Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File:                     FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier:          OqvrztPH+0w/kZMUkkv4CBPUnMySKCbDPkHdvJ/L35A=
Subject key identifier:   33:3B:A0:24:F7:29:6F:37:A6:17:B3:7C:12:21:BA:42:96:2E:2A:E9
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer:       /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial:       01A00394A35D37F8920F2D57EA3FD9B69E13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number:          0EB9
Signing time:             Sat 15 Aug 2026 04:01:07 +0000
Manifest this update:     Sat 15 Aug 2026 04:01:07 +0000
Manifest next update:     Sun 16 Aug 2026 04:01:07 +0000
Files and hashes:         1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: rMgLE91f0sbju2lBNAOAp0JKu4fCzQur+uyS23KaCl4=)
                          2: T6VuejcSwQHcI3KFBiZd8wLzDvA.roa (hash: zfY7Xe3vIsOwV9FdjgHpzNPpOrKaPMqNVGOPvCJExjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:94:a3:5d:37:f8:92:0f:2d:57:ea:3f:d9:b6:9e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
        Validity
            Not Before: Aug 15 04:01:07 2026 GMT
            Not After : Aug 16 04:01:07 2026 GMT
        Subject: CN=333ba024f7296f37a617b37c1221ba42962e2ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:f9:7f:55:e1:2b:35:1a:06:7a:c6:c3:7f:
                    f5:87:1a:2b:bf:1e:04:45:8a:c7:6a:1c:e4:c5:e3:
                    d9:cc:98:e5:65:4e:ae:62:4b:52:42:10:3e:13:75:
                    fc:4b:5e:4a:36:38:a0:3a:f1:e6:23:07:04:1b:c4:
                    04:80:db:c0:be:f7:d9:9a:85:f8:5f:3e:bb:0d:cb:
                    64:25:7c:2a:b9:7b:9b:c6:9f:8d:23:07:39:f5:9a:
                    33:4a:23:41:37:58:f1:df:99:3d:0b:2f:7b:a8:c4:
                    f3:7f:0e:94:07:a2:dc:af:27:60:83:40:a7:46:b8:
                    62:7b:94:b9:34:c5:f8:84:a8:00:0d:9d:a7:68:ff:
                    d8:bb:67:55:9c:78:b0:24:b6:b6:b3:3e:ec:12:4b:
                    0b:f1:d9:59:9f:40:b2:b2:7f:0f:16:4b:36:c8:87:
                    8b:c4:65:71:60:8e:e0:99:73:bf:89:63:55:06:18:
                    2e:28:4d:a2:40:b7:8f:f1:86:41:8b:16:0f:d0:97:
                    9e:65:70:3e:9a:7f:bd:d0:b4:f3:a7:05:38:a6:38:
                    b2:f8:6b:1a:32:47:59:4b:a7:59:f6:97:6b:63:12:
                    23:e3:6f:7f:3a:d7:8a:cd:00:37:17:e6:cf:f2:42:
                    5b:43:41:c5:2c:ef:6e:1f:80:37:5f:61:bb:b9:97:
                    5c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3B:A0:24:F7:29:6F:37:A6:17:B3:7C:12:21:BA:42:96:2E:2A:E9
            X509v3 Authority Key Identifier:
                keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:c7:c5:56:bd:3c:15:c7:56:40:bc:ac:cf:0d:f6:b3:65:df:
         e1:5c:d3:66:2f:b0:1b:f8:c0:0e:89:61:39:da:c6:79:56:b6:
         23:5f:ce:aa:e9:9e:6f:be:90:54:38:4a:71:05:21:21:65:61:
         be:fe:95:32:6d:8f:ad:73:c1:ba:b4:8e:e8:58:28:65:e7:8e:
         91:33:36:d8:3f:ab:be:9f:cb:de:21:76:58:97:5d:e2:a0:29:
         ca:95:0e:5e:9b:44:55:7f:57:2a:c3:d2:b3:4e:f8:08:2d:5e:
         13:20:0d:3d:d2:c2:19:82:57:bc:6b:b4:f0:41:52:46:73:ae:
         28:bd:19:c0:df:e2:e0:62:00:4a:6d:b9:47:0a:21:e3:f1:d4:
         30:23:9a:b2:5a:ad:8e:cb:a8:80:a8:81:ed:4c:47:47:81:f6:
         75:a7:01:19:da:3d:72:50:9b:c5:8d:21:2a:db:83:b9:e5:e4:
         0f:f1:0b:f4:ca:39:38:11:cd:b6:2a:19:52:a1:68:8d:e9:37:
         a6:9d:be:56:68:a8:6d:bf:77:76:7a:20:73:64:2d:ca:d8:42:
         06:c5:5a:18:ce:69:cb:cc:96:8f:b4:9a:9e:e2:ca:c6:6f:33:
         28:0c:93:16:42:5d:2d:ae:ae:78:f4:ca:aa:36:98:91:ed:88:
         d0:a8:64:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:56 2026 by rpki-client