Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
File:                     FTSDi7MXuBhmmfCkSF222doZCNI.mft (raw, json)
Hash identifier:          +dnFbCsJiS5QUkJmqmd7oMQeSuthn0P97Qs6GzeuSz4=
Subject key identifier:   64:96:FD:09:36:37:5E:14:45:F8:6D:42:DA:D8:FD:A6:41:B8:D9:97
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Certificate issuer:       /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial:       01A0DA5FF2E8FE6F5185BA96CD2236DBA8BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
Manifest number:          1A78
Signing time:             Fri 25 Sep 2026 21:01:56 +0000
Manifest this update:     Fri 25 Sep 2026 21:01:56 +0000
Manifest next update:     Sat 26 Sep 2026 21:01:56 +0000
Files and hashes:         1: 24wWacTxTKeBWvKFGo-5GNyB8dE.roa (hash: NCrqjTsRyG9h5K6XaUABqOpJegvTm0IyWhFRdr9x/Sk=)
                          2: 8eUjrNm6imMBEiASLOUuqltQoVs.roa (hash: ZfpOTqbTAn2CuRX0LoEyNNAQ5rM0VLzFBNYb2IBiGIE=)
                          3: FTSDi7MXuBhmmfCkSF222doZCNI.crl (hash: oCy92TBMppxlVmyokveCGqciDaZlPgYYqUPfghJboVY=)
                          4: FZw0pgpqlzT5XyeIs7PFoGYFwFA.asa (hash: glk6t/DUYkuI6x781kKCmhQHELR1hKXbP1AbR2kHTMc=)
                          5: NdxMow94TNhxlzIzMI_r48W5M8A.roa (hash: 1nuZTI+erTKNkNC0wnIV7yjz0eGXOFGrHb4Av8qGq00=)
                          6: OpTwdj69eMigXueWV1BOB2dxLbA.roa (hash: 2kgLJoiz6VCqwiPbikEb5+NrvRferle8wU/FOd3hfZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:5f:f2:e8:fe:6f:51:85:ba:96:cd:22:36:db:a8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
        Validity
            Not Before: Sep 25 21:01:56 2026 GMT
            Not After : Sep 26 21:01:56 2026 GMT
        Subject: CN=6496fd0936375e1445f86d42dad8fda641b8d997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5a:85:27:1e:7c:81:4a:80:69:83:02:c2:9a:
                    63:15:e0:d2:bf:91:21:2a:65:bc:9d:b2:db:5b:4e:
                    72:50:4d:e8:bb:ea:c7:cf:c3:82:be:b5:9e:84:fd:
                    49:f0:08:43:0a:c3:56:e2:70:c7:37:e3:bc:65:83:
                    51:83:43:83:29:52:cd:2d:3f:30:ee:11:ee:be:6f:
                    19:a0:21:13:a7:eb:f5:43:f8:cd:c3:1f:b7:8a:61:
                    df:1c:12:bd:7f:cb:ba:b5:7d:c7:15:ce:33:27:dd:
                    14:93:67:4b:e9:f9:8c:6e:fe:34:9b:ae:b3:46:f1:
                    a3:61:5e:92:62:b0:2a:b7:8c:85:04:17:b2:79:4b:
                    01:7f:37:80:af:c3:49:60:07:c7:d6:63:15:d7:2e:
                    c6:1d:fd:cc:45:92:57:a2:63:54:ec:18:6e:9d:5e:
                    99:10:81:81:53:38:40:61:38:28:98:2a:7b:57:23:
                    6f:95:db:07:52:c2:87:7c:52:97:9b:be:e4:eb:fb:
                    f9:85:9b:14:30:c7:d0:bc:59:bc:95:2e:1a:3d:7d:
                    99:58:a6:3e:68:ff:5f:e8:a8:41:2b:84:a9:3f:59:
                    9b:3a:5f:f2:3e:19:78:f1:22:f2:50:e1:52:96:d2:
                    85:9f:e3:37:54:81:66:f7:23:13:58:9d:89:ef:37:
                    4e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:96:FD:09:36:37:5E:14:45:F8:6D:42:DA:D8:FD:A6:41:B8:D9:97
            X509v3 Authority Key Identifier:
                keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c0:e3:87:84:5d:4a:bc:77:f8:a3:72:bf:97:e0:b5:4b:62:
         94:40:d1:a3:78:bc:51:44:b8:6d:b3:f6:08:ef:80:83:40:8b:
         7a:e7:ab:ca:8f:b2:2e:ed:d8:2a:91:1a:bc:4e:4a:d3:80:2d:
         d2:2c:1c:8c:71:1b:80:d8:46:3d:d5:b0:1d:a4:f2:b0:e2:ea:
         e3:c9:7b:b7:5a:de:d0:56:53:d0:5b:99:d0:cd:3d:df:bf:b5:
         98:36:1b:bd:6a:3d:72:71:71:5b:72:b1:d3:9b:fb:31:c1:f3:
         bd:17:88:24:f3:bb:b8:6d:ba:ff:ab:e4:db:7c:79:62:f9:35:
         04:ea:0f:d5:8d:f3:c8:36:74:7c:61:56:dd:4b:93:5e:5c:53:
         2f:3e:52:2d:c3:58:25:6b:00:f3:00:d1:41:46:00:15:dd:cd:
         a4:1d:3d:d4:13:68:ee:55:8b:3c:73:84:8c:87:b3:ad:6f:ad:
         70:b5:fb:6a:03:e4:70:6b:f6:d5:0e:54:d6:d1:17:90:d0:c6:
         6b:a9:01:dc:4e:a8:66:e9:00:8f:34:ee:42:58:d0:f1:2b:d6:
         4c:94:e0:c1:ca:9f:5a:87:c7:00:0c:43:35:18:49:f3:03:ef:
         8a:36:42:50:88:af:ee:39:84:f4:8f:82:11:ca:2a:92:10:a6:
         2e:22:cc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:02:38 2026 by rpki-client