Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File:                     fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier:          ddFE9v7iy2pMQJz4K6zy7eZ8eGBgfE+EqigP9ciQ3SA=
Subject key identifier:   EE:AB:A0:FE:7D:EE:5E:75:CF:B9:DA:1D:CA:30:82:5E:F0:85:EE:BD
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer:       /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial:       01A0D94CDBDCCC12B357F99E3A40C3D631C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number:          18AC
Signing time:             Fri 25 Sep 2026 16:01:27 +0000
Manifest this update:     Fri 25 Sep 2026 16:01:27 +0000
Manifest next update:     Sat 26 Sep 2026 16:01:27 +0000
Files and hashes:         1: 6rNJQsn9nenf7gQdwKGULkmO48g.roa (hash: 07pBJi7Nc/k7+K1BPHdbPiHNkGiQWcczdjGOzLq8Sbk=)
                          2: 7c37mQO9hber9Y9a4WDKVYTKyGs.roa (hash: h/wnhDSGEGx3npO9CQ/X4FjS1+UA0bB6gXGJME9onWs=)
                          3: B3wonFQq_huZTMz-8wuSey9Fs1I.roa (hash: JnpdkfXYgXXAYDW/V89kghjchKm1vbi2ArxR3XgZ6B0=)
                          4: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: vOiymrcTVcLFOw/zwy6vFXY6EOkl4acAdmqAIGGELHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 16:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4c:db:dc:cc:12:b3:57:f9:9e:3a:40:c3:d6:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d59659636089e32324697629c218da38a2b673d
        Validity
            Not Before: Sep 25 16:01:27 2026 GMT
            Not After : Sep 26 16:01:27 2026 GMT
        Subject: CN=eeaba0fe7dee5e75cfb9da1dca30825ef085eebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:11:cb:8e:8c:98:cb:e4:8d:d2:f8:58:1c:
                    4c:21:3e:03:2f:72:98:ac:8a:73:88:09:a2:7f:0a:
                    97:04:01:c9:3c:a3:4d:b7:d4:a1:5f:a3:88:dd:51:
                    56:ef:bf:d0:2c:b2:51:16:ad:9b:1a:8d:01:ab:e8:
                    d0:48:f6:e4:a9:cb:ec:de:9d:fd:0a:8d:8b:31:c9:
                    b8:ef:1d:a2:e7:d2:45:4f:8b:53:db:12:fe:c9:9f:
                    c9:28:e0:cd:56:61:7f:17:6b:f8:b8:4b:95:77:32:
                    a5:4c:de:3d:24:48:83:ae:38:db:a1:c9:43:c7:99:
                    81:4b:a9:37:0c:c6:68:49:26:77:60:0d:ca:79:31:
                    a1:b9:dc:55:4f:48:a5:5e:69:ab:dc:4b:37:09:10:
                    45:87:1d:c3:5f:14:cc:cd:a3:72:9b:50:22:dd:2c:
                    15:18:0d:af:64:ec:01:0c:76:db:79:39:f1:3e:4c:
                    d5:4d:a0:5a:52:4a:0e:2e:85:ee:ce:18:13:fa:15:
                    02:ba:86:ec:f2:a1:0c:d3:e4:22:74:60:25:73:c7:
                    7b:29:24:3f:8b:4e:7d:cb:ca:e1:8e:d3:92:2c:07:
                    d9:d3:b8:2a:8b:d3:a4:c2:55:40:73:8c:53:df:60:
                    f7:c3:52:60:c2:f2:d6:72:cd:72:53:9c:31:d4:40:
                    c7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AB:A0:FE:7D:EE:5E:75:CF:B9:DA:1D:CA:30:82:5E:F0:85:EE:BD
            X509v3 Authority Key Identifier:
                keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:2c:c4:7b:4b:bd:7c:fd:17:cb:d7:d1:b9:4b:8a:a3:e5:f7:
         6d:e0:bd:67:ee:6b:e2:f0:01:e3:be:e5:dc:d7:50:6b:2f:4b:
         e5:38:aa:6d:95:e5:22:f0:87:ee:15:bf:a2:27:f7:ee:d5:1a:
         69:24:2b:12:a7:f2:f5:01:d7:b9:59:16:67:b1:8b:b1:bd:8c:
         37:d5:01:59:33:c7:ea:d8:20:84:f1:6b:63:75:87:d3:3b:20:
         ca:ce:0f:d9:4c:90:c4:68:40:1f:e5:a8:10:ef:0e:1b:24:38:
         0a:24:a6:6d:7a:b0:b0:83:06:1d:bf:c1:04:e3:b6:f8:91:58:
         30:cf:bb:74:cc:0f:20:48:a1:16:67:c6:ad:b1:37:84:b1:d0:
         a1:26:58:bd:7a:38:25:1d:73:ce:17:01:da:92:65:92:62:ad:
         b3:3f:c0:7b:c5:70:d5:e4:5a:3d:b8:43:16:9e:a8:30:1b:96:
         e9:f4:e6:9f:48:93:f9:f9:16:c3:18:79:fe:96:21:37:6b:aa:
         5d:0d:a7:ec:d0:be:cc:02:6d:a4:a6:ce:3a:01:48:4d:4c:f0:
         57:0b:21:b8:00:0f:a1:83:21:ea:ea:80:4e:be:4f:3a:2e:bc:
         65:90:80:84:43:9b:71:44:cd:58:85:77:bb:48:49:d7:02:e7:
         3f:8a:ec:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:56:13 2026 by rpki-client