Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
File:                     mfa_Doxu_Er_r3JiiEacr_QX3mY.mft (raw, json)
Hash identifier:          iF4UrfI0shIez7sroB3f8gO+qeJIjVR5dp+JgZRd9pw=
Subject key identifier:   EA:0C:F3:A1:E2:C9:31:D5:21:28:2A:72:93:81:AF:15:2F:AF:6E:6E
Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
Certificate issuer:       /CN=99f6bf0e8c6efc4affaf726288469caff417de66
Certificate serial:       01A0D45DCD7D04389BC0A4BDBDA9DEA72395
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
Manifest number:          0325
Signing time:             Thu 24 Sep 2026 17:01:52 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:52 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:52 +0000
Files and hashes:         1: TB2o93JdI3_5bR6pFMnn0o3Vigs.asa (hash: tU5Nk49tozCWJHFaeKvDt9q8L3Ki/m4tjnKrcr2Wp1E=)
                          2: mfa_Doxu_Er_r3JiiEacr_QX3mY.crl (hash: osgFYfQqtweLmSHmxdEFME/PBFVnwYQDba4JESr35Eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:cd:7d:04:38:9b:c0:a4:bd:bd:a9:de:a7:23:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66
        Validity
            Not Before: Sep 24 17:01:52 2026 GMT
            Not After : Sep 25 17:01:52 2026 GMT
        Subject: CN=ea0cf3a1e2c931d521282a729381af152faf6e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:01:30:5e:61:67:c8:d7:7d:55:99:96:0a:ce:
                    22:2d:6d:13:f1:cd:38:30:e3:15:1d:97:55:05:fd:
                    ff:f5:f4:ef:3c:10:5b:22:a0:3e:9b:89:4f:f8:85:
                    d3:28:b7:c7:36:9e:bd:ec:2b:d2:95:43:b0:a3:77:
                    54:af:c9:b2:5f:26:f9:e2:e4:af:15:24:97:7c:60:
                    21:5d:de:6f:7e:a7:e8:09:f6:4c:df:f4:10:06:de:
                    b1:eb:3e:11:c5:e3:71:e4:be:96:b3:af:ad:2c:4f:
                    b9:47:46:c3:87:eb:75:99:89:3c:a6:af:2d:1a:ab:
                    f7:7c:0b:2a:f8:78:61:e1:1e:86:16:bd:84:f5:46:
                    d3:96:f2:21:ea:7a:7d:8b:9e:16:47:a3:94:be:4e:
                    95:9c:f5:f0:91:1f:7b:89:1c:12:cd:7f:38:5c:12:
                    64:67:fe:99:13:ca:68:79:fc:30:7d:6b:a7:f2:d7:
                    dd:ca:ed:60:d2:0e:f2:0e:e9:c3:24:96:b0:07:b8:
                    4b:bc:dc:de:38:1c:93:2a:c0:98:8e:c4:76:28:09:
                    ed:64:07:3c:30:b9:6d:5b:0c:11:e9:27:63:80:c0:
                    02:cc:0f:06:75:0a:c7:14:e6:f2:8d:f6:d0:24:ab:
                    87:e1:75:24:e0:10:58:95:d8:f9:17:9d:8c:e8:92:
                    d4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0C:F3:A1:E2:C9:31:D5:21:28:2A:72:93:81:AF:15:2F:AF:6E:6E
            X509v3 Authority Key Identifier:
                keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6f:37:02:91:7a:b3:2e:9f:15:bb:4a:b1:06:c7:57:d7:ec:
         3a:77:68:68:0a:3e:30:ab:94:37:8d:d8:a4:cd:a5:b5:f5:50:
         9e:57:5b:12:80:e4:50:bc:f6:df:89:9f:df:6a:a8:07:33:31:
         67:b9:e9:98:98:c8:31:c3:77:9c:c1:bf:7f:35:3e:12:4d:6c:
         28:f7:2a:51:74:87:82:55:8f:95:44:97:6b:04:4a:74:2f:70:
         48:2f:e3:2d:4e:ec:9d:37:cb:e2:c6:af:19:e3:53:39:94:8d:
         57:56:03:3a:30:52:be:37:2e:ed:eb:0c:58:75:34:3f:76:8e:
         52:bb:ea:6f:4a:5a:61:53:0f:51:89:0b:b6:2d:c6:b7:d2:85:
         d3:7a:52:dc:3b:b8:2c:1c:cf:a6:ec:54:3a:ba:9e:43:2a:5b:
         c3:92:63:ad:9d:62:0e:c7:3d:d7:a0:54:c3:f5:00:d6:c2:51:
         4f:d0:96:48:db:93:1d:c9:20:96:af:59:b2:a5:12:38:ba:8e:
         c5:4c:e5:ef:ec:b5:5b:28:cf:52:43:9c:4c:f6:86:78:a0:d1:
         ba:75:8e:86:62:cd:09:ba:e1:ce:88:c1:49:28:6e:c2:e2:b8:
         31:e9:2c:9a:20:15:a6:1a:7d:d5:a1:3d:13:70:c1:ad:7c:2b:
         c7:94:e8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:54:28 2026 by rpki-client