Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
File:                     1-_LbWO2p3N4jau7HeVUO9rjLRow.mft (raw, json)
Hash identifier:          bt18KcdX+gIvO83VNBaGQTJHk8hCclqvsIw4O6jb8hE=
Subject key identifier:   FC:6D:94:5E:F3:87:7D:57:36:87:B8:DB:D3:2C:DC:EA:DC:D2:E4:DE
Authority key identifier: FB:F2:DB:58:ED:A9:DC:DE:23:6A:EE:C7:79:55:0E:F6:B8:CB:46:8C
Certificate issuer:       /CN=fbf2db58eda9dcde236aeec779550ef6b8cb468c
Certificate serial:       01A0CC35CCE08FC8942CE052A089DBD0F466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
Manifest number:          E3
Signing time:             Wed 23 Sep 2026 03:01:12 +0000
Manifest this update:     Wed 23 Sep 2026 03:01:12 +0000
Manifest next update:     Thu 24 Sep 2026 03:01:12 +0000
Files and hashes:         1: 1-_LbWO2p3N4jau7HeVUO9rjLRow.crl (hash: h2eOyu3a1xozeTtNDmyWuWGioCEFqr2ZIt9+qJz99dc=)
                          2: 2EDW-s-ud7-nCTr1Sgos54mN1mM.roa (hash: YCcPBkAYBuUswz1BVwdFoQLrC8n9zW+jV/kRYtdf2D0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:cc:e0:8f:c8:94:2c:e0:52:a0:89:db:d0:f4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf2db58eda9dcde236aeec779550ef6b8cb468c
        Validity
            Not Before: Sep 23 03:01:12 2026 GMT
            Not After : Sep 24 03:01:12 2026 GMT
        Subject: CN=fc6d945ef3877d573687b8dbd32cdceadcd2e4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:cc:eb:6b:e8:b1:06:e7:01:39:8b:30:c2:
                    ed:1d:76:c2:96:1b:95:79:7b:9f:1c:cb:cd:c4:f8:
                    28:85:49:0c:96:73:b8:b3:fe:08:a3:66:79:02:92:
                    f8:f3:22:9a:54:6d:50:0f:7e:9b:89:7c:8e:02:8b:
                    e1:74:5d:70:3b:a1:a4:7a:16:d3:75:43:46:d7:ce:
                    c7:21:f3:70:30:0d:1b:55:ea:31:f6:43:2b:8f:30:
                    09:f2:2b:a7:94:bb:d9:d0:3b:87:4a:e7:d3:a3:d1:
                    2b:60:09:df:4c:07:71:77:46:ea:aa:80:4c:d4:09:
                    fc:43:aa:9b:08:a1:34:d8:e5:ed:00:cb:80:cf:32:
                    9b:7f:17:98:51:0a:eb:0e:6e:1a:98:f4:b4:00:c7:
                    d5:6a:c2:48:d9:3b:b2:98:4d:79:c3:1d:c1:3f:3f:
                    2e:c3:17:78:6d:e3:0f:98:f3:a0:f1:51:13:b9:e2:
                    e8:0f:2e:93:59:6c:41:8b:2c:d7:1e:e6:b2:33:01:
                    0c:f4:cd:6f:f7:25:10:43:c2:1d:d3:d3:f0:5b:59:
                    bc:cd:cc:c8:88:9a:dc:f2:0b:75:44:33:09:e4:b3:
                    5d:b8:89:32:5c:07:bd:06:f2:9e:a7:b8:16:1f:9c:
                    67:8c:bf:b5:47:d9:f4:4b:fa:9b:8d:b4:34:40:9d:
                    1c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6D:94:5E:F3:87:7D:57:36:87:B8:DB:D3:2C:DC:EA:DC:D2:E4:DE
            X509v3 Authority Key Identifier:
                keyid:FB:F2:DB:58:ED:A9:DC:DE:23:6A:EE:C7:79:55:0E:F6:B8:CB:46:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:86:c5:59:58:f0:2c:8f:d5:ec:47:61:01:7a:fa:34:31:4c:
         b3:d9:9a:f9:3f:0e:27:fb:c1:13:15:3b:75:c0:e2:f9:69:53:
         46:c8:18:dd:e8:8b:68:32:56:11:6d:3e:d1:4c:e8:b0:02:30:
         33:fd:c9:91:b5:4e:40:7b:13:60:7a:8d:4a:6d:f9:14:cc:93:
         6d:43:5f:1f:66:88:8d:94:94:fd:67:b5:8d:4a:d4:75:cb:89:
         66:2d:b3:5b:9d:0b:67:6f:c5:2d:a9:35:e9:0f:3b:55:5f:9a:
         66:b2:f0:09:9d:2f:50:ee:a3:f3:a6:57:47:d6:40:ea:6f:63:
         04:f0:44:de:b2:22:d6:31:a0:19:d3:54:d9:e5:04:78:bd:fa:
         ac:a6:69:7b:7d:8d:2e:c9:4c:bc:08:7f:e1:59:0c:92:2e:4f:
         75:1c:f3:d0:d1:62:fd:1a:07:75:14:44:b6:89:fc:13:29:f9:
         f5:a5:01:fe:b5:61:a2:48:8f:5b:66:06:65:6b:43:79:42:cd:
         c0:49:e8:37:70:ec:7a:d1:5b:82:17:4a:53:3b:df:19:dd:8a:
         ec:4b:15:aa:27:56:d0:bd:49:d2:e1:87:bf:9d:3c:60:6f:bb:
         c6:03:91:40:ba:57:2a:dd:19:ba:4a:41:17:48:8f:35:c8:83:
         7c:ab:e2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:06:04 2026 by rpki-client