Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.mft
File:                     w6uBXAlcSeUjkHwrRhKXcJemuFg.mft (raw, json)
Hash identifier:          6huhxZeZ4nz6KET01j6y6SUNzOZXClOOau5HRTL6FaY=
Subject key identifier:   B1:FC:7F:FF:87:CD:78:05:03:00:AD:A1:3D:AA:86:35:85:8C:E0:E8
Authority key identifier: C3:AB:81:5C:09:5C:49:E5:23:90:7C:2B:46:12:97:70:97:A6:B8:58
Certificate issuer:       /CN=c3ab815c095c49e523907c2b4612977097a6b858
Certificate serial:       01A0FC7DA4AF3C4E7B6B5B2141F3117D731A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6uBXAlcSeUjkHwrRhKXcJemuFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.mft
Manifest number:          FC
Signing time:             Fri 02 Oct 2026 12:01:27 +0000
Manifest this update:     Fri 02 Oct 2026 12:01:27 +0000
Manifest next update:     Sat 03 Oct 2026 12:01:27 +0000
Files and hashes:         1: cF65Y72OTkUIe_PM4Wd1M3sisbs.roa (hash: oVz1TLgu7Q2K4UrameIrD6zZiFY59GSx7iKcM+J23ds=)
                          2: w6uBXAlcSeUjkHwrRhKXcJemuFg.crl (hash: 067BLsKgICzuji/xEBPHwYN2zq1f0r0VCln44whRm6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6uBXAlcSeUjkHwrRhKXcJemuFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fc:7d:a4:af:3c:4e:7b:6b:5b:21:41:f3:11:7d:73:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3ab815c095c49e523907c2b4612977097a6b858
        Validity
            Not Before: Oct  2 12:01:27 2026 GMT
            Not After : Oct  3 12:01:27 2026 GMT
        Subject: CN=b1fc7fff87cd78050300ada13daa8635858ce0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:92:ad:07:db:74:6f:e5:29:45:12:ae:2e:b3:
                    12:32:c5:06:32:12:46:a0:08:32:15:31:39:1c:76:
                    9c:88:4f:36:31:12:74:fd:b4:11:dc:ec:e9:e6:fe:
                    bd:62:11:af:c1:41:a3:0b:6c:89:25:37:d1:0f:08:
                    14:36:28:04:e3:52:37:df:4d:cf:aa:d7:e3:c7:3c:
                    e5:2d:a6:55:7e:fa:c6:90:10:a0:f3:62:98:63:0f:
                    06:38:a5:33:09:79:51:67:57:d4:93:75:84:0a:d7:
                    57:03:20:0e:5e:ee:74:a5:9b:5e:4d:07:37:69:b3:
                    8a:7e:f4:e4:4b:3c:b1:e3:45:c2:18:68:2c:7d:c6:
                    ba:a5:7f:53:d7:67:0e:01:ec:b6:6d:ae:de:9a:f7:
                    d2:49:d3:73:f6:ca:a2:fc:a8:ef:d5:ec:f4:bb:ab:
                    8c:40:54:a6:93:e4:f3:f5:49:d5:39:99:61:8f:1a:
                    3c:5e:a2:c8:ab:32:0f:75:9d:26:10:35:35:ee:e1:
                    39:8c:84:e1:63:d9:67:4d:13:39:b6:05:a5:51:e2:
                    5e:4b:f4:f6:97:54:ec:8c:b1:86:b0:45:47:03:b4:
                    64:58:78:55:af:19:ab:1f:dc:59:da:54:b7:39:28:
                    49:f9:2d:68:7b:55:79:7f:e4:64:d0:95:b1:a8:fd:
                    0c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FC:7F:FF:87:CD:78:05:03:00:AD:A1:3D:AA:86:35:85:8C:E0:E8
            X509v3 Authority Key Identifier:
                keyid:C3:AB:81:5C:09:5C:49:E5:23:90:7C:2B:46:12:97:70:97:A6:B8:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6uBXAlcSeUjkHwrRhKXcJemuFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:15:79:11:fd:6e:11:21:61:e2:c6:5b:21:c5:bd:51:ca:af:
         77:3d:61:01:0d:21:50:8c:50:a5:f2:cf:4b:04:aa:3a:eb:02:
         83:47:75:97:d4:b2:8c:2a:1a:e8:b7:4c:7e:c6:6c:fe:a9:9b:
         e5:c7:28:c7:2a:44:67:ee:ab:e4:07:19:d2:9b:dd:56:03:e4:
         b2:d8:18:2b:10:c5:66:a7:c0:f6:d4:dd:71:48:f9:64:b9:2e:
         fa:ed:7b:c9:bc:d2:27:8b:47:26:cd:b5:24:d5:4e:f6:1b:f1:
         97:2f:52:38:b4:01:67:be:d2:08:70:d1:45:fb:46:a7:cc:1e:
         d9:60:ad:36:02:a4:7d:59:04:46:89:22:ad:b2:ce:e7:80:0d:
         91:97:d4:ab:e9:2a:1f:3d:22:8f:fa:7f:c5:dd:13:5d:cb:22:
         06:db:be:99:ad:3b:87:2e:38:36:a0:bc:da:af:02:ef:db:d6:
         ab:c9:45:67:26:9d:f3:10:f3:bf:10:d4:12:92:50:fb:a9:84:
         bb:48:b9:6a:ff:89:05:86:df:23:39:42:29:4e:49:36:17:2b:
         c1:cc:d0:f6:be:5a:a7:ea:68:44:25:55:15:2c:30:bd:11:67:
         20:dd:f4:7d:ef:f9:2d:d0:ab:b7:a3:09:52:28:77:7a:09:ff:
         56:69:5b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:55:02 2026 by rpki-client