Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/ed1e75-c54d-4158-8b1e-b039a54d124c/1/FhGIpha24IlMOx8GuvGPwPHmSkc.mft
File:                     FhGIpha24IlMOx8GuvGPwPHmSkc.mft (raw, json)
Hash identifier:          FRJUtl6SZqWlxhohbTkHEZ2SseVi66m5dIHz59WtZSg=
Subject key identifier:   C1:85:82:D0:EB:71:E7:F1:0B:CF:6F:EA:5B:6C:B7:68:8B:FB:88:18
Authority key identifier: 16:11:88:A6:16:B6:E0:89:4C:3B:1F:06:BA:F1:8F:C0:F1:E6:4A:47
Certificate issuer:       /CN=161188a616b6e0894c3b1f06baf18fc0f1e64a47
Certificate serial:       01A10A3923068F6B5C9A1A981F416E60D7FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FhGIpha24IlMOx8GuvGPwPHmSkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/ed1e75-c54d-4158-8b1e-b039a54d124c/1/FhGIpha24IlMOx8GuvGPwPHmSkc.mft
Manifest number:          31
Signing time:             Mon 05 Oct 2026 04:01:18 +0000
Manifest this update:     Mon 05 Oct 2026 04:01:18 +0000
Manifest next update:     Tue 06 Oct 2026 04:01:18 +0000
Files and hashes:         1: 8GncrXSV_N09mN6UT6yUP3LThOU.asa (hash: LjYhLT+YIjsp4lQ+MwwS0iZpx8ca+hgs4J/03OGjbzs=)
                          2: FhGIpha24IlMOx8GuvGPwPHmSkc.crl (hash: ZF4ycACxXiUa5ngphXNOxO8dxfjFs2PVM2rW/t7D7Xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/ed1e75-c54d-4158-8b1e-b039a54d124c/1/FhGIpha24IlMOx8GuvGPwPHmSkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/ed1e75-c54d-4158-8b1e-b039a54d124c/1/FhGIpha24IlMOx8GuvGPwPHmSkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FhGIpha24IlMOx8GuvGPwPHmSkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 04:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0a:39:23:06:8f:6b:5c:9a:1a:98:1f:41:6e:60:d7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=161188a616b6e0894c3b1f06baf18fc0f1e64a47
        Validity
            Not Before: Oct  5 04:01:18 2026 GMT
            Not After : Oct  6 04:01:18 2026 GMT
        Subject: CN=c18582d0eb71e7f10bcf6fea5b6cb7688bfb8818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a4:c0:de:4d:62:6f:a1:fc:35:fa:61:07:ca:
                    8a:56:b3:06:1d:06:be:55:f2:55:6c:53:94:56:f3:
                    ba:d4:a3:4f:b4:e6:10:8b:b3:86:5c:d0:07:7a:30:
                    c3:7e:12:3a:36:8b:11:87:00:a5:03:54:89:56:6c:
                    03:8d:3a:f6:f9:42:cf:0b:4a:41:9f:8b:a6:5e:ed:
                    84:46:4b:de:82:44:25:d6:c6:60:d6:2d:7a:40:c7:
                    8f:53:e8:02:92:b5:69:dd:d4:fb:d6:40:11:1d:46:
                    3c:f0:f5:81:f5:a1:31:34:fd:2f:c4:45:a1:08:d2:
                    04:34:53:46:9c:78:3c:55:51:79:02:a2:62:1d:7d:
                    18:16:f5:62:51:ee:36:7b:61:f4:89:48:0e:83:07:
                    ce:a4:f8:c9:89:d4:e6:55:5d:73:2e:aa:f0:30:55:
                    c7:49:7d:8e:3f:d6:9e:5c:c0:a4:06:c5:11:5d:9d:
                    d6:f8:10:97:ed:4e:4a:f0:28:12:7a:4e:03:bf:94:
                    a3:8c:d1:77:a1:21:3e:35:fa:26:ab:d0:6b:bc:c2:
                    0d:08:b4:d0:c4:3a:e3:10:c8:64:69:90:a9:83:03:
                    ec:41:f0:3b:18:96:e4:b9:29:cf:4d:49:28:e1:97:
                    09:84:eb:07:b7:80:86:8b:02:6a:a8:13:d1:23:02:
                    5c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:85:82:D0:EB:71:E7:F1:0B:CF:6F:EA:5B:6C:B7:68:8B:FB:88:18
            X509v3 Authority Key Identifier:
                keyid:16:11:88:A6:16:B6:E0:89:4C:3B:1F:06:BA:F1:8F:C0:F1:E6:4A:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhGIpha24IlMOx8GuvGPwPHmSkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ed1e75-c54d-4158-8b1e-b039a54d124c/1/FhGIpha24IlMOx8GuvGPwPHmSkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ed1e75-c54d-4158-8b1e-b039a54d124c/1/FhGIpha24IlMOx8GuvGPwPHmSkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:83:c5:53:12:d3:f3:34:2b:e6:d4:42:39:d2:95:80:6b:de:
         de:59:c4:ed:7d:d0:8f:9b:a8:32:69:e8:d3:05:d7:b4:0b:c6:
         5e:3b:5a:a0:17:84:49:be:2b:6d:b8:26:92:94:3b:67:f2:d8:
         cd:ab:40:2c:25:b7:30:92:ac:4c:b3:b6:bb:f8:22:ce:11:0a:
         a1:4e:cc:78:ee:e4:2a:22:f2:cb:62:19:9e:7a:6f:0a:73:26:
         0b:c1:a4:db:e0:af:9f:07:8a:f2:c7:5a:32:51:14:88:b5:80:
         f1:fa:44:70:71:78:24:f1:4c:cb:58:d1:f1:15:0e:43:fa:84:
         5e:ef:19:58:c1:24:22:02:5c:f9:4f:39:4b:44:9e:04:4a:40:
         35:ac:54:f3:cd:86:86:c9:c6:87:16:e7:20:69:c0:92:1b:29:
         bb:64:f5:df:3c:ae:e2:e0:f7:23:68:f4:52:42:12:a6:16:3e:
         f9:ab:7a:e4:89:b5:02:27:94:48:a4:2f:52:5c:63:48:b3:a3:
         04:0a:e6:17:93:c4:dc:e8:7a:c0:5e:74:44:e9:4f:3d:bb:4a:
         55:53:56:e6:50:df:b3:68:0e:0b:f9:44:59:7e:be:a3:d1:59:
         11:24:91:b3:9f:9d:fb:f3:a9:b7:1e:a7:28:7a:89:0d:be:f1:
         24:93:7a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:40:02 2026 by rpki-client