Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
File:                     FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json)
Hash identifier:          lT4cns3blzhPXDDft3ruYAcl9fh63W8CcF5e5uviuVM=
Subject key identifier:   1D:4B:FD:03:65:B3:59:E5:18:53:2D:20:31:B0:D3:22:3D:FC:62:E4
Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
Certificate issuer:       /CN=14d4210a344c999493e61cf9dd735677d38bc05d
Certificate serial:       01A0995AED70CE591413DE47841303046D74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
Manifest number:          0BD3
Signing time:             Sun 13 Sep 2026 06:01:08 +0000
Manifest this update:     Sun 13 Sep 2026 06:01:08 +0000
Manifest next update:     Mon 14 Sep 2026 06:01:08 +0000
Files and hashes:         1: 3Ar2XyUYMweTk8EKwl8UseYrYE0.roa (hash: e5PBA+QHrdK8UegyVXOovBxHSL9kzq5+vsNWxUzz/VA=)
                          2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: VOL1uDOGz363kq3bcTLwCGybx8596Lz9y/R6XKxrD2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Sep 2026 03:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:99:5a:ed:70:ce:59:14:13:de:47:84:13:03:04:6d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d
        Validity
            Not Before: Sep 13 06:01:08 2026 GMT
            Not After : Sep 14 06:01:08 2026 GMT
        Subject: CN=1d4bfd0365b359e518532d2031b0d3223dfc62e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f8:a8:de:ad:0e:0e:99:c1:4e:90:a2:18:13:
                    08:99:5b:ed:e8:f3:c8:0d:bf:91:bc:f8:0a:c5:39:
                    cf:96:d9:52:76:af:02:62:89:49:40:81:25:26:81:
                    aa:f4:f7:19:99:68:70:b3:6e:ee:af:44:36:cd:15:
                    b1:cf:4d:fb:dd:62:9e:76:ba:f7:99:ea:9d:ed:e9:
                    96:aa:e0:aa:91:a9:7b:2e:d4:35:26:2f:29:1f:78:
                    89:d6:ea:e4:0b:47:25:94:28:d3:71:3a:9d:0c:4c:
                    f0:1b:52:a9:80:b0:76:20:a6:48:bb:c3:d4:08:51:
                    0c:b9:ce:d1:23:c6:ae:92:09:95:a9:be:8f:63:dc:
                    b1:0d:38:ff:92:ea:65:ba:fb:ed:c7:c5:a7:38:b0:
                    56:e9:62:87:21:df:39:37:29:8f:a0:d9:fb:da:8e:
                    25:31:29:b2:45:fe:0f:af:0d:aa:d6:85:3d:48:b2:
                    bb:1d:85:0f:77:16:53:49:82:c8:98:31:a1:07:6f:
                    e4:01:49:d4:a9:49:06:0b:67:60:eb:6c:f9:f2:98:
                    0a:25:a1:1e:f6:b2:d9:b3:fe:e7:d3:3a:68:52:f7:
                    1a:83:94:0d:26:02:f1:14:d6:34:cf:2c:9e:07:2b:
                    c8:69:a2:f3:0d:ec:84:9f:75:93:d4:5d:fb:0f:20:
                    23:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4B:FD:03:65:B3:59:E5:18:53:2D:20:31:B0:D3:22:3D:FC:62:E4
            X509v3 Authority Key Identifier:
                keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:40:8c:af:0c:95:71:26:6f:65:0c:fc:f5:92:b7:98:cc:5e:
         32:03:8f:0b:19:64:5f:39:de:4b:39:a8:e8:da:51:70:c6:f3:
         97:6a:c3:9b:cd:0d:69:16:14:3a:8c:9a:e5:19:29:f8:56:7d:
         07:d1:df:db:bc:a0:79:25:6e:bb:7d:68:16:6a:5a:24:66:a8:
         92:7f:7c:dd:e1:2f:06:c7:8a:82:88:3a:10:4a:50:92:0e:f1:
         c9:31:29:2f:92:3e:e8:a9:ac:bf:5c:14:f6:10:c9:d4:0b:35:
         79:1c:55:ed:eb:cf:b7:6f:d8:2a:d4:05:76:0c:b0:c7:68:7f:
         a5:a7:d0:e3:e4:71:99:c1:eb:9f:75:71:94:6f:d8:10:5a:75:
         23:b0:72:33:11:cf:6b:f5:90:fd:69:fb:b0:c1:d8:4a:a2:68:
         46:14:d8:e1:89:8b:30:4e:2d:e8:34:cf:49:b8:ad:e0:21:24:
         dd:42:ba:8d:3b:89:81:40:7f:a3:67:f0:1f:f1:88:68:46:ce:
         b1:75:48:39:dc:8d:2c:4b:06:5f:2a:8b:9a:de:52:30:cf:f4:
         c5:90:c6:6b:3d:2e:06:2a:5b:1f:23:34:62:84:33:11:fc:a3:
         db:3b:94:c9:c9:5d:fb:aa:2e:a3:a5:59:f5:fb:1e:6f:75:6c:
         fb:bd:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:35:22 2026 by rpki-client