Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
File:                     RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft (raw, json)
Hash identifier:          ULwx/9I1bHLPSAtJAVvrVS21eeekIcIT/QQug9NMStU=
Subject key identifier:   FC:3A:C4:A3:10:13:74:FE:2A:82:E8:66:5C:B5:61:66:92:7C:43:D7
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Certificate issuer:       /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial:       01A0ACAA93B19108A729F53AEB81FE25CDD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
Manifest number:          1A65
Signing time:             Thu 17 Sep 2026 00:00:55 +0000
Manifest this update:     Thu 17 Sep 2026 00:00:55 +0000
Manifest next update:     Fri 18 Sep 2026 00:00:55 +0000
Files and hashes:         1: 2iOxvtLJRmqeCCs6jsBCnhsmuMk.roa (hash: xSNUQ0HB9QKxYzPdIeyT3O6eENXbIaUd/nPbY1Wjb78=)
                          2: 9rJ3D7R2FGpfztbwgoAll-ejebo.roa (hash: 0+H9NeSyn3NYB4CYcbDs912kX5NQoduTWlOHO6vJ2zk=)
                          3: EfsvGGiWagU_0mzeylXRaksRn_8.roa (hash: KEPOuFM2LSKDwp8tR2Mp0dmeSc6fJlmHWiPoO6jvt04=)
                          4: RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl (hash: IZ0O6V1Bf9Xzga8513qyWQZ4lEF2z0sRdP0O6hEwddw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 00:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ac:aa:93:b1:91:08:a7:29:f5:3a:eb:81:fe:25:cd:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
        Validity
            Not Before: Sep 17 00:00:55 2026 GMT
            Not After : Sep 18 00:00:55 2026 GMT
        Subject: CN=fc3ac4a3101374fe2a82e8665cb56166927c43d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4b:04:ca:68:92:6a:24:26:e6:0f:59:c2:55:
                    12:42:0d:4c:90:f3:4c:f0:d8:28:98:f4:62:47:e4:
                    ef:c5:75:c9:58:50:ec:bb:50:19:81:55:20:c9:36:
                    bc:5f:e6:d5:ea:a6:db:a9:c6:60:fc:c2:3c:e3:ab:
                    b3:b5:f8:4d:93:67:cb:37:4a:cd:12:a4:83:35:2c:
                    bf:5a:8c:f6:93:c8:95:81:41:2c:cb:69:b1:7c:e8:
                    1b:00:db:95:42:6b:e7:00:f5:11:36:74:40:98:03:
                    d0:5c:42:24:94:18:2b:67:8c:06:fb:76:57:87:bb:
                    ce:fb:32:c4:8b:7a:cf:98:0b:2e:8e:68:80:64:e2:
                    ab:85:e4:ce:db:65:06:c9:c7:9f:75:25:a6:df:79:
                    11:0a:32:e1:ea:25:47:68:c2:3e:0c:ea:3d:e6:ca:
                    0e:6b:1b:46:67:0e:1a:39:c8:44:b6:d0:43:89:fd:
                    2f:a5:09:2b:34:2b:75:1c:3c:68:b7:69:14:e8:dd:
                    7c:19:2c:eb:26:8f:32:8a:78:46:07:5d:8d:86:6d:
                    8a:d5:18:21:10:de:6c:52:8e:2a:3d:61:35:c3:e5:
                    09:a5:ec:3d:df:84:70:50:04:d7:49:24:67:98:87:
                    c3:ab:fb:ae:35:4c:62:64:15:d5:dd:39:4d:74:da:
                    8b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3A:C4:A3:10:13:74:FE:2A:82:E8:66:5C:B5:61:66:92:7C:43:D7
            X509v3 Authority Key Identifier:
                keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f5:3c:fe:50:7d:80:fe:32:fc:2c:f5:3b:5c:f2:65:d2:06:b9:
         1b:de:ed:2d:1e:47:25:73:8b:c3:cc:93:0b:b8:df:9d:13:ff:
         1b:ac:c2:33:a7:21:aa:90:3b:9d:45:7b:33:b7:50:ed:38:ef:
         fa:d4:98:35:e4:86:7e:cf:04:16:af:aa:c4:de:a6:da:4e:e7:
         1c:5d:be:55:bb:a4:52:de:42:36:f5:07:a5:a8:cc:4c:5a:3c:
         5d:dc:97:5b:ab:50:4e:a1:54:c0:4a:16:6c:57:08:c9:de:a5:
         73:23:c5:2a:cb:10:ce:d1:9d:69:59:f3:7f:2c:c1:f6:f6:03:
         cf:03:47:30:ce:70:68:c5:b5:06:c7:2f:2e:ef:0e:54:31:0e:
         c8:2d:25:17:14:48:41:12:08:8c:e9:f7:4f:04:d2:89:dc:ef:
         6c:ee:aa:5a:42:19:4e:c8:a5:d0:24:5f:30:d8:35:8f:e5:84:
         23:76:d6:01:f6:a7:d7:14:3b:bf:1b:60:75:c4:c8:3a:07:fd:
         73:6d:bf:8a:fc:15:4a:71:4e:aa:e5:3a:97:71:bd:94:26:1c:
         bb:c5:3f:ac:90:69:45:20:01:82:04:dc:34:d7:6f:ba:fe:5d:
         3a:84:5b:41:15:08:c1:c2:93:e5:b1:8d:36:87:89:b1:27:a9:
         9b:ef:b9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 11:53:24 2026 by rpki-client