Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File:                     FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier:          5FZYnk7/GGZTU3VIJf6mTNb7EoatrbMt0RzkDtqEcp0=
Subject key identifier:   4A:68:DA:74:02:0C:0B:FB:AD:F1:15:8B:1B:46:E2:44:48:A5:89:CB
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer:       /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial:       01A08A8D05BD77F8C22053F52E2EBCA37131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number:          1A60
Signing time:             Thu 10 Sep 2026 09:01:32 +0000
Manifest this update:     Thu 10 Sep 2026 09:01:32 +0000
Manifest next update:     Fri 11 Sep 2026 09:01:32 +0000
Files and hashes:         1: 3iYvKmjSjsVE6fZyKjpy0lQpo6w.asa (hash: QIfk+9gv0T73m/MPZnABQni3pTAGdP9z7PVI1QeSe60=)
                          2: ALO3Qlxx-v5_rVC3KZ4QsZ2p3Q4.roa (hash: YjDYNJEAbu31/bNPzefu/2Oydl8evmmZTBFRwvp1e8Q=)
                          3: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: SekmPde623uHFrobIm3SZCzOYyVbaDDwobrQYSIOh94=)
                          4: NN4I3X81eMdfxSPDwC84MF9p8WU.roa (hash: ykKvXMmleoaLHhJSPR4Oi+U1d0KeOCaBVP6OGm1bNDI=)
                          5: uiJFdaJRW_IvGZlH4S2t7KeWTGE.roa (hash: 6SMIjJZcRRN9XbseNElKZerubHd6RO+4/fe+SB9ZZb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8d:05:bd:77:f8:c2:20:53:f5:2e:2e:bc:a3:71:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
        Validity
            Not Before: Sep 10 09:01:32 2026 GMT
            Not After : Sep 11 09:01:32 2026 GMT
        Subject: CN=4a68da74020c0bfbadf1158b1b46e24448a589cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:33:55:49:20:a9:9d:65:71:b9:7d:b4:13:93:
                    f5:42:bc:c7:25:0e:f4:55:29:70:79:4c:70:57:56:
                    5c:c1:54:e8:1c:f6:cd:07:ae:09:db:80:85:f1:d8:
                    b4:ac:59:f5:f1:1d:f2:c8:1c:eb:76:f7:5e:28:cc:
                    9d:52:0b:3c:7e:ac:9d:32:05:9a:b7:32:e0:8b:6b:
                    b5:1c:d9:7f:20:47:d0:e9:00:9c:da:2e:7b:6c:4e:
                    17:e7:49:82:c4:22:c3:76:2b:17:c1:a7:1b:9f:0c:
                    00:29:d7:b9:8f:05:1e:44:1b:7d:91:00:43:f6:18:
                    91:82:8d:14:e2:86:85:98:1e:c9:ec:35:d1:10:57:
                    9c:81:cd:fc:00:22:b4:00:0f:3b:ef:86:fb:3c:91:
                    fa:02:92:3c:e1:52:b9:20:58:13:36:a4:d0:2a:77:
                    41:fc:c2:7a:99:73:4f:ae:d0:e7:f7:33:d3:dc:d9:
                    8f:13:2d:d6:cf:4c:b7:3f:7b:d6:b5:5b:ef:ba:d2:
                    2e:5c:ea:3f:64:26:cb:6e:51:a8:90:03:10:12:ab:
                    a9:9b:dd:fd:31:3f:5d:ff:54:20:60:37:ed:03:af:
                    50:35:f1:b0:ba:2c:0f:c2:04:3a:b1:ac:2d:03:e2:
                    33:d3:00:10:34:44:20:9f:c9:88:de:10:b1:3a:db:
                    9b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:68:DA:74:02:0C:0B:FB:AD:F1:15:8B:1B:46:E2:44:48:A5:89:CB
            X509v3 Authority Key Identifier:
                keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:b9:2f:64:e7:b9:f4:7d:2d:41:ae:a2:df:ce:7d:f7:1b:a8:
         ca:71:9d:ef:2f:91:97:9b:8b:5e:67:5b:6c:44:30:32:3a:65:
         2d:bf:fc:df:99:f4:b4:75:59:28:02:a5:24:64:50:57:39:f8:
         d9:f7:fb:a5:e7:e1:62:2e:1d:18:07:af:3b:fd:49:f6:78:24:
         00:e8:e0:52:76:f1:cd:2a:a3:f5:a3:e6:0b:a4:4b:34:30:b7:
         82:8f:8a:8d:9d:04:ec:2a:ce:41:2d:9c:e3:87:05:93:6f:59:
         cf:1b:2d:8b:99:57:e1:6e:6e:91:3b:98:4b:93:2c:0c:15:23:
         d5:1d:5a:34:7b:a3:47:94:6f:60:6a:c7:cb:57:ca:0e:c8:57:
         2e:69:bb:5b:aa:f7:16:07:be:32:3a:11:a5:1c:9e:12:bf:b0:
         9c:5d:5f:5b:6a:13:6e:96:0a:4f:8d:88:10:92:7c:42:d1:47:
         3b:27:8b:14:ac:88:c8:a3:25:38:59:80:c2:c6:78:67:0c:00:
         90:1c:84:04:b5:a9:eb:fb:1d:76:aa:99:94:ee:67:5d:95:00:
         44:06:dc:73:02:b9:bf:fb:35:de:e0:49:69:7f:49:33:3b:33:
         06:a1:8a:88:75:a6:09:18:8b:46:8a:d8:b4:f8:62:21:f1:66:
         1f:77:4b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:16:52 2026 by rpki-client