Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
File:                     _OoI6EId8vJFx8szPudqFKiILUo.mft (raw, json)
Hash identifier:          Dw8rz/FgOp+3bDBhowbHsH3Bm57UYdGUCnMyuoalZY0=
Subject key identifier:   66:0C:8D:99:C4:E2:D7:FC:D1:40:80:43:B4:7E:AA:F9:39:53:03:1E
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Certificate issuer:       /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial:       01A0DB3B854A5E60A39694773D1B8C7EFBAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
Manifest number:          1A74
Signing time:             Sat 26 Sep 2026 01:01:46 +0000
Manifest this update:     Sat 26 Sep 2026 01:01:46 +0000
Manifest next update:     Sun 27 Sep 2026 01:01:46 +0000
Files and hashes:         1: 102NyqwI6NUjHs7bCvz-B7agUdM.roa (hash: 5hj0xFAny5+vtgd3t6VT//Hd2v6CocMrOduYjNO+NI4=)
                          2: 1nVHIu-5n51i9XhRUguwo5Agsgg.roa (hash: gfFsI93bvHGfawYL3os2AP8o+JuPoCqZf2VysVyBfmc=)
                          3: LAOAzix8Zi6Y7eROUhiHseM7d1U.roa (hash: Qhgem+rCCIPGj27tJdRK6lacEFlZtLP66ADVBe3CFfA=)
                          4: _OoI6EId8vJFx8szPudqFKiILUo.crl (hash: eB3akHRXivOceMxPx8GP3tG04KoXI6R5vElN24YcB6s=)
                          5: vtzoMlVsaR1SjsCwCY3vHw4SD88.roa (hash: l1imowCkVJ1ojfww3ZUzrxP/ubYhQS8cf2hc3Hjykbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:3b:85:4a:5e:60:a3:96:94:77:3d:1b:8c:7e:fb:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
        Validity
            Not Before: Sep 26 01:01:46 2026 GMT
            Not After : Sep 27 01:01:46 2026 GMT
        Subject: CN=660c8d99c4e2d7fcd1408043b47eaaf93953031e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3b:1f:67:08:8c:25:3a:8d:3b:96:9c:18:d7:
                    e8:a6:d3:4b:9b:36:4c:6f:f4:17:3a:6d:7c:b0:48:
                    43:14:bc:d4:f7:e1:a6:51:ef:72:2e:d5:4a:90:c8:
                    16:0a:93:f7:72:9c:c9:28:c7:1a:0c:d9:14:f0:04:
                    74:50:5d:f4:33:3c:3d:18:c6:26:ba:1b:fd:07:6d:
                    98:a9:cb:d3:17:36:f8:68:20:78:4b:99:ab:7b:3e:
                    a3:1d:40:53:e3:05:18:02:aa:13:b4:ca:9d:68:1f:
                    07:37:2f:01:03:d0:fb:c5:10:ee:d5:ba:83:ea:60:
                    e5:93:bd:91:cb:74:bc:f3:c6:09:aa:0b:ce:50:15:
                    74:33:e4:11:67:35:3f:7c:d2:66:a0:fa:56:ff:b0:
                    e8:2c:d2:36:ad:1b:08:b8:d5:d8:be:97:fe:c8:0a:
                    b1:a3:70:a6:e8:3b:a2:3f:54:ad:47:9b:51:11:46:
                    c9:db:6e:6d:d2:1f:ee:51:7f:5a:75:3c:c5:2e:e4:
                    19:3a:1f:ce:6f:ea:2d:93:38:a5:ec:59:a8:cf:f8:
                    92:18:ff:f8:af:a6:8f:8b:fe:fd:96:11:e4:43:f7:
                    84:c1:4c:c7:63:cd:a3:78:be:e4:15:c8:f7:79:9e:
                    37:65:63:73:da:a3:1d:1b:3a:97:77:fe:fd:84:bb:
                    94:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0C:8D:99:C4:E2:D7:FC:D1:40:80:43:B4:7E:AA:F9:39:53:03:1E
            X509v3 Authority Key Identifier:
                keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:4a:29:d2:33:10:ce:f4:09:65:fb:a8:2f:28:b5:a7:1d:04:
         d4:df:d7:4c:c7:5b:14:be:ce:d9:67:dd:ab:c3:2e:2a:63:45:
         bf:31:f6:f8:6b:a0:f5:c1:d8:96:3d:f7:7e:1b:43:3a:17:45:
         fe:db:bc:4a:41:2d:5d:92:97:5a:fb:10:7e:a3:77:50:ea:eb:
         0d:01:be:32:cc:55:85:95:6b:32:97:e3:61:f6:9f:49:1c:2e:
         9f:e3:81:8f:c7:da:e1:a8:2a:09:80:08:96:a5:f7:4e:2b:a0:
         eb:20:cd:20:e3:a0:cd:16:4e:3c:74:d9:b3:6f:f8:55:7a:c5:
         a4:ec:f4:50:8d:df:62:b3:fe:45:0c:58:ea:e2:3d:a9:d9:89:
         fa:52:e3:43:cc:9a:0d:a4:b1:fd:e8:df:f7:8d:da:c6:20:c2:
         c1:85:7a:7d:fa:d9:01:86:df:d3:a3:22:6a:56:1c:56:d1:53:
         d0:6c:0c:7f:73:63:02:2f:8f:be:d9:ff:e6:ee:12:b0:be:44:
         8b:51:86:2e:a7:68:9b:c7:0d:02:63:68:43:1b:22:64:b5:2d:
         8b:f6:3a:43:40:fe:ec:2d:5f:44:20:ae:10:cc:fe:52:58:d9:
         0a:3f:b3:33:2f:e7:37:44:e2:9b:88:b3:50:07:04:b2:ff:50:
         1e:98:ad:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:19:05 2026 by rpki-client