Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File:                     fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier:          05VO47PTBs+xwEr8r5CB6WcrIx8b7Jtt+FLz0Ipdj08=
Subject key identifier:   D4:EC:92:3F:65:00:DB:B0:D9:B0:47:5D:EC:86:FB:D7:08:A2:0F:5A
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer:       /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial:       01A06EA7C503ADFAE2A1E4FFA8B9CB5FEF66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number:          1A36
Signing time:             Fri 04 Sep 2026 23:01:23 +0000
Manifest this update:     Fri 04 Sep 2026 23:01:23 +0000
Manifest next update:     Sat 05 Sep 2026 23:01:23 +0000
Files and hashes:         1: OYXBnR_i_32vVbXh0HFOhPBkIao.roa (hash: uFNMDyNJ2OVPR9PkOadpZs87yuOZdywd47eCM9lTesc=)
                          2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: xV/wHlZbnGbha6JSwG9wLPglRFLpgN9e25dQbzCcnz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 23:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a7:c5:03:ad:fa:e2:a1:e4:ff:a8:b9:cb:5f:ef:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
        Validity
            Not Before: Sep  4 23:01:23 2026 GMT
            Not After : Sep  5 23:01:23 2026 GMT
        Subject: CN=d4ec923f6500dbb0d9b0475dec86fbd708a20f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:56:cb:c5:94:b9:85:74:83:04:8e:e2:db:
                    84:67:bd:bb:6c:df:5d:3c:53:1d:f4:e9:54:50:78:
                    d8:5c:53:6e:f6:a7:d0:21:39:28:de:63:ce:eb:1e:
                    06:c4:47:95:3e:d0:bd:cd:cd:86:cd:aa:b9:2f:49:
                    0e:63:a2:73:1a:28:f3:ba:cf:c3:ba:74:82:a6:ad:
                    3f:af:09:2e:9d:5c:bb:21:96:f4:5b:78:3d:6e:02:
                    12:bd:18:e4:44:bb:39:17:8f:cf:10:9b:19:24:6c:
                    bc:78:9b:ba:d1:80:d8:6f:c1:dd:23:00:51:6f:6b:
                    68:2d:7a:75:fd:a0:95:ba:01:90:7b:15:d8:4c:01:
                    94:6d:ce:3e:d4:db:02:1e:cb:66:27:a7:b1:87:86:
                    07:ea:78:09:18:79:a9:3c:3b:09:65:48:8b:99:9d:
                    ec:4f:5a:46:39:ee:53:56:a9:f8:95:1c:7f:15:ed:
                    b0:84:8a:86:74:a6:f7:d1:ad:61:a7:01:83:e7:3e:
                    ec:42:7f:82:cf:40:4b:4d:89:7e:0b:76:91:98:77:
                    d9:ad:99:07:10:60:1d:de:7d:96:8a:83:9d:1a:ee:
                    24:c0:68:a2:1e:a8:1b:57:ec:fb:c5:ae:dc:e2:c9:
                    0a:c5:78:51:21:20:21:68:50:e1:3b:67:6e:6b:bc:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EC:92:3F:65:00:DB:B0:D9:B0:47:5D:EC:86:FB:D7:08:A2:0F:5A
            X509v3 Authority Key Identifier:
                keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:0e:4f:d2:eb:af:ed:0e:e6:2a:89:5b:4d:62:ab:90:b7:e6:
         cf:33:b1:b2:fe:3d:44:8d:48:2f:99:2f:c5:d6:d2:05:08:1b:
         df:77:6b:20:4f:bc:40:e6:98:a0:80:99:88:af:53:25:17:95:
         1d:31:bb:c9:ce:06:8f:fa:ec:9d:f8:c0:b4:78:52:1f:fd:6c:
         16:73:ac:73:c7:b3:dd:be:8e:fb:87:02:05:15:3b:82:94:a9:
         c0:09:f1:9f:ca:6c:16:5a:54:9d:0c:12:29:49:6b:aa:a7:85:
         12:b3:13:2e:19:82:cc:f7:be:98:96:ec:56:aa:c7:80:cb:b5:
         06:30:44:05:f0:0d:a9:c9:cf:b5:d9:77:a7:16:a1:cc:21:22:
         06:78:92:ee:90:4d:4f:63:e6:ae:83:22:07:10:3e:3b:05:26:
         f5:80:43:0d:c4:46:0c:61:5f:f1:05:7d:dd:a2:eb:a8:f2:4c:
         cc:4d:7f:09:0a:78:84:41:57:94:39:2a:38:c7:49:db:77:7a:
         c8:b1:63:3c:c6:de:21:81:53:bb:b8:32:1f:fa:05:2c:1f:ec:
         3a:38:8d:f0:e1:86:cf:64:f8:35:65:ea:a3:23:3e:19:be:16:
         d0:6d:31:71:13:4f:c6:cc:09:c7:81:eb:64:f0:f6:fd:2e:63:
         01:d6:3e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:21:47 2026 by rpki-client