Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.mft
File:                     FQGDYj_BbcdMt3VGLDbTEBakCsE.mft (raw, json)
Hash identifier:          xAY210nSZznjxUoprtT70MOj52j1VCWmCYhVtPKCvJ4=
Subject key identifier:   72:14:79:0F:48:C0:53:A0:D8:AA:50:BE:39:29:F6:EF:74:B8:33:C9
Authority key identifier: 15:01:83:62:3F:C1:6D:C7:4C:B7:75:46:2C:36:D3:10:16:A4:0A:C1
Certificate issuer:       /CN=150183623fc16dc74cb775462c36d31016a40ac1
Certificate serial:       01A0CB59664DDD9BEB8D49CE925251201C1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.mft
Manifest number:          1368
Signing time:             Tue 22 Sep 2026 23:00:28 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:28 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:28 +0000
Files and hashes:         1: 1VyyA_nanaB--WcEgbj4qcoA_vc.roa (hash: nc2Y79G/MOQXMPy0I/gGsBbk4ytYzhD9yP7D96z+PjQ=)
                          2: FQGDYj_BbcdMt3VGLDbTEBakCsE.crl (hash: fH1NEbIyaxjVMqW0wJPY3jDUEot4epY0/yBflNwofFE=)
                          3: LO7ZgE5h_zRTVrY8YwHrO8pyuY8.roa (hash: +0H2G7nBP/NHypCY6IapoF9Ni2WGpEnTtSkh2iqIRfs=)
                          4: n1eln3hii-6jQCfnsdsPg2OfKhg.asa (hash: cqPBPZ+/o2vFgxaUSr+IFIeKeY6Seqc0MYo8fZ78ufA=)
                          5: qkuq9gqyUCuznlu7wOqY8ZLpiHQ.asa (hash: NiJTqxcDHhWufKu4Afy5893tFxMeFddy6ZHVK3EnuHY=)
                          6: sIprs8LVIcyiMcz81LY2NhiKYts.roa (hash: mjYijXz3DtiSejRuyhAqi38hswzDQ1HzzVW4Zmiej7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:66:4d:dd:9b:eb:8d:49:ce:92:52:51:20:1c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=150183623fc16dc74cb775462c36d31016a40ac1
        Validity
            Not Before: Sep 22 23:00:28 2026 GMT
            Not After : Sep 23 23:00:28 2026 GMT
        Subject: CN=7214790f48c053a0d8aa50be3929f6ef74b833c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0a:b9:e5:08:9c:00:80:0d:b5:65:d1:07:a8:
                    42:48:63:c2:56:08:b8:0d:d5:40:6f:c8:fd:e6:a5:
                    5b:9a:08:ee:56:28:48:76:70:8c:51:54:12:24:d2:
                    d1:12:ba:5e:fa:16:a7:93:67:a2:b6:ab:5e:a1:d7:
                    29:8d:95:e9:ee:ff:b9:7f:c0:67:0d:60:6d:82:c6:
                    a2:84:12:3d:f4:21:57:4a:b8:31:2f:51:b3:74:4b:
                    8d:46:fb:bd:30:a8:29:3c:7f:7e:26:14:0e:7b:f3:
                    4e:fa:1d:43:83:6c:ba:d8:2e:7e:be:44:9c:e4:1a:
                    ce:41:c6:6d:31:d9:41:9b:d6:b5:56:a9:3b:1a:45:
                    75:e4:d1:59:7d:dd:a9:60:1d:2f:17:95:94:24:a9:
                    48:e1:89:36:fa:25:f5:8c:a7:e5:fd:f2:24:bc:c9:
                    84:12:a1:0f:4f:03:20:bb:28:5c:5f:35:da:b7:71:
                    b0:23:e1:b7:f6:63:a8:43:1a:2d:b5:21:7f:1f:75:
                    a1:ba:4c:45:26:40:01:e1:25:df:c1:f1:4d:41:42:
                    16:7b:95:fc:0c:c7:cf:87:ab:2e:8b:62:92:29:31:
                    70:29:1e:c6:62:56:56:92:cb:02:b3:7a:12:4f:1f:
                    80:bf:e3:19:66:79:6f:5d:31:9d:36:6c:e5:36:22:
                    2d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:14:79:0F:48:C0:53:A0:D8:AA:50:BE:39:29:F6:EF:74:B8:33:C9
            X509v3 Authority Key Identifier:
                keyid:15:01:83:62:3F:C1:6D:C7:4C:B7:75:46:2C:36:D3:10:16:A4:0A:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:82:af:ba:bc:96:2b:ad:f0:84:c5:c4:a8:63:1b:e7:7a:2e:
         f0:c6:0d:92:f9:50:a7:58:4b:bc:f7:56:15:4d:48:4c:5d:8b:
         7e:40:8e:6c:dc:2a:7c:ce:2a:9c:4a:4c:bb:0f:92:0b:8e:23:
         2b:ad:48:b3:b0:93:68:2e:69:df:16:f5:77:61:da:67:60:13:
         f5:1c:aa:57:dc:e7:c6:ca:91:91:08:b5:64:0a:08:d7:f4:31:
         e7:e6:32:66:d6:37:1d:98:84:a6:1b:23:90:38:de:f1:49:4c:
         47:24:48:16:f2:f7:ef:2c:01:a0:e4:fb:03:46:6a:c7:57:40:
         c1:bd:dd:ca:94:68:55:41:8a:a3:cd:68:33:f7:61:9a:f1:0f:
         ab:14:23:36:24:ba:1c:e3:9d:9c:55:14:9f:5c:60:4a:ea:88:
         23:a2:6e:d7:f0:8b:54:9b:dc:74:22:02:78:f9:c8:80:6a:c3:
         0a:d3:ee:cd:1e:27:39:2e:48:1b:48:26:1b:1c:8a:05:52:58:
         04:2c:dc:28:66:4f:cc:44:69:ad:2b:9e:b4:85:c1:29:3e:4a:
         00:25:ff:ff:0c:4c:94:1d:11:1b:be:9f:d6:4a:ff:c9:83:25:
         8d:59:92:4e:a5:02:0e:ab:7e:7f:97:28:68:3e:56:ae:7f:1c:
         4f:14:67:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:23:16 2026 by rpki-client