Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.mft
File:                     FZLn4r66W82NQp2b7lN2sIEEdas.mft (raw, json)
Hash identifier:          vW8o1MSzGFxpa6IqiHSsKoAPRdjL0GHbr2cfxxWkz4g=
Subject key identifier:   F4:05:47:5B:5C:7B:ED:58:FD:3A:53:02:AC:99:7E:3B:DB:1A:BA:9D
Authority key identifier: 15:92:E7:E2:BE:BA:5B:CD:8D:42:9D:9B:EE:53:76:B0:81:04:75:AB
Certificate issuer:       /CN=1592e7e2beba5bcd8d429d9bee5376b0810475ab
Certificate serial:       01A1212E526F7CE101E2A85898F94D7696C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZLn4r66W82NQp2b7lN2sIEEdas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.mft
Manifest number:          010F
Signing time:             Fri 09 Oct 2026 15:00:46 +0000
Manifest this update:     Fri 09 Oct 2026 15:00:46 +0000
Manifest next update:     Sat 10 Oct 2026 15:00:46 +0000
Files and hashes:         1: FZLn4r66W82NQp2b7lN2sIEEdas.crl (hash: D7w0wW7rQv38ZRs28DXE33AohHlYEpCDHzz1fDbooa0=)
                          2: tVmxzUAxVXy4qWT2LiFbf_CGLYs.roa (hash: Ga9D1Kj+eOQFH1ST/P7sI0dH985uIKk/1LYCPBqpD78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZLn4r66W82NQp2b7lN2sIEEdas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:21:2e:52:6f:7c:e1:01:e2:a8:58:98:f9:4d:76:96:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1592e7e2beba5bcd8d429d9bee5376b0810475ab
        Validity
            Not Before: Oct  9 15:00:46 2026 GMT
            Not After : Oct 10 15:00:46 2026 GMT
        Subject: CN=f405475b5c7bed58fd3a5302ac997e3bdb1aba9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:15:de:9e:cd:f5:b3:8e:9c:81:b4:86:c8:
                    85:f3:28:8b:9b:f0:39:ce:aa:0a:88:ae:c4:32:ae:
                    cd:35:00:29:f2:8b:20:b1:7a:ea:76:59:f9:a8:92:
                    ea:9b:0a:6e:e3:ce:18:97:ab:e9:4d:71:cf:65:a8:
                    3d:f8:ed:27:6a:ad:ab:0f:04:84:23:2f:b6:99:7f:
                    ed:40:97:30:b9:5c:09:bd:4d:67:7c:41:28:fe:40:
                    05:95:c7:71:48:30:0c:0e:f8:64:85:40:03:e2:f8:
                    3b:74:ea:9b:c3:56:f8:ee:a3:ee:ed:33:11:b9:fa:
                    b1:25:e5:c3:c8:2c:99:09:e1:6a:56:42:0a:4d:ec:
                    14:06:c0:50:4d:92:3a:c0:b5:38:22:b6:aa:e8:d1:
                    1a:7f:5a:fb:95:90:ec:d9:dc:90:0b:1b:40:44:04:
                    4d:f6:41:64:56:fb:65:e9:01:59:66:cc:b3:a8:46:
                    6e:d2:b5:fe:2e:af:d8:83:30:d2:be:a9:e2:8b:e4:
                    5b:f5:8c:2a:43:59:ef:1e:7e:7e:0c:66:06:1f:2c:
                    35:17:6a:17:fb:d1:22:34:14:77:dc:09:1f:8a:f3:
                    e4:ff:bd:47:3b:2e:7d:5f:ed:38:ab:d8:44:fe:78:
                    97:45:26:10:7e:a2:b5:b1:72:1b:fc:d7:e5:5f:bf:
                    46:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:05:47:5B:5C:7B:ED:58:FD:3A:53:02:AC:99:7E:3B:DB:1A:BA:9D
            X509v3 Authority Key Identifier:
                keyid:15:92:E7:E2:BE:BA:5B:CD:8D:42:9D:9B:EE:53:76:B0:81:04:75:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZLn4r66W82NQp2b7lN2sIEEdas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:89:09:8f:b8:fe:20:10:03:6a:c7:8d:37:de:d6:8c:6c:4c:
         77:9b:fa:af:c9:d2:f0:87:8d:07:c4:60:37:5e:c4:30:c8:c5:
         f5:fc:21:0b:09:90:b6:bd:52:2f:19:b1:01:b1:ae:c7:96:c9:
         58:ed:8a:1d:2f:3c:b2:c5:72:6c:1b:88:5c:9d:66:85:f8:8a:
         d6:cc:17:e3:74:e8:08:48:63:96:42:c4:f4:e7:9c:67:aa:bf:
         98:51:ac:00:27:4a:29:a1:94:d0:75:26:0a:3c:bd:d4:bb:17:
         5f:bd:b5:2e:b0:ee:75:91:00:89:1b:89:98:ae:1a:be:51:3f:
         5e:1b:d7:7c:69:31:c4:fe:41:2c:fc:98:3c:b9:57:a5:a0:43:
         df:00:87:c8:f2:33:a6:7e:3b:74:26:aa:96:6b:05:65:58:a2:
         3c:a4:cd:64:ad:2d:32:6d:7b:40:09:39:47:1e:5c:f9:f0:69:
         ae:85:01:04:21:74:ba:ee:f0:e0:07:8c:26:2c:ab:65:f0:e4:
         21:00:46:fc:b0:7e:fb:6b:16:71:46:cc:98:0c:3b:7a:be:20:
         81:d4:8a:3c:bd:b7:39:83:0a:f3:22:b1:58:5f:f7:99:bc:f6:
         2e:a3:90:5a:08:f4:d1:33:b9:6b:83:31:28:12:3d:be:60:63:
         a9:8d:e4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:35:18 2026 by rpki-client