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:38:79:61:97:3E:81:9E:C7:D8:D1:A4:D6:3E:1A:1D:AA:2C:48:E0
            X509v3 Authority Key Identifier:
                keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:7d:f1:59:16:80:82:9e:cc:0d:53:16:4a:18:03:9c:e8:b9:
         7a:d4:ba:51:46:9f:41:2b:ca:7d:2c:99:65:6f:cc:f8:01:04:
         46:77:09:1b:a4:4b:e4:2e:c2:51:32:df:5c:f7:84:76:71:58:
         78:30:ed:ef:8b:68:25:e9:51:e0:80:9f:51:9d:ce:8e:b9:cf:
         99:99:e6:79:da:f4:2a:9a:0e:36:22:96:27:d7:a9:f9:6e:a1:
         ff:0e:84:27:b2:31:e8:06:d2:b9:84:24:52:5e:41:b2:78:a5:
         0c:d7:8d:a8:ec:6d:41:9c:08:68:22:6d:17:18:5c:73:35:1f:
         71:6a:1f:13:a4:73:9c:70:cf:ac:43:80:b6:06:16:71:a0:e4:
         48:6c:fc:fb:c8:54:7a:de:46:d3:2a:48:8d:bc:aa:29:28:2f:
         5e:a5:23:27:4b:7c:bb:03:92:fe:9a:db:40:79:28:34:ee:6a:
         b6:c7:28:46:0d:e3:86:69:b2:95:b4:c3:e0:42:8a:1c:86:4b:
         c4:75:6e:f4:53:7e:37:5e:84:90:1a:81:54:eb:3f:b6:35:16:
         de:7e:9b:50:d7:dc:60:52:99:a9:89:1d:38:75:98:fe:a9:84:
         b6:f9:0f:14:23:cd:82:f4:b7:4c:1f:e5:39:b9:57:44:d0:64:
         a5:7a:b8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:18:35 2026 by rpki-client