Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File:                     FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier:          qIfImaF8n0yZNaMumi2Wz3bOkMxEUU5otjNGMNTgU9s=
Subject key identifier:   EE:15:2C:29:F4:3F:07:BC:7D:8A:10:07:73:2B:DF:39:39:47:BF:5B
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer:       /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial:       01A06E030B506B84FB6A1EC733CD2A37110C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number:          0A95
Signing time:             Fri 04 Sep 2026 20:01:28 +0000
Manifest this update:     Fri 04 Sep 2026 20:01:28 +0000
Manifest next update:     Sat 05 Sep 2026 20:01:28 +0000
Files and hashes:         1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: 3rWV1YTyR1SzqFS9WKknGbTeHYXpSAb54GjizJzP/8k=)
                          2: H89M_EzTc8StQKIth4lnEHjKKN0.roa (hash: IDhPLp9HDBcx8Hw7u+pzfwTPs8upVVlGQyX+6R34mN0=)
                          3: Kk4HsfGd30im4loLCXTsCFiytPU.roa (hash: oKLzpVpeAoy3QzeCxsxeoWZkV7KJYmzZC8B43Ea48cY=)
                          4: ekGCZNDc9ZOt8-ot2-lgD0_VB3o.roa (hash: FwlalKxI5Tx7qsPfQIKwmFy4fzG691p8g1JAVi3TkPw=)
                          5: mNfJbT_LAkQ7oHjPzi5gOUmJf2k.roa (hash: crQWmizM31tyk+JqRaLmmMrPZUf827PwrlcRDlFZANc=)
                          6: semdbfvd3TfnGahfQ-_MnPsyXVY.roa (hash: K9glb2D2qochPPxOstvTUytekMPlr9ObTuDnHNr8nXk=)
                          7: tDI9go-g4CqghW05S71dg1-pcIU.roa (hash: ziudTSLoj2qHvEkRBq06kMjV08QbQZjdB8rDgu7yyDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:03:0b:50:6b:84:fb:6a:1e:c7:33:cd:2a:37:11:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
        Validity
            Not Before: Sep  4 20:01:28 2026 GMT
            Not After : Sep  5 20:01:28 2026 GMT
        Subject: CN=ee152c29f43f07bc7d8a1007732bdf393947bf5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:79:56:26:dd:35:a7:42:40:1e:f1:3e:c2:53:
                    19:c6:2b:10:82:27:23:19:81:1e:03:fb:6d:39:be:
                    41:a8:c8:9b:96:4b:d8:dd:97:70:85:2c:12:4d:b9:
                    72:ca:98:ab:40:97:58:74:ce:b0:8e:d8:33:d9:44:
                    0e:ef:1f:7d:a2:70:22:98:cc:c4:bb:30:65:a9:50:
                    61:57:5d:0e:06:14:fc:56:c4:38:3b:34:b6:39:64:
                    16:c7:55:75:a5:12:7b:79:08:d2:eb:e7:7d:c6:50:
                    3b:13:8a:3f:43:ba:23:28:fd:1d:e3:d8:7a:cc:32:
                    5b:a1:89:3e:46:26:23:bb:fe:8b:22:71:cb:09:13:
                    e7:96:94:33:7f:0f:7c:f3:21:67:59:37:f5:31:00:
                    17:40:46:ca:59:a2:ee:91:6f:af:e1:5c:5a:46:f4:
                    09:1d:b8:ab:e5:cc:49:20:ad:c0:76:7c:08:fe:89:
                    a1:a3:c1:cf:e8:57:9e:20:c0:f6:56:7f:55:f6:31:
                    fd:af:99:31:81:5b:b8:15:86:b9:73:0e:0d:7b:78:
                    d7:1e:d8:84:da:68:c0:ca:f9:63:bc:13:65:99:08:
                    49:1a:c7:b2:34:57:a0:d8:90:75:2a:87:28:89:a3:
                    aa:83:c1:3c:70:34:d4:3f:66:e3:be:27:50:da:78:
                    96:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:15:2C:29:F4:3F:07:BC:7D:8A:10:07:73:2B:DF:39:39:47:BF:5B
            X509v3 Authority Key Identifier:
                keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f6:79:71:b0:4d:8a:36:63:16:ee:97:14:4a:ac:db:49:ea:
         22:9b:d1:fc:61:d6:f1:ef:17:18:9a:86:c1:5c:c8:57:bd:f9:
         32:21:95:53:a9:d5:85:61:1d:dd:6d:2b:06:60:f6:c2:e4:70:
         19:82:a5:78:89:43:f8:d1:d8:c2:cd:ee:f7:42:77:62:8e:69:
         58:c3:5c:bf:7d:9c:1e:40:ce:30:cc:cc:10:d3:46:fd:19:3e:
         35:8a:e9:fb:3f:2f:d8:86:30:35:46:3a:d6:db:b5:22:e9:8d:
         99:63:bd:a5:34:da:1e:ee:7e:d2:77:cc:3a:ad:a5:35:86:a7:
         ee:56:0d:d0:ca:4e:59:e6:cf:7b:5d:a9:71:c2:f4:6b:c3:f9:
         a5:72:cb:01:98:ca:f9:7e:4c:a2:05:da:c8:ca:28:83:4e:db:
         15:60:72:ac:20:db:92:dc:58:0e:d6:6e:d0:ab:dd:ea:3e:9d:
         ad:7b:69:8e:2e:4e:e3:ad:86:e0:65:99:ea:d5:dd:32:f7:f5:
         8b:a7:72:00:44:3a:5f:8c:66:e2:c4:d7:5d:b3:8f:fe:0f:46:
         99:95:ad:d8:d9:56:62:66:95:7a:01:76:3a:ba:56:d7:17:83:
         4c:73:74:33:64:95:fb:cd:6a:e7:2e:fa:54:8c:7e:4c:23:70:
         fb:9c:3d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:14:58 2026 by rpki-client