Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
File:                     FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft (raw, json)
Hash identifier:          FqqAZyOrl78sLeu5ne7TW/jsrWpKCPYMuEnHakpby5M=
Subject key identifier:   4A:48:C6:A8:31:B3:3D:26:40:17:10:CA:F3:2E:22:DB:75:64:FD:2A
Authority key identifier: 14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
Certificate issuer:       /CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Certificate serial:       01A0D4941555A1D742CD6E5BBD425EA35AAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
Manifest number:          0D8F
Signing time:             Thu 24 Sep 2026 18:01:09 +0000
Manifest this update:     Thu 24 Sep 2026 18:01:09 +0000
Manifest next update:     Fri 25 Sep 2026 18:01:09 +0000
Files and hashes:         1: Afr0mV20pbPHdZnpWYatELuCEvo.asa (hash: owfqUhE14A6UilAazSw974fh+e2NlWVeQw7fmwItRO4=)
                          2: FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl (hash: CdBypqSLFtoMW1Ewq3lYUXkWVE2j0vPYH46NRADmB5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:94:15:55:a1:d7:42:cd:6e:5b:bd:42:5e:a3:5a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
        Validity
            Not Before: Sep 24 18:01:09 2026 GMT
            Not After : Sep 25 18:01:09 2026 GMT
        Subject: CN=4a48c6a831b33d26401710caf32e22db7564fd2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:dc:c0:8c:85:12:66:5e:21:fe:e8:16:3c:
                    ba:81:50:de:f1:8d:ac:48:58:dd:f6:97:83:3a:ae:
                    c2:d7:4e:da:63:d0:ba:55:ad:9d:41:12:12:25:36:
                    0e:30:b1:f4:3e:19:01:0f:23:f2:a8:fa:80:4c:86:
                    ac:55:2c:38:34:e3:c4:5e:f0:2d:4c:cb:e4:34:ef:
                    2d:76:6c:98:fe:fb:e9:c6:42:4e:dd:36:dd:5d:11:
                    3f:e5:26:ad:72:3c:32:bd:c0:18:6b:a0:97:f4:97:
                    ac:92:1d:03:de:be:ff:9e:5e:25:14:81:df:1a:ec:
                    57:dd:a7:be:0c:32:a6:6a:10:40:79:73:d1:6a:9d:
                    93:8c:95:a8:a8:bf:1d:53:ba:bf:12:54:bd:0a:8b:
                    9d:7c:89:e2:6a:65:16:05:80:71:d6:da:68:f2:87:
                    52:d7:ce:83:70:5b:0a:a9:bc:b9:d3:a6:72:9f:38:
                    74:c4:b3:7c:f6:ed:2b:1e:98:10:44:14:38:ed:84:
                    b7:89:d0:8a:8a:19:d9:06:7e:7b:81:77:9c:c7:ad:
                    91:94:63:cb:40:2e:93:07:7e:23:ee:c6:7a:3b:5c:
                    94:62:53:0e:a1:6e:e3:99:70:34:78:9d:37:43:d7:
                    b0:e2:0f:b1:7e:f8:87:53:1d:66:62:10:96:80:33:
                    e9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:48:C6:A8:31:B3:3D:26:40:17:10:CA:F3:2E:22:DB:75:64:FD:2A
            X509v3 Authority Key Identifier:
                keyid:14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d4:ee:55:0e:7e:6b:81:be:9b:3c:d3:73:2d:7c:3a:0c:ab:
         64:3b:34:2a:18:14:3a:e8:f5:44:a8:79:78:f8:c0:6b:51:c7:
         21:ac:53:5b:28:43:49:f7:13:10:15:ca:85:97:4f:52:a9:e9:
         6a:ed:8d:4a:b1:04:cd:99:4e:ee:60:31:6d:15:f5:a1:86:8d:
         31:54:47:5e:d8:fb:7e:7d:0c:e8:3d:8a:5b:7f:cd:93:64:61:
         6e:2c:6b:5f:43:3c:aa:b7:b7:4b:14:7e:27:f5:cd:8c:5c:a6:
         4f:b2:df:86:b5:95:a7:f9:f2:b2:e7:7d:fd:01:38:80:ca:43:
         68:bb:43:16:b5:50:ae:c2:83:50:b8:6c:f8:54:96:af:fa:f4:
         8f:7e:5e:af:ad:ec:f0:d7:dd:2c:3b:dd:dd:96:1d:b4:4e:84:
         6f:5b:cb:2d:dc:fd:d0:4e:59:ee:80:e9:0b:b1:20:c7:57:6a:
         9c:59:83:43:b4:89:ef:d5:b3:fb:5c:e7:f2:15:23:4e:41:c0:
         40:5e:05:a6:d0:0e:07:39:23:57:94:83:1c:3a:92:f5:fa:5b:
         65:46:90:6a:c2:40:97:05:ea:79:4a:80:15:4f:93:d7:82:ef:
         a0:60:38:cf:e9:98:cb:ef:f3:e9:d2:d8:2c:89:70:55:85:60:
         a0:06:40:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:19:57 2026 by rpki-client