Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
File:                     FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft (raw, json)
Hash identifier:          9ISUuEIA3akU8ACtUY81rXn3U0sIM7DETLKPrRgMfc0=
Subject key identifier:   13:C6:EA:9D:3B:88:E8:43:CF:02:D7:7E:AE:3F:4B:BD:F5:50:24:93
Authority key identifier: 15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
Certificate issuer:       /CN=15c18a2908cebd9085e01266bb02fb8af2247735
Certificate serial:       01A0F231072C796C875EF63E70E8039D4335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
Manifest number:          0532
Signing time:             Wed 30 Sep 2026 12:01:34 +0000
Manifest this update:     Wed 30 Sep 2026 12:01:34 +0000
Manifest next update:     Thu 01 Oct 2026 12:01:34 +0000
Files and hashes:         1: FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl (hash: IxI3kGFqgg3sHXE5eG2Fzi1xm+6Mil00XrWjQC5bERI=)
                          2: dLRmwhFl83bEy7zAcdX4mKmlXjY.roa (hash: VThAeMBueXR/zSSpQFMxHljw4NYIZkHXHe6JR0i+XFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:31:07:2c:79:6c:87:5e:f6:3e:70:e8:03:9d:43:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c18a2908cebd9085e01266bb02fb8af2247735
        Validity
            Not Before: Sep 30 12:01:34 2026 GMT
            Not After : Oct  1 12:01:34 2026 GMT
        Subject: CN=13c6ea9d3b88e843cf02d77eae3f4bbdf5502493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:34:f0:b8:f8:3d:32:56:78:fe:71:db:3a:
                    76:b9:a1:eb:e5:a1:2d:9c:f5:71:c1:e4:6d:03:15:
                    0a:38:d6:0f:eb:c8:4a:a9:b6:84:80:55:ce:8b:e4:
                    24:63:e1:ed:14:3d:47:2b:4d:69:86:f2:49:41:77:
                    ca:db:46:6f:21:c6:ee:cd:65:ed:f7:1d:4a:e6:f6:
                    11:fe:6c:52:ac:10:c7:b1:39:c0:ea:8c:57:29:a3:
                    21:99:43:23:6e:64:c1:d4:d0:7b:3b:b0:99:b2:28:
                    35:3d:21:70:fa:b4:ed:32:5e:08:b5:e1:8a:98:5d:
                    7d:85:25:5a:7f:01:7e:83:07:17:ce:9c:01:7a:3c:
                    5d:9f:38:ba:d1:ea:c1:0d:70:80:26:c4:c8:35:a4:
                    36:0f:18:62:1b:7d:8d:42:42:90:5b:a3:2c:e2:52:
                    19:9f:f4:6e:bb:76:29:7a:a3:0d:0f:58:7f:70:32:
                    78:92:76:b5:86:56:61:ca:5a:b5:a0:f2:05:bc:27:
                    aa:e6:6d:2f:18:e9:55:ed:22:7f:7e:54:89:8b:9f:
                    a7:17:f6:a7:26:18:b7:e3:d7:6b:2b:b7:e7:6a:02:
                    7e:7d:e3:a8:de:21:95:24:0e:bb:cd:22:c1:cb:cd:
                    86:85:55:15:84:69:71:3f:19:21:f6:6d:ac:77:b4:
                    ed:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C6:EA:9D:3B:88:E8:43:CF:02:D7:7E:AE:3F:4B:BD:F5:50:24:93
            X509v3 Authority Key Identifier:
                keyid:15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:56:ed:ad:ea:7a:14:e9:b0:72:e0:3f:c9:30:bf:a7:9f:b1:
         ad:b4:ac:c3:92:f4:ae:06:e9:12:49:d2:36:1b:3b:44:2f:00:
         81:4b:43:63:99:7c:21:54:27:be:f5:fe:bc:76:ad:2e:9f:1d:
         34:99:62:9b:93:e2:b7:0d:dd:36:1a:dc:89:7d:8a:06:27:c4:
         9a:75:d5:80:91:72:04:af:ee:10:e3:94:ac:f4:d4:6f:fd:aa:
         c0:45:bc:dc:62:03:90:f2:77:85:35:8d:3c:4a:59:70:45:41:
         8c:6a:54:1b:35:15:a4:7c:a2:2e:7e:48:34:9a:aa:e4:9b:07:
         52:94:50:bf:82:1c:89:43:4d:6f:75:e7:dd:34:27:1a:5b:1f:
         07:8e:ca:10:a2:da:97:55:2e:64:03:66:24:ac:68:71:a2:52:
         20:79:c9:74:2b:14:15:95:f1:51:f5:14:32:59:dc:3c:f0:72:
         5e:22:6a:7b:68:d7:f7:92:35:ea:93:07:04:18:0b:d8:24:2c:
         b8:02:41:e9:30:e5:67:73:48:aa:db:5a:7b:e9:ca:d9:2c:3b:
         ca:26:2b:f4:25:74:d7:25:79:61:fa:ab:bb:bb:58:41:5a:2b:
         a3:66:b8:a6:2c:0b:f1:f5:c3:ea:30:a4:0b:07:c6:7b:38:29:
         ec:1a:8a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:24:21 2026 by rpki-client