Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
File:                     fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft (raw, json)
Hash identifier:          XFXpBGD5wUorePXcyuuC24h9AEqQutW1OJu83COM2T4=
Subject key identifier:   41:F8:CB:AD:04:46:4A:AA:CA:3F:D7:18:03:56:8A:26:C8:B1:F0:DA
Authority key identifier: 7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9
Certificate issuer:       /CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
Certificate serial:       01A0CFA3DC15D3DBEF7218B0366E5FC02C12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
Manifest number:          0293
Signing time:             Wed 23 Sep 2026 19:00:17 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:17 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:17 +0000
Files and hashes:         1: F-MQ4_q16IIp-IO6Aj9rbXh6FAg.roa (hash: O9ss77MomSSt907FsLWzdFo2wbDsc9Vaw/c7NY0bUPI=)
                          2: Lv7nZi0Ca4VD-5H2MSb5yq4Mxf8.roa (hash: kAeb16gDeMymOsy5vSRtUWw4R89UmFmfcQyy8hoRkQs=)
                          3: a6ILxs7AfRiz-iaAF-l64QD3g3c.asa (hash: 7o07rC7UvT5It+u+RtYxdmApc9D4ts/fYHhAKB3o4vs=)
                          4: fl-aO37XXQmTdf9bFQvR4sML3I8.asa (hash: 095zE2TxY8ZX1/zGISHc5yzKNCHD1HSK1z5BPh0SZNU=)
                          5: fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl (hash: RuxTuMXJ8ZYtQkybsrzyaa7CBQMuWFkuxbu4LDUrWHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a3:dc:15:d3:db:ef:72:18:b0:36:6e:5f:c0:2c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
        Validity
            Not Before: Sep 23 19:00:17 2026 GMT
            Not After : Sep 24 19:00:17 2026 GMT
        Subject: CN=41f8cbad04464aaaca3fd71803568a26c8b1f0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:55:07:4e:72:23:4c:f7:a2:19:63:6e:3c:67:
                    26:df:d1:3e:6e:70:1e:c8:ab:ad:24:6b:74:8f:ab:
                    7c:87:c4:8d:18:cb:fa:94:30:11:c7:d4:21:f0:60:
                    05:f2:eb:3f:ee:f6:9a:60:15:52:bf:b6:2b:9c:a5:
                    34:70:69:bc:05:ad:fd:85:1e:3a:fa:79:13:d8:b4:
                    16:07:c4:b5:a5:e7:54:00:d5:84:7d:0b:6b:ec:3f:
                    28:fa:0c:f9:3f:9b:6b:29:ea:1b:5d:6a:07:e0:e7:
                    7d:4b:4c:23:bd:df:ba:5d:76:2a:43:10:01:c4:15:
                    f2:d2:af:c2:1c:2c:b0:ce:eb:fe:9f:20:1e:60:4f:
                    8c:55:e6:c3:57:77:22:c5:cd:29:66:70:84:5b:bc:
                    0b:c3:45:af:54:24:c9:d3:c6:08:14:e1:e2:77:8c:
                    56:e9:28:b8:ee:6d:24:c3:ee:20:41:d1:82:15:59:
                    89:53:42:48:ca:13:21:14:56:b6:dd:f0:62:51:5c:
                    59:6b:3b:af:9f:8a:73:e2:8d:18:00:a6:b8:7c:ba:
                    7d:68:1e:a2:18:72:64:c2:97:b0:66:06:db:ea:21:
                    3c:4b:31:1e:3b:d2:ff:de:53:b2:67:63:c1:71:64:
                    5b:43:85:22:77:39:05:14:0e:df:c4:7a:7d:ce:94:
                    ca:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F8:CB:AD:04:46:4A:AA:CA:3F:D7:18:03:56:8A:26:C8:B1:F0:DA
            X509v3 Authority Key Identifier:
                keyid:7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b8:05:42:70:12:7b:4e:35:a0:a1:fc:42:12:a3:45:41:76:
         05:96:7e:6f:0c:9c:53:41:db:39:b1:2d:a7:e2:c3:dc:30:d6:
         11:af:5c:7b:54:8e:eb:c4:0a:fb:95:57:99:52:b4:5a:c5:cc:
         c7:c9:c8:29:c0:d9:04:96:37:6f:01:cd:7b:d9:e8:83:6a:28:
         eb:a7:de:32:ad:b2:42:b3:b4:2f:a5:48:89:4a:ca:8f:fd:d8:
         6e:0d:89:27:f1:33:d4:69:96:84:f7:50:26:f3:3e:86:59:91:
         87:22:1f:b1:cb:4c:5b:1d:a3:73:85:8f:56:32:d3:0c:fe:00:
         71:d6:03:a2:ff:ca:d9:05:07:7c:79:38:ee:47:3f:a8:2d:87:
         1a:13:78:61:3e:01:6f:7d:43:a0:d1:0e:d9:33:cf:9f:a7:08:
         2f:ef:e4:78:24:a3:b8:da:8a:22:a4:0b:44:03:04:c5:34:41:
         23:2d:a3:44:a2:e0:f6:5f:fc:6f:a3:53:0b:fb:22:66:36:cc:
         be:d7:58:b6:34:a7:96:45:24:6c:84:2d:d7:12:35:4b:96:8b:
         b5:df:8e:b9:21:41:2e:ed:5f:d4:ff:a7:12:d0:0b:1f:3f:52:
         e6:4b:8b:32:a6:bf:38:bc:f1:df:57:c6:f4:25:36:f7:45:68:
         56:e0:85:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:05:55 2026 by rpki-client