Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
File:                     _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json)
Hash identifier:          aQQxXH7598b59nV7fITSIJuQGifE1SU6MIfAqRWiu7o=
Subject key identifier:   E4:91:F8:AE:2B:26:90:93:64:8C:90:9A:39:B6:71:34:3A:C4:A1:BA
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Certificate issuer:       /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial:       01A10EBA180A8B46BD0901EC9EF37241C4FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
Manifest number:          0593
Signing time:             Tue 06 Oct 2026 01:00:39 +0000
Manifest this update:     Tue 06 Oct 2026 01:00:39 +0000
Manifest next update:     Wed 07 Oct 2026 01:00:39 +0000
Files and hashes:         1: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: 3BrsxUXxLMTs7+y/vMlnBduNxJzac4Rp+qu2Njs31wo=)
                          2: gZN0ubYqOfKHhkHWa3AckTvwRLw.roa (hash: tkY9Znd59Usph4Tm3soVWPi523DI015PBAn20gIz7Bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 23:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0e:ba:18:0a:8b:46:bd:09:01:ec:9e:f3:72:41:c4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
        Validity
            Not Before: Oct  6 01:00:39 2026 GMT
            Not After : Oct  7 01:00:39 2026 GMT
        Subject: CN=e491f8ae2b269093648c909a39b671343ac4a1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:af:d6:f2:79:de:82:28:4b:b5:17:88:d9:
                    6d:1c:16:c1:67:49:e6:8c:73:38:2e:a7:54:49:cc:
                    1d:38:40:66:ae:e9:8c:76:c3:8a:09:f3:ed:1c:a2:
                    87:2e:9b:64:16:f4:cf:0b:b0:3a:5b:e7:b8:5a:64:
                    f3:23:13:b9:f9:a8:93:d6:56:f5:83:db:25:24:5b:
                    b6:3a:19:e5:35:0f:26:ab:e0:d3:15:61:9d:ba:2c:
                    d8:7b:24:47:0a:a1:4a:e7:27:ea:71:5a:b9:a6:76:
                    bf:41:18:ae:67:cd:00:44:6d:8a:68:1e:e3:0a:7f:
                    61:cc:89:b7:53:b0:41:35:06:93:48:e6:73:79:5c:
                    cb:37:8e:dc:94:af:14:4b:74:53:1e:ef:27:0a:41:
                    c2:8f:43:ce:0b:6c:e2:fc:8c:55:e4:54:d1:43:36:
                    45:4a:66:9f:3a:94:4e:0d:e9:51:66:10:b9:92:c8:
                    27:93:cd:c8:d8:34:bb:79:6e:a3:39:02:7a:56:41:
                    c5:08:80:86:76:d4:2d:40:a6:a4:a0:f9:3d:39:01:
                    9f:38:d4:10:72:c3:08:4d:5b:1c:d3:7f:11:57:02:
                    db:3e:df:7b:14:3c:9a:23:cd:bd:68:a8:a9:28:79:
                    84:7a:b8:12:74:96:11:4a:d1:45:1b:9c:ee:10:ee:
                    54:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:91:F8:AE:2B:26:90:93:64:8C:90:9A:39:B6:71:34:3A:C4:A1:BA
            X509v3 Authority Key Identifier:
                keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:92:ee:0b:08:00:20:a0:60:16:93:a1:47:0d:9c:60:ee:6f:
         12:27:7b:c9:e0:f1:e6:0f:25:a0:8e:8d:3a:38:75:72:6f:e1:
         43:48:c9:8f:6e:c2:61:54:9b:47:45:64:da:fc:e3:72:73:5b:
         f7:09:c2:0e:7d:22:97:2d:3a:31:42:99:63:ce:f0:af:6d:ab:
         29:02:84:86:7a:98:ff:2a:ec:7a:e0:07:5e:7b:ba:61:dc:02:
         c2:89:f2:75:e5:41:c0:b4:c2:93:a4:2f:73:d8:0b:a0:08:d1:
         93:ac:1d:b9:cd:80:4f:dc:3e:77:b0:d6:b7:e8:4e:f2:9d:6c:
         12:54:23:16:dc:2a:7f:59:f8:de:b0:0d:b8:f5:4f:8c:45:46:
         af:7c:13:53:98:12:e9:50:b7:15:ee:ec:85:1c:f6:dd:64:0a:
         20:f4:13:11:58:1e:ca:cd:d4:dd:62:78:c7:9a:dd:bc:e7:fb:
         be:ee:41:b8:19:00:c1:e1:ca:82:fd:37:8b:15:60:a0:84:66:
         9c:35:3f:a9:41:68:82:a1:43:32:6e:fb:59:82:2b:c5:28:87:
         13:cc:f5:84:e1:77:45:c9:7a:00:5d:15:e3:7d:ec:0e:7e:56:
         63:08:fb:11:9e:5a:ae:31:5e:e1:62:a2:24:22:3a:0f:0d:4b:
         a9:8a:1f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:18:10 2026 by rpki-client