Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File:                     fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier:          25LxyVi/Oe5H+cFD9nLb2LdwRgRsZNmJMWQUiuy5p5I=
Subject key identifier:   14:BD:8C:B5:CA:12:DE:D2:F1:DF:FC:00:59:21:AD:9E:D5:DD:5A:3A
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer:       /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial:       01A06EA7DE3E96FF2E91B66A27AC037AD2CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number:          16E4
Signing time:             Fri 04 Sep 2026 23:01:30 +0000
Manifest this update:     Fri 04 Sep 2026 23:01:30 +0000
Manifest next update:     Sat 05 Sep 2026 23:01:30 +0000
Files and hashes:         1: M81Qxbtts07Ib9z19i7shUVMtA8.roa (hash: 5AYY2qI7GMcPmUPABkZnqwFbbIzTbjv6m+OqVwWCrM8=)
                          2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: cO7uL47ikGI3PFqK/iEMdk/FIyE9z1HGQvv/IvYhtpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a7:de:3e:96:ff:2e:91:b6:6a:27:ac:03:7a:d2:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
        Validity
            Not Before: Sep  4 23:01:30 2026 GMT
            Not After : Sep  5 23:01:30 2026 GMT
        Subject: CN=14bd8cb5ca12ded2f1dffc005921ad9ed5dd5a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4d:ef:d1:bf:e4:a7:cf:15:d5:c9:fa:f7:42:
                    0b:51:b7:0f:f2:f1:0d:54:be:d7:eb:58:f4:77:82:
                    4d:83:96:9c:55:4b:59:41:0d:17:20:fe:39:21:5b:
                    af:3b:7f:71:33:6a:45:99:d0:64:c2:88:e3:40:be:
                    35:4a:9a:6f:45:47:2f:2b:39:e3:3e:0e:bd:68:bb:
                    34:36:ba:b2:13:ed:9d:c2:b3:de:1a:e3:ea:85:85:
                    fd:ce:53:35:88:fd:fb:3f:a2:c0:b9:3d:a7:f6:69:
                    50:d5:17:ee:12:e1:fd:c1:7d:85:a6:68:d7:05:40:
                    66:c3:dc:2f:b5:80:7f:e5:f3:5d:d1:8c:53:05:5b:
                    eb:96:83:66:0f:79:6d:f8:a6:11:de:dc:b1:bc:23:
                    95:8f:3a:57:46:90:ae:9a:3b:40:cc:e4:78:39:10:
                    16:25:bc:2a:69:67:55:2a:d6:d1:f5:7e:2c:db:eb:
                    27:36:87:5e:19:f1:65:55:03:47:05:8a:f0:00:bb:
                    21:83:21:ab:87:45:e1:61:e0:91:ad:31:3a:dc:de:
                    51:01:d1:ae:8b:0b:31:7f:fd:3c:22:66:aa:5b:04:
                    29:8a:86:20:a4:65:e8:bd:7a:e4:f6:f0:3a:6d:f8:
                    06:85:49:5e:f0:a9:be:38:e7:13:ba:38:11:ff:e4:
                    81:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BD:8C:B5:CA:12:DE:D2:F1:DF:FC:00:59:21:AD:9E:D5:DD:5A:3A
            X509v3 Authority Key Identifier:
                keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:af:71:7f:83:70:fe:65:93:c2:75:36:8d:69:0d:24:87:ff:
         86:ad:11:f1:6e:8d:b8:4a:13:a2:6f:2a:f0:8a:71:63:a5:ba:
         d6:b0:c8:c2:41:77:9a:bc:dd:92:84:74:3b:0b:e8:20:ca:15:
         66:20:71:fa:c1:25:c2:cf:e2:44:91:99:45:5e:9f:52:97:f4:
         8c:f0:28:7c:03:ed:15:78:a2:5e:14:f2:3e:48:9a:b8:a2:a9:
         8f:8d:a6:c4:73:b4:d2:af:41:66:a4:98:f6:85:f7:0c:ac:82:
         7f:ee:e0:e3:8c:04:7b:00:e3:2e:b5:bd:11:5b:f2:b2:49:93:
         ef:11:0b:49:72:e0:01:7c:f7:29:28:a8:bc:a5:79:b7:32:78:
         43:10:40:40:a0:6f:8a:af:53:a8:c6:22:9b:e3:6a:e8:2c:23:
         d4:22:66:6e:cd:32:fb:b6:b1:01:cb:e1:1d:96:7e:8d:c8:7a:
         18:0e:7f:68:7d:96:28:d2:5a:80:af:30:d6:db:76:da:d4:65:
         86:f9:66:80:a9:db:df:f6:4c:3f:bd:e0:47:6c:a2:71:0e:c9:
         9d:d4:1f:92:25:c4:97:ba:4e:d1:71:1a:ed:fd:a4:d3:d9:b3:
         ac:7c:a8:32:79:df:e5:dc:d2:0b:fb:46:ed:ec:4e:31:4c:a2:
         a4:e6:56:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:18:14 2026 by rpki-client