Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
File:                     fPySsKdbia0uPFf3y6DkeGhCGc4.mft (raw, json)
Hash identifier:          0sVY+Br6hDO4jVi5/GX++gW6Otp3Y9EqxQ/BuXI5V7M=
Subject key identifier:   F8:F2:01:5B:9D:AD:7E:87:9C:7C:A1:26:04:90:59:59:FD:F8:70:D8
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Certificate issuer:       /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial:       01A0D804B8761EF47D22CE3F878255C78345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
Manifest number:          1A7A
Signing time:             Fri 25 Sep 2026 10:03:02 +0000
Manifest this update:     Fri 25 Sep 2026 10:03:02 +0000
Manifest next update:     Sat 26 Sep 2026 10:03:02 +0000
Files and hashes:         1: 06zDVhvC2wG0GB9x97qsiQizFTM.roa (hash: JvVnPN4nSkUYGY1CjK3ZJoX6NrGYaNBFt7orDkPoKJY=)
                          2: 9t14f8NJnYJxST_d861SOf1-DLo.asa (hash: y3Qy+wowjGxSW6aQhtKllIneMrr2j9m6LF7e6fp3vxo=)
                          3: QZQCliYt7_SkiNgn0oBCrt9JnJA.roa (hash: J1S9YQoNzohLr1YwHRGBK6/jtI3laoaPMu+xmQQPktQ=)
                          4: SFBk5U763P1fy8w9IXg_u7J_QVE.asa (hash: HY3zuNVCk+vA8waHsSxh/gtJfK12g23OYWACA1L2CUs=)
                          5: V6-lWwiSN3YZ_1Fg_iJqT1p7VC4.roa (hash: i3ycFbVY9dPK7tSJSKbK9FY7bHTAq2RPB68f/mcwtHU=)
                          6: fPySsKdbia0uPFf3y6DkeGhCGc4.crl (hash: Vim8SLsJe4MBhp/bjX4qpb0JzQEU9ObrOeOj+ERmBFI=)
                          7: xMWnV7ol9l_wC_K2pCVvOegFcOM.roa (hash: wuyIQgfX1EXhzZlkZ7KFL4OhLtwA6X9esaNzluB3laQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:04:b8:76:1e:f4:7d:22:ce:3f:87:82:55:c7:83:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
        Validity
            Not Before: Sep 25 10:03:02 2026 GMT
            Not After : Sep 26 10:03:02 2026 GMT
        Subject: CN=f8f2015b9dad7e879c7ca12604905959fdf870d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3e:54:5a:71:ff:f9:be:e2:33:a9:72:c9:e1:
                    5a:df:ab:f2:48:68:1c:49:1c:aa:e7:a7:fb:e1:d3:
                    02:b7:b1:60:2a:0b:8a:ee:ce:1e:67:c0:e4:a3:09:
                    44:7b:af:3c:54:40:49:55:2f:1c:ca:2e:be:13:e3:
                    8c:d6:e2:d7:16:2f:f7:88:c8:c7:ca:4f:42:5b:7b:
                    9a:a9:0b:75:36:9f:80:bf:a2:d7:e3:03:77:97:36:
                    27:d8:18:5f:8d:83:c1:2a:5b:31:fa:05:e3:bc:b5:
                    0d:6c:7f:76:aa:b8:cc:eb:a8:c5:2d:4d:7d:10:2a:
                    8f:e4:3a:1e:79:a5:38:17:51:7e:1d:50:58:32:f4:
                    1b:e1:cf:8c:3c:e0:ed:ef:a7:0b:e7:85:2d:99:db:
                    c5:37:c1:fa:f9:71:73:d2:66:c9:29:b1:49:95:59:
                    f6:90:24:40:13:86:39:8b:2a:da:5f:ec:16:85:c8:
                    dc:a0:8b:87:7c:02:82:36:09:d3:eb:73:4b:9c:2a:
                    f5:d8:e0:33:ac:df:42:f8:8e:47:b9:45:99:ee:fe:
                    9c:f4:75:37:1f:d8:a5:bf:de:88:16:48:88:2d:a4:
                    88:a4:8b:aa:04:e7:82:67:0f:f9:24:b7:5c:24:e3:
                    9e:d4:e9:b9:fc:a7:eb:e6:e2:13:c0:d1:ab:52:cf:
                    03:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F2:01:5B:9D:AD:7E:87:9C:7C:A1:26:04:90:59:59:FD:F8:70:D8
            X509v3 Authority Key Identifier:
                keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f8:bc:af:fb:ff:20:dd:62:32:42:bb:77:bd:4a:d3:a4:e3:
         cb:a9:bf:2e:6c:48:a7:59:6b:7c:2a:6a:30:85:93:c1:cb:cf:
         67:19:b9:49:ca:6e:77:cf:4a:f4:b0:f7:63:a0:73:c5:4a:2a:
         73:fd:1b:cc:1c:68:4a:c7:f9:3e:33:a1:94:76:1f:c1:1f:c2:
         1b:43:52:ab:3c:f4:d7:0b:04:87:b8:da:f0:57:25:81:34:0f:
         12:8d:40:05:4a:ee:75:fc:fe:53:17:6f:bc:75:bf:ce:ac:ce:
         5c:70:69:d8:f5:4d:97:79:ac:9a:55:6c:12:2c:d9:54:62:f5:
         7a:b3:e7:62:cd:43:8d:bd:74:91:a2:32:c3:90:79:8c:82:37:
         64:9a:84:a5:33:fa:63:59:57:67:f5:e8:7f:1b:c3:a2:6c:1b:
         ab:a3:9f:19:4d:03:d9:2a:66:01:8d:2b:26:54:20:ba:92:a4:
         63:c7:d8:ac:c8:48:3b:70:8d:07:52:77:11:c1:61:f1:4c:d4:
         ab:da:cc:d5:58:6f:a3:ca:8e:41:ae:b1:ae:b7:ff:99:2b:59:
         ec:3a:f6:e5:4b:a0:df:84:b6:c9:37:54:17:f7:3d:bd:1a:94:
         c3:64:5e:1c:83:47:8e:2e:1b:98:eb:ab:77:c3:61:44:1c:a3:
         66:6e:d4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:29:12 2026 by rpki-client