Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
File:                     F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json)
Hash identifier:          SIS7kPTLgtGKRIRgT/UGna2vVeTC4GXRVO+RN6RJSz8=
Subject key identifier:   C0:11:C6:AD:D7:21:9E:94:91:90:98:B6:87:35:74:E2:39:A8:BA:BB
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Certificate issuer:       /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial:       01A0FB6B677B8CFA3CBB807672D099234100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
Manifest number:          1A86
Signing time:             Fri 02 Oct 2026 07:01:55 +0000
Manifest this update:     Fri 02 Oct 2026 07:01:55 +0000
Manifest next update:     Sat 03 Oct 2026 07:01:55 +0000
Files and hashes:         1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: di8RDhyUzF34yBOae9SbdeOasRHcm02a0vIbrswdIWo=)
                          2: bZtAv7jof-AuwEu0cxY9E17KiEM.roa (hash: GmHiN36XVNHoznaH+f5s8+gOGqjQoGIfCLxDgTEZBEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 07:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fb:6b:67:7b:8c:fa:3c:bb:80:76:72:d0:99:23:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
        Validity
            Not Before: Oct  2 07:01:55 2026 GMT
            Not After : Oct  3 07:01:55 2026 GMT
        Subject: CN=c011c6add7219e94919098b6873574e239a8babb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:22:03:c7:da:88:66:61:30:d6:30:12:9b:
                    58:6e:03:12:48:76:c5:a1:1e:6e:58:f7:be:ab:9f:
                    8d:83:7f:65:99:5f:1b:43:29:02:52:98:b5:f2:9b:
                    6f:74:af:57:86:a7:71:60:02:ca:2b:2c:17:ba:3a:
                    70:51:56:e1:21:25:56:f7:eb:e3:05:66:3a:d5:73:
                    7e:6f:21:6a:00:28:0d:3f:88:81:ab:4b:44:34:38:
                    3f:61:9b:d0:d3:e5:4e:0b:81:f2:82:c0:e8:6d:8b:
                    cc:60:62:97:81:c3:c3:b8:9c:a8:80:61:d7:29:b7:
                    95:68:37:42:11:9c:26:1b:41:3d:86:d9:67:1f:e9:
                    af:d9:91:95:c8:3b:6c:50:e8:01:fe:02:31:ac:e3:
                    40:42:ba:94:a9:7d:9c:06:ba:8f:c5:84:69:fd:57:
                    8a:87:88:1a:a2:dc:a4:47:dc:c0:05:0b:a8:e2:25:
                    54:f9:ce:7a:1e:17:47:76:87:84:66:67:88:b0:df:
                    f4:42:23:3f:a9:b0:23:3e:57:c3:86:b3:a8:fb:16:
                    37:a9:f6:bb:9a:09:96:63:4d:28:40:ec:c2:e2:7d:
                    f0:4e:06:28:c8:0a:2c:13:1b:57:c1:a4:c0:ab:52:
                    1b:8e:78:01:86:7c:ed:4e:eb:07:c1:6b:eb:fa:3d:
                    d2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:11:C6:AD:D7:21:9E:94:91:90:98:B6:87:35:74:E2:39:A8:BA:BB
            X509v3 Authority Key Identifier:
                keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d1:4d:b7:36:40:85:72:80:9d:46:c9:0a:25:1b:07:e3:39:
         62:47:ee:cf:49:10:72:5a:3b:cf:67:c6:9c:cf:8c:32:08:ae:
         fa:87:6a:c3:f6:a0:9d:13:2e:51:eb:04:d1:dc:bd:43:75:55:
         e1:55:27:b7:26:31:69:23:f2:e8:9a:f8:80:17:73:75:b0:50:
         12:29:c9:28:b5:10:5d:c4:d2:00:5c:34:e0:ad:3a:35:64:95:
         76:f3:78:c6:73:cd:d0:3d:93:e4:ee:b7:37:e3:18:1a:f6:80:
         7d:66:e0:d1:00:ad:98:e9:66:8c:96:f3:c4:23:ff:9d:e1:71:
         c1:01:0f:a6:f9:c5:37:e0:46:e7:d0:26:2d:1b:01:68:d4:e5:
         d8:0e:fe:5b:0f:29:90:62:7c:f5:4d:83:0f:39:59:a2:41:b4:
         5e:fe:f3:3d:cf:d0:ba:98:4e:4e:83:5f:fa:23:80:0c:e6:17:
         59:f9:18:a7:48:ee:1c:dd:75:15:f8:e1:a0:e5:59:32:97:e3:
         59:ba:c3:5c:b5:e8:0a:7b:f1:19:c4:ad:56:d0:5a:11:71:ce:
         9d:80:ac:2a:e2:7c:a4:f2:0e:ee:32:21:9c:6f:7e:a4:fc:f2:
         bb:ee:08:89:c5:df:51:6c:22:ee:e9:74:4d:ed:ba:39:d3:e4:
         1f:61:d7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:53:13 2026 by rpki-client