Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File:                     FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier:          xvpm00FUPNU6hVYfa99PzSFQvnff9UM2jL6Ig3EH7Bs=
Subject key identifier:   D6:30:E1:11:70:D4:37:F1:78:0B:86:10:63:6C:F3:D3:CA:78:29:E9
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer:       /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial:       01A0D8A8D8692A2FFEC8485196EA3E6C1A3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number:          1A01
Signing time:             Fri 25 Sep 2026 13:02:19 +0000
Manifest this update:     Fri 25 Sep 2026 13:02:19 +0000
Manifest next update:     Sat 26 Sep 2026 13:02:19 +0000
Files and hashes:         1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: /lSlm+uvRq0hf4TEMYvj/z0xpJ4Ef9hV5sE2hH+dfcY=)
                          2: LYeebYhXQ4ozTkOxDiNrlwHyTZs.roa (hash: l6hu36oMQogqFFPGyf6pGKkrBP0BChtip7eb8I8e7yY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:a8:d8:69:2a:2f:fe:c8:48:51:96:ea:3e:6c:1a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
        Validity
            Not Before: Sep 25 13:02:19 2026 GMT
            Not After : Sep 26 13:02:19 2026 GMT
        Subject: CN=d630e11170d437f1780b8610636cf3d3ca7829e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:18:88:6b:eb:11:5a:10:e3:54:29:fc:77:
                    b1:99:f5:18:1f:55:c2:3f:5d:6e:81:ba:09:f8:f2:
                    69:51:ff:ea:8d:ce:cd:85:16:0e:4f:e1:56:ff:eb:
                    b8:54:85:ea:6c:85:5b:a6:3f:6a:92:88:cf:45:ff:
                    47:20:71:83:51:70:34:d3:07:4e:b4:20:c0:5b:b2:
                    2b:00:1f:af:70:ce:09:7d:7e:cc:41:cc:2a:f3:e2:
                    09:2d:31:92:1c:34:cf:a6:f7:e6:08:2d:88:b5:d6:
                    19:61:91:7f:7d:a3:f7:4d:f0:41:cc:ed:5f:13:c5:
                    7f:3f:dd:c8:d8:73:41:92:8e:f7:b3:6d:ef:d8:e2:
                    3d:0c:a2:b3:32:37:0c:26:ac:f6:70:4d:94:29:93:
                    a7:5f:a9:62:ff:3d:75:e9:f4:48:04:ac:a6:af:30:
                    09:5f:6e:1c:09:83:bd:6a:21:cd:32:3b:70:e4:2c:
                    cb:17:30:2b:90:a6:d6:20:25:bf:48:60:ee:32:47:
                    84:c9:a0:01:34:fa:d7:00:2b:8f:7d:64:13:1e:2d:
                    5e:98:5f:a4:50:df:e2:40:d1:7e:01:cc:ff:35:b7:
                    61:b5:a5:ee:c8:e8:95:2d:9c:ac:ba:3e:ff:f3:c3:
                    ce:b2:64:eb:04:4b:07:14:c0:c4:a7:66:57:51:4b:
                    20:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:30:E1:11:70:D4:37:F1:78:0B:86:10:63:6C:F3:D3:CA:78:29:E9
            X509v3 Authority Key Identifier:
                keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:42:b2:d1:7d:6a:98:f9:f6:04:1d:b4:64:b3:80:8f:2b:91:
         e8:70:de:cc:4f:c2:ce:73:43:53:db:28:56:b2:13:51:75:32:
         2a:47:e2:3e:ac:90:8b:82:2d:ec:ec:93:fc:56:dc:32:68:ed:
         4d:a3:28:8f:9a:89:7d:73:e3:5e:d0:d1:f3:0b:73:78:dd:54:
         11:de:3e:25:22:9e:a4:d4:8a:79:b9:ec:17:d1:b9:81:cb:71:
         b1:52:b9:86:7d:8e:2f:51:39:45:6d:a2:64:d3:f3:2e:eb:3f:
         80:49:7c:28:d9:a6:82:18:b1:68:5d:8c:de:14:b7:6d:b3:71:
         92:d6:16:1e:59:8e:c3:52:f6:b8:58:27:42:9f:e0:7c:91:b0:
         9e:07:21:2d:6a:53:0f:c3:b7:58:a6:bf:8c:2f:32:eb:69:ee:
         77:ba:31:c5:b9:3c:a6:03:ee:bb:1e:e1:c9:ad:00:51:c2:4c:
         2c:f5:ea:25:08:5a:74:80:8d:8a:93:93:72:2f:49:37:c6:7f:
         35:c0:5e:77:29:96:d6:8c:43:f6:c3:05:3b:4d:f1:12:af:ee:
         f3:0e:c0:c8:14:d2:ee:3b:59:0f:d5:0c:7a:f9:03:82:56:97:
         93:70:1a:13:b9:f6:77:4e:77:ae:79:c3:0c:73:cd:68:ee:7e:
         88:3f:08:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:10:29 2026 by rpki-client