Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
File:                     FqThByM1EnDNjJzGSwlkiOZOIw4.mft (raw, json)
Hash identifier:          vvuQcPJ46OY0LwBAZ2MdRsuOehZkYuq4wdfcPKmuyrs=
Subject key identifier:   33:49:DA:7D:46:ED:E4:A5:CC:7F:58:38:E6:D5:97:1F:46:00:C0:6F
Authority key identifier: 16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
Certificate issuer:       /CN=16a4e10723351270cd8c9cc64b096488e64e230e
Certificate serial:       01A0EA4068FA963D45980994F54C0E0D39CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
Manifest number:          0BEA
Signing time:             Mon 28 Sep 2026 23:01:24 +0000
Manifest this update:     Mon 28 Sep 2026 23:01:24 +0000
Manifest next update:     Tue 29 Sep 2026 23:01:24 +0000
Files and hashes:         1: 1-_ZqwD1tkyihP0p_xOpgCamFwYg.roa (hash: F81sM0OCtB2ODGT9/S6GdyEh6LEPRfN0s7OuOK9nmhI=)
                          2: FqThByM1EnDNjJzGSwlkiOZOIw4.crl (hash: orVxf8Z6NvOvlFY2Cz5NqDHSEnSfupUk8kJKb3RC7jg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:40:68:fa:96:3d:45:98:09:94:f5:4c:0e:0d:39:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a4e10723351270cd8c9cc64b096488e64e230e
        Validity
            Not Before: Sep 28 23:01:24 2026 GMT
            Not After : Sep 29 23:01:24 2026 GMT
        Subject: CN=3349da7d46ede4a5cc7f5838e6d5971f4600c06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:74:cf:18:6a:22:22:17:a0:83:37:0e:a8:
                    f1:76:70:9e:10:55:7c:32:4b:72:8b:0e:7a:15:4a:
                    f0:5d:30:80:20:30:0b:77:87:1d:bb:e9:69:92:51:
                    7d:2a:ec:67:35:77:c3:c7:63:f9:fc:d3:33:5b:d1:
                    95:1d:52:9d:6c:e1:88:a7:9f:34:56:af:af:1c:f4:
                    dd:6c:fe:6c:88:84:3b:9f:86:3d:88:1b:74:12:35:
                    40:7a:84:1c:e6:10:1d:d8:31:c1:64:d9:ca:73:fa:
                    e1:9e:bb:2e:ea:6d:4c:bf:b7:64:7b:52:4c:2c:1d:
                    bd:ee:6c:5a:3c:d0:82:6a:f8:04:1c:2a:91:51:71:
                    04:a8:26:fb:b1:dd:7c:cb:8a:46:81:5d:21:a2:77:
                    08:75:fd:c8:ba:70:bc:ce:dc:43:39:68:3f:14:e3:
                    46:39:ee:6d:a1:6b:29:ff:41:3a:89:d1:7a:f8:ce:
                    c8:9f:93:57:db:aa:d0:61:6b:01:fa:fc:d9:e7:ef:
                    3c:9b:7b:ab:51:33:69:ee:d0:06:e6:e7:47:9b:f1:
                    c7:64:b4:85:38:7c:e0:52:c7:ae:1e:96:f5:b2:69:
                    73:b3:00:2b:08:da:59:ba:61:d5:69:f3:71:63:e3:
                    d0:be:3b:db:3b:57:0a:58:43:c7:57:50:45:88:ee:
                    41:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:49:DA:7D:46:ED:E4:A5:CC:7F:58:38:E6:D5:97:1F:46:00:C0:6F
            X509v3 Authority Key Identifier:
                keyid:16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:2f:5d:76:a5:b7:45:bb:74:8d:c9:60:90:09:e3:0e:92:70:
         29:21:02:d8:14:2a:bc:c2:92:3a:47:aa:90:a2:59:b0:76:5c:
         a7:91:a7:0b:e6:c3:c7:d4:c9:8e:9b:2d:a1:0e:19:eb:76:5f:
         ce:36:ad:e0:80:ad:bd:41:f3:4e:27:b7:7a:d3:ab:0f:14:57:
         7a:69:cc:c0:cb:9b:e3:b1:36:30:c3:a3:7b:a7:9d:17:b4:4c:
         76:30:73:5e:d4:3f:08:70:6e:34:c4:84:ab:ad:02:a0:74:fc:
         4c:1b:b1:89:5a:48:3e:9a:03:89:7c:c8:49:08:7f:5c:fa:ef:
         b0:83:55:9e:74:fa:79:e4:dc:b4:93:1a:76:aa:e7:ac:51:26:
         ce:44:5e:6f:d7:5e:66:d7:aa:f5:96:81:38:1f:2f:11:d4:3a:
         99:ba:58:d2:25:16:08:be:02:65:b9:ff:7b:10:a0:15:de:85:
         4f:03:ef:a7:a5:9d:cc:a4:b1:39:61:4b:21:19:31:db:30:3c:
         cb:f0:8d:e5:69:48:0c:3f:a0:93:b9:b6:9c:0f:fb:bf:7b:72:
         c8:60:8f:85:c7:ab:a0:bc:5e:e9:b5:ff:b4:6a:e8:9a:d4:a2:
         97:35:c3:fe:85:eb:5c:71:5e:6e:6a:98:91:f5:ea:a0:9c:e1:
         66:0d:ae:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:57:54 2026 by rpki-client