Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File:                     FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier:          +xurO2wWU+L3GOumrBq9U4hhsFIoRGkV+N1nU50BRMw=
Subject key identifier:   40:46:7D:F9:A3:25:8B:F3:80:1A:19:80:9C:1B:36:81:BD:AB:1D:FC
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer:       /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial:       01A0CE91566B042A20057B952CE5361F89A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number:          0AC7
Signing time:             Wed 23 Sep 2026 14:00:26 +0000
Manifest this update:     Wed 23 Sep 2026 14:00:26 +0000
Manifest next update:     Thu 24 Sep 2026 14:00:26 +0000
Files and hashes:         1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: +TacuXlm50zqTrnA2/3WVz3A3Iw5KmcAOrIMu48bi7Y=)
                          2: H89M_EzTc8StQKIth4lnEHjKKN0.roa (hash: IDhPLp9HDBcx8Hw7u+pzfwTPs8upVVlGQyX+6R34mN0=)
                          3: Kk4HsfGd30im4loLCXTsCFiytPU.roa (hash: oKLzpVpeAoy3QzeCxsxeoWZkV7KJYmzZC8B43Ea48cY=)
                          4: ekGCZNDc9ZOt8-ot2-lgD0_VB3o.roa (hash: FwlalKxI5Tx7qsPfQIKwmFy4fzG691p8g1JAVi3TkPw=)
                          5: mNfJbT_LAkQ7oHjPzi5gOUmJf2k.roa (hash: crQWmizM31tyk+JqRaLmmMrPZUf827PwrlcRDlFZANc=)
                          6: semdbfvd3TfnGahfQ-_MnPsyXVY.roa (hash: K9glb2D2qochPPxOstvTUytekMPlr9ObTuDnHNr8nXk=)
                          7: tDI9go-g4CqghW05S71dg1-pcIU.roa (hash: ziudTSLoj2qHvEkRBq06kMjV08QbQZjdB8rDgu7yyDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:91:56:6b:04:2a:20:05:7b:95:2c:e5:36:1f:89:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
        Validity
            Not Before: Sep 23 14:00:26 2026 GMT
            Not After : Sep 24 14:00:26 2026 GMT
        Subject: CN=40467df9a3258bf3801a19809c1b3681bdab1dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:de:20:b0:5a:cb:5c:cb:01:a5:ea:d9:33:
                    05:ef:83:96:e9:ac:b3:77:b9:c4:27:8f:8f:5c:7f:
                    c7:53:d9:4b:85:e3:11:65:23:65:7d:50:b8:78:5b:
                    05:75:a7:ae:ae:73:a4:42:a9:ee:76:f0:dd:a2:cc:
                    b4:2d:f7:d5:0a:e1:00:d1:35:a2:f4:26:07:90:55:
                    07:86:99:d3:29:8d:eb:0f:31:18:f4:81:ad:d2:5f:
                    dd:cf:fc:f8:3e:ca:0f:74:b3:ba:46:ed:f7:85:11:
                    28:3e:6d:35:e8:59:d6:85:10:84:48:a1:95:dd:97:
                    de:7f:bb:6e:3e:2a:63:12:72:09:27:d3:41:01:fd:
                    cc:56:f8:78:11:a1:24:cf:52:fb:a0:9b:27:10:c2:
                    4d:44:09:de:b0:3a:73:26:9a:3a:23:b2:c7:06:fb:
                    c2:0e:8b:8a:08:14:fb:7f:6d:bc:48:a2:31:d6:c9:
                    36:78:e4:75:58:ab:24:b1:e9:1c:9d:8f:fc:05:7e:
                    75:87:07:3a:c6:fd:f5:ec:8d:ee:46:ca:56:09:e2:
                    a4:b5:df:1b:10:12:6d:57:a5:06:28:d4:cb:41:05:
                    76:e5:91:4a:95:2a:42:c4:95:90:0d:07:89:b5:4b:
                    89:e2:54:43:c3:fa:39:fd:65:4c:e2:43:6e:37:36:
                    ac:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:46:7D:F9:A3:25:8B:F3:80:1A:19:80:9C:1B:36:81:BD:AB:1D:FC
            X509v3 Authority Key Identifier:
                keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:fa:d6:4a:80:89:c8:4d:78:f4:27:b2:37:c9:49:67:bc:9b:
         84:a0:f4:af:c4:85:fd:e6:4b:10:f4:82:25:06:44:33:a3:65:
         22:bb:b7:09:9f:c3:96:54:fa:de:99:f7:98:d1:5f:52:df:72:
         97:55:e0:c7:e7:a6:5d:07:09:08:ae:e9:6b:ae:2b:e3:a2:ea:
         86:55:92:8d:86:3c:42:41:e0:54:73:99:fa:97:ba:0b:18:c1:
         ad:83:d8:fc:ff:f7:21:55:d4:fe:ea:e6:94:f1:a6:3e:c5:ba:
         91:27:e6:db:1e:c3:e5:38:fe:62:4a:df:8c:85:f3:2d:68:c8:
         fc:e2:67:ba:3c:56:69:ac:59:11:82:20:5d:0b:72:c0:6c:90:
         e3:83:64:19:72:b4:e3:ec:35:92:eb:42:11:b1:ac:b7:29:ac:
         e9:4d:32:b1:44:2e:9d:94:8a:2f:0c:d2:55:2d:21:c8:df:00:
         1a:71:bb:5f:6f:c7:f4:5a:b8:4c:18:ed:89:ff:5c:d8:78:e1:
         80:89:1c:7c:4e:96:fa:28:d0:e7:0b:df:9a:11:0d:85:a3:1a:
         66:8d:1b:b3:6c:d4:a4:e2:e1:93:d6:db:04:4a:a6:85:89:c1:
         46:4d:27:3a:86:07:46:85:dd:7b:d5:04:f2:52:a5:4a:27:21:
         53:c4:74:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:09:02 2026 by rpki-client