Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
File:                     fzP8QNLgMzu8e96rK9hZlUMBwPE.mft (raw, json)
Hash identifier:          ZlBomeJKWazPhohm8D+YZd9JlKxiNWkIDlrH3DiHQQc=
Subject key identifier:   3F:5B:B9:E5:36:0B:DF:3E:4E:1C:18:42:12:23:C7:92:AE:6C:3C:AE
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Certificate issuer:       /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial:       01A14428C2E13681C467C606D92AF5506F09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
Manifest number:          09F1
Signing time:             Fri 16 Oct 2026 10:01:24 +0000
Manifest this update:     Fri 16 Oct 2026 10:01:24 +0000
Manifest next update:     Sat 17 Oct 2026 10:01:24 +0000
Files and hashes:         1: Sf-sGZmEyDoaaQBSolDf0T5Zlzg.roa (hash: clgOLfDosWYDvBNQpvRzT03uYQs9EulKVPuKsnJ+7Yg=)
                          2: fzP8QNLgMzu8e96rK9hZlUMBwPE.crl (hash: GYqh9SWZhkIU7UT8RF9JShXls8i5NIEwBKxsquTRD0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 10:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:44:28:c2:e1:36:81:c4:67:c6:06:d9:2a:f5:50:6f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
        Validity
            Not Before: Oct 16 10:01:24 2026 GMT
            Not After : Oct 17 10:01:24 2026 GMT
        Subject: CN=3f5bb9e5360bdf3e4e1c18421223c792ae6c3cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c2:25:88:af:ca:50:44:31:a3:05:92:1d:a4:
                    50:51:e6:e7:22:63:bb:26:2d:13:61:8f:59:03:da:
                    ab:c2:ba:4a:f2:b5:b0:73:d0:9f:b4:66:af:9f:b2:
                    b7:29:84:a7:92:4c:4d:71:2d:e4:67:da:b7:97:f7:
                    aa:15:46:0b:cd:38:6e:a7:e8:05:0f:de:3c:fd:23:
                    3f:b8:d4:d0:f8:da:26:48:54:cc:32:8b:05:eb:1f:
                    9c:5f:de:c0:17:25:c2:a4:75:bf:8c:eb:ea:8e:62:
                    5a:ad:bf:4b:70:17:dc:68:1a:2f:73:ae:fd:30:9b:
                    c5:2f:20:2c:33:a4:ae:a8:d7:df:d0:e9:17:b3:97:
                    cd:cf:2d:6e:82:0c:bf:82:5b:43:00:e6:a1:a7:5e:
                    bb:6d:03:e0:b8:0d:6f:4d:81:85:b6:29:27:a6:dd:
                    c0:53:23:9d:d5:1f:f9:8d:f6:17:07:fe:5a:23:58:
                    eb:6f:a0:5a:bb:f3:4d:dc:3d:79:8f:76:3f:84:e8:
                    df:4a:24:0d:b3:be:94:dd:d0:1a:7f:a1:2e:bb:4b:
                    44:a5:d1:98:91:cb:86:f4:ec:b5:ee:30:11:a3:78:
                    60:ff:3b:5b:ec:79:76:f2:25:9a:2a:b6:45:0c:83:
                    2f:b0:80:36:50:06:ce:95:44:d2:5b:b4:a4:88:73:
                    95:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5B:B9:E5:36:0B:DF:3E:4E:1C:18:42:12:23:C7:92:AE:6C:3C:AE
            X509v3 Authority Key Identifier:
                keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d7:d1:24:fe:73:93:91:0c:bb:d2:59:2a:58:33:a5:df:6f:
         cc:be:70:d1:d5:8d:c2:7d:df:c6:59:78:62:56:65:d5:97:92:
         e0:12:de:da:33:fb:62:e0:d0:e3:f1:9e:ba:0a:14:8e:52:9c:
         48:86:d8:1f:92:9a:6a:20:95:af:61:31:06:48:7c:2f:64:2e:
         0a:6a:a0:01:01:94:73:f1:68:ff:d8:7a:7d:68:12:93:ea:bd:
         c2:ec:79:9f:8d:c5:77:e4:c6:ef:b1:09:55:bc:ce:90:ad:2f:
         01:4a:3f:64:bc:7c:ad:01:ad:c4:8c:39:26:d2:99:62:22:55:
         78:fd:31:50:53:a6:e0:7a:b7:ea:ba:ba:dc:27:71:71:32:86:
         ff:e5:7b:42:e2:32:ed:ba:10:7f:b7:38:37:16:b8:38:a2:08:
         11:fc:9a:2e:71:53:c2:c3:98:c6:0e:c4:92:16:04:9e:8a:67:
         23:ae:70:82:87:0b:0b:02:ec:e2:42:19:56:62:4a:98:7c:59:
         37:df:dc:ae:99:bf:3f:e6:9f:25:c7:be:45:f6:86:71:c4:2a:
         99:69:5c:52:6d:73:bf:ad:b7:ff:fe:c1:46:71:cf:af:a0:88:
         e8:57:ef:b9:f4:9f:69:8b:29:3b:03:56:05:b8:bf:b1:ec:a5:
         0d:a6:e3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:42:45 2026 by rpki-client