Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
File:                     F_2hoaCf3teimtqgN1JFpM7SPGg.mft (raw, json)
Hash identifier:          kDKzW0T0Sz7LO7HPXs4grfkd47hPhsTwWx6/2uOKg2I=
Subject key identifier:   37:94:5F:83:AD:6C:1C:33:63:F5:FC:A4:8B:CE:44:BF:61:2D:4B:93
Authority key identifier: 17:FD:A1:A1:A0:9F:DE:D7:A2:9A:DA:A0:37:52:45:A4:CE:D2:3C:68
Certificate issuer:       /CN=17fda1a1a09fded7a29adaa0375245a4ced23c68
Certificate serial:       01A0FAC5FB9A6122D41494A25416C10CD45F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
Manifest number:          01CD
Signing time:             Fri 02 Oct 2026 04:01:13 +0000
Manifest this update:     Fri 02 Oct 2026 04:01:13 +0000
Manifest next update:     Sat 03 Oct 2026 04:01:13 +0000
Files and hashes:         1: F_2hoaCf3teimtqgN1JFpM7SPGg.crl (hash: 1RdXiuL4x0ee5upj/wHB/cdQ/AA0pRvejqc4BXBilaE=)
                          2: V_lZZIqY5s85SF0ugHkKTWjJMIw.roa (hash: k646Q+fHI6cZiQ9lJkMUeqvbWvtUz1EBniyuZudyxSE=)
                          3: ccpyB2p3G0mmKqz1sdLuUDX6wl0.roa (hash: VbBq9JONk0sG6hiNflvsf2M93Fqkn8mHP3+rmtcZv9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fa:c5:fb:9a:61:22:d4:14:94:a2:54:16:c1:0c:d4:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17fda1a1a09fded7a29adaa0375245a4ced23c68
        Validity
            Not Before: Oct  2 04:01:13 2026 GMT
            Not After : Oct  3 04:01:13 2026 GMT
        Subject: CN=37945f83ad6c1c3363f5fca48bce44bf612d4b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:ad:73:8c:8f:12:1d:63:df:ae:d6:ce:e4:
                    63:3d:6b:ff:60:78:aa:86:a4:3c:aa:76:08:12:29:
                    bd:b9:0f:f9:39:1c:8e:de:f0:1e:83:07:10:f7:8e:
                    1c:de:d8:f9:98:78:a2:80:08:a7:38:16:6f:3a:55:
                    3d:0d:30:82:23:75:86:cd:31:09:52:60:4a:02:c8:
                    4e:cd:c4:70:04:9b:ec:6d:66:4b:92:da:9c:ac:c3:
                    36:67:e2:17:4c:f8:d7:55:e3:1c:32:92:69:f0:5f:
                    25:04:2c:f3:ae:ab:c5:c7:a6:68:63:56:60:ae:6d:
                    d2:f9:31:ba:88:ab:ab:63:4e:c0:9b:93:96:e2:1a:
                    e2:23:49:af:32:5c:d0:8f:f5:3b:f5:2a:66:62:6b:
                    6e:55:17:a9:ca:03:90:d3:74:49:cd:1a:67:64:42:
                    1e:4c:de:73:e8:5e:ec:e6:6f:c5:f9:65:0e:8a:e5:
                    8b:80:de:d3:19:3c:c8:ae:cb:9b:42:6c:24:84:65:
                    1b:54:57:86:2e:ba:e9:78:03:ce:7f:4a:53:1f:e3:
                    75:2d:cb:09:bf:9c:01:a9:be:57:32:14:0e:d3:7b:
                    f8:dd:08:cb:71:e6:15:5a:03:ae:33:19:a9:66:e2:
                    9b:6a:41:5e:9b:5f:a1:cf:5d:cf:9e:67:aa:fb:58:
                    a1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:94:5F:83:AD:6C:1C:33:63:F5:FC:A4:8B:CE:44:BF:61:2D:4B:93
            X509v3 Authority Key Identifier:
                keyid:17:FD:A1:A1:A0:9F:DE:D7:A2:9A:DA:A0:37:52:45:A4:CE:D2:3C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:61:ab:d9:69:a9:65:56:a5:46:c0:a8:c2:66:97:b1:ee:d0:
         76:d2:3c:9c:77:f1:db:4b:eb:e0:c1:38:4f:bf:ef:89:0d:5e:
         4e:c7:ad:8a:9c:69:28:01:c7:57:34:e9:a1:32:89:cc:77:8c:
         4f:7f:48:cf:59:cd:86:bc:ed:be:a8:57:d1:d2:76:28:26:f0:
         99:d3:57:f4:14:37:0d:5c:7b:26:d0:ae:17:55:97:10:e9:0b:
         c6:3a:a0:75:59:3c:e6:e3:91:b8:88:b3:2b:4d:63:06:ce:57:
         6f:b0:19:49:f8:b6:e5:63:3e:cf:7a:3b:80:59:ed:28:a4:8a:
         b6:76:64:fb:98:ae:e5:32:41:90:a7:0d:89:6a:9a:fc:69:d7:
         ed:99:65:f9:01:a2:ff:64:38:a8:25:85:35:aa:81:8e:76:1b:
         dd:75:06:f5:34:45:82:64:63:c8:a7:7c:6a:6e:d3:74:06:b9:
         a3:9f:9e:81:32:ff:6d:01:d6:c5:e4:2f:94:c8:0e:0c:0a:3b:
         f5:28:fa:43:e9:9e:c0:8f:d9:c7:b8:3c:f2:83:13:a7:6d:ad:
         94:0d:52:8b:e5:a9:b8:1b:d3:f8:18:c4:b4:b7:d0:4f:77:fa:
         a9:0a:64:d7:b5:13:6a:53:27:2b:e4:74:5e:79:cd:21:55:78:
         e0:cf:51:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 17:19:59 2026 by rpki-client