Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
File:                     Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft (raw, json)
Hash identifier:          ravI+ZYq5uYbdgnYUT+WjZwgUu3MRQmlgxfxW4HHziU=
Subject key identifier:   35:16:E8:75:63:E1:FB:7F:05:1E:3E:92:82:6D:9C:99:4D:6A:88:46
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Certificate issuer:       /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial:       01A08AFA8BF5CE90501B86342AAEFC6B8169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
Manifest number:          1A55
Signing time:             Thu 10 Sep 2026 11:01:10 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:10 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:10 +0000
Files and hashes:         1: 9SI52VgDBaEJ9HFrw-u80rGAzb0.roa (hash: Wz599kBFdu7Ri93DGJbDH1V1UHfOg0eqQwOYmctUo4M=)
                          2: Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl (hash: M8+CCZ3d5rPrbCine18ym+5MV8iTDAjD5PlW+dKIrGA=)
                          3: HiZTjeXxPL5UIfjY96XqMWqTBQQ.roa (hash: p6Iat8BE8A2SkYe418gBt7rVZPajqInsyq2ODAIMOIM=)
                          4: JP3ZqqPVjIUPq-e1w5zTwtk5l-c.roa (hash: ncOs8+yJ75qvDSJg0W6CwoVuPbowDw3Ob5yRHAaZTeg=)
                          5: MgNPqmfdLw3dFFQvzMAsH6Gco_c.roa (hash: 3dPNmqEImz9izlskaSl23VXdEgJ+dMdOOKT1JBG1FlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:8b:f5:ce:90:50:1b:86:34:2a:ae:fc:6b:81:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
        Validity
            Not Before: Sep 10 11:01:10 2026 GMT
            Not After : Sep 11 11:01:10 2026 GMT
        Subject: CN=3516e87563e1fb7f051e3e92826d9c994d6a8846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f2:85:c7:30:5c:88:7c:28:3e:02:7e:02:2f:
                    f0:8d:dd:c2:33:48:5f:b6:c6:ec:e5:91:ab:52:49:
                    41:9b:3a:35:b3:e4:ba:61:a2:29:ea:7c:c5:34:c7:
                    52:5e:2b:57:d0:52:01:18:a3:9e:ed:47:f7:e8:70:
                    21:b9:61:42:3c:5e:8a:61:e7:3b:53:b0:3b:38:b6:
                    dc:1d:c8:d9:da:ac:8c:2b:f4:99:ad:b5:b7:25:4a:
                    64:56:dc:66:d3:84:fb:25:87:02:32:0c:25:4e:5f:
                    d0:f4:97:62:7b:c4:37:c8:6a:e6:9f:f2:d1:1a:a4:
                    77:97:02:b8:38:17:ca:3d:17:f5:28:43:ac:06:79:
                    dd:f9:1f:b0:32:11:b5:12:2a:54:1b:d9:8c:f3:f1:
                    cd:c1:8e:6f:70:71:ee:95:a9:cf:5f:7c:ce:bc:62:
                    29:b6:35:5d:77:6a:d0:2c:36:e4:56:6b:15:7a:9d:
                    b9:37:34:93:77:c6:54:13:bd:ca:5c:c3:2c:23:39:
                    08:5a:6e:32:e9:be:f6:29:e9:ac:c4:3c:58:09:19:
                    e6:65:5c:1f:36:c9:38:e1:47:21:77:77:84:b0:1e:
                    6b:c5:6d:81:3a:56:d3:9a:8c:2a:a0:d8:8d:b3:00:
                    b1:c9:fc:ed:ce:5c:d2:15:76:65:44:16:82:61:2d:
                    b3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:16:E8:75:63:E1:FB:7F:05:1E:3E:92:82:6D:9C:99:4D:6A:88:46
            X509v3 Authority Key Identifier:
                keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1e:95:1f:53:84:d5:51:5d:f7:45:d7:cb:9d:c4:96:d5:62:
         c5:73:37:42:83:b7:d2:bf:21:34:6b:b8:9d:14:61:40:8d:e4:
         ea:53:d3:1b:ec:85:34:e4:c5:94:33:cf:d2:d8:27:57:fe:e7:
         bf:22:68:3e:6d:7f:29:f6:3b:3e:59:f3:c3:9c:41:dd:a9:2c:
         63:07:43:ee:3a:4b:09:db:66:91:4b:0c:dc:03:18:ca:c2:7b:
         29:ac:7f:58:65:f7:7e:81:dd:cc:f2:dd:29:34:34:75:49:b0:
         7f:aa:63:e0:e8:0d:37:3d:10:c1:7e:0f:b6:11:35:47:06:e2:
         a6:31:d3:31:25:3e:0b:3f:97:ec:e9:fc:b3:30:4b:72:d5:4d:
         22:69:9d:d6:92:ca:16:6e:12:5f:ea:16:af:3f:e9:55:13:dc:
         e4:18:30:d1:21:bd:9c:92:50:e5:12:cd:48:42:4b:7d:8a:bd:
         e7:af:74:e6:3e:3e:46:9f:2b:1e:54:f3:d2:6e:08:4e:bb:3e:
         97:ed:de:5c:dd:8d:ac:7c:77:7d:2a:c1:03:d3:5b:17:1a:67:
         32:4e:e5:91:ca:5f:27:cc:cb:b5:84:1b:1c:a5:75:2f:01:b5:
         01:23:4d:e9:0a:28:f1:0c:7a:7c:2c:89:85:57:2b:07:08:73:
         6f:31:6c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:20:18 2026 by rpki-client