Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
File:                     F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json)
Hash identifier:          lD2habPqeDHrfFb6NyBBCSLmC8b0hBCBa6UZDwRygjQ=
Subject key identifier:   34:8B:0E:F4:4E:CD:D8:43:82:8F:FF:87:48:F0:3C:1D:2B:31:94:AB
Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Certificate issuer:       /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Certificate serial:       01A08B68D1FB21CCDF64F8B4D6FEFBBD60C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
Manifest number:          07C0
Signing time:             Thu 10 Sep 2026 13:01:37 +0000
Manifest this update:     Thu 10 Sep 2026 13:01:37 +0000
Manifest next update:     Fri 11 Sep 2026 13:01:37 +0000
Files and hashes:         1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: buOSuz1/cxz7lvJSxcbhZm+7fo8UN4xhxZn95UoMGzA=)
                          2: iQGTd2WXoLVwRsQ_8nC_udEAF7E.roa (hash: Xe100ccFvMhNIhN2VUssDCNyo4J+LE95jPp43mX4rJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:68:d1:fb:21:cc:df:64:f8:b4:d6:fe:fb:bd:60:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
        Validity
            Not Before: Sep 10 13:01:37 2026 GMT
            Not After : Sep 11 13:01:37 2026 GMT
        Subject: CN=348b0ef44ecdd843828fff8748f03c1d2b3194ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bb:e6:e6:95:03:cd:69:87:c5:a8:ad:a1:83:
                    5a:ce:be:b1:92:3f:55:cf:f5:d8:57:60:e4:6d:25:
                    77:6f:ad:a5:65:dc:11:0d:2a:46:b8:3a:d1:81:8c:
                    4b:0e:65:c9:87:53:d8:32:f4:b2:ac:0f:09:43:89:
                    01:2c:3b:af:6c:43:60:20:48:f4:4f:a1:bc:d0:8c:
                    0b:de:a9:27:a6:e2:9d:07:a7:3c:ac:00:fa:1a:26:
                    05:40:1c:25:0f:64:e5:f6:28:9a:7b:bc:9e:80:9c:
                    e5:eb:78:ed:32:33:dc:2c:c0:a5:95:1a:da:cb:37:
                    1e:dd:03:98:82:50:e0:08:af:c7:27:a2:16:dc:ef:
                    b2:10:fb:84:ad:21:fc:b6:40:4e:05:8f:da:42:f1:
                    0c:7d:81:dd:0c:6c:8d:8e:07:5e:d7:9b:34:7b:94:
                    f0:c8:f1:08:cd:fb:59:12:02:a5:93:76:a2:d7:4c:
                    ff:c0:34:c2:3a:c3:49:ac:9b:04:6c:8f:66:66:5b:
                    8e:f0:88:1d:67:af:aa:c6:53:58:d4:6e:b6:44:e2:
                    35:b7:b7:88:30:63:03:d1:63:91:51:f3:91:25:15:
                    c2:53:79:d1:a6:70:c5:c3:14:4f:53:2b:43:69:90:
                    ef:7a:02:e4:71:a7:e9:46:95:8c:28:73:b1:53:34:
                    f5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8B:0E:F4:4E:CD:D8:43:82:8F:FF:87:48:F0:3C:1D:2B:31:94:AB
            X509v3 Authority Key Identifier:
                keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:2c:e1:f1:81:30:ae:d5:dc:05:bf:26:db:d2:93:45:f0:f0:
         b0:be:0a:43:7d:e2:92:d1:67:fd:a4:4e:84:1a:67:aa:d3:3c:
         4f:2d:86:41:36:20:db:11:f2:cb:e2:53:38:bd:9a:73:b5:47:
         90:b6:ff:f0:a1:8d:a1:90:8e:61:ea:d5:c3:90:d4:31:ff:26:
         90:21:12:7a:4e:6e:87:c9:e3:a2:44:32:12:4e:d8:26:b0:ab:
         26:f5:35:70:cc:6f:e5:52:48:ab:8d:a0:ea:2e:0c:b1:70:2a:
         44:6d:0f:f1:35:51:3b:23:b8:58:95:71:10:11:67:51:4a:62:
         07:7d:2d:79:39:b1:67:61:7f:b2:d6:87:27:98:e0:17:a0:73:
         9f:a0:c7:4d:90:06:96:9b:b2:9d:80:a1:88:4d:19:c9:a6:4b:
         6c:41:6d:77:9e:b9:b6:46:ef:82:d9:9a:de:aa:06:d2:b9:c1:
         d6:6f:70:de:12:f0:a7:fb:74:7b:f8:1e:53:eb:6c:d7:56:47:
         c2:15:d9:e0:e5:92:39:4d:11:ba:4f:64:cc:bf:dd:88:76:1d:
         7d:ed:0a:09:75:91:6f:44:bf:b4:c0:26:a4:e5:0a:b3:32:99:
         d2:6d:cb:c4:ce:86:29:3f:6d:11:2a:31:60:c8:b4:47:79:89:
         53:19:fe:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:50:22 2026 by rpki-client