Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          iDqBRNV662brkBMAGxAwua5f2AC3JT9g9ZLVnD1Uq4k=
Subject key identifier:   1F:8A:2B:3F:29:06:03:AA:82:35:9C:CD:06:78:52:A9:BA:B7:A7:C9
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       01A0E250526F795B4ADA05D138B38243BFA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          09C6
Signing time:             Sun 27 Sep 2026 10:01:49 +0000
Manifest this update:     Sun 27 Sep 2026 10:01:49 +0000
Manifest next update:     Mon 28 Sep 2026 10:01:49 +0000
Files and hashes:         1: 2XNigP1XX5v-b3FUJHAwFh0xXbY.roa (hash: Oo5YPE7FvlEd2/zNBUPSdHNjdbk39M4tT85PV9QMW+4=)
                          2: 3fOCVpT-Lf6UOXcD5Nc80w9uuEI.roa (hash: Olnc6TsFMf/lto0XZ/IXXC3VCnMMv6kWoXMR1B4Qilk=)
                          3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          4: DR9VqkVtbZff3gkUBcaPLf1vbp4.roa (hash: sIqhfmAWjnSCKWQ8+ZuDooV52eSu6wgQtTvetBcOvWQ=)
                          5: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          6: FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa (hash: Lia6Niow9mvTIEp6IZQLMa57V883PVRlmqrb94CP8h4=)
                          7: IyHLg3suZFaQuVarnDT09yy0X2o.roa (hash: 6+BW/hTb1umKDUBp2nCuMYA44iYB5QhDbwWwEQM2hgQ=)
                          8: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          9: NOTd4-A4PmSQj4XSSOacvmdiako.roa (hash: 8iobNGMtq59P99qMnRi2vFVNNvHMw8CEZpBCxMHYatM=)
                          10: T-2zrQ_BVpBEq1UjJnBtpid0T9M.roa (hash: stpa5ENJ3skvAQ/auK7c/OEeGkvBZIEqkeze92t1QPw=)
                          11: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          12: WOqoJu5t09R3Cekgx_2O0sa6-Hc.roa (hash: 1qEbFKCQOOiO55/Z1NIx4D98L9A9xFqq+s2fxS0t2Dk=)
                          13: Y71JSOza9l99m2LkV-uZBA1qT4k.roa (hash: uUv6/DaQOMG287F0xQdwh94hSrXdbb62+qEzPa5p0o4=)
                          14: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          15: alomw2OsWHbd8tHr8rQUVSaTf48.roa (hash: /SgtQ+hB/USe7wR/Kp74UDlxjPB2bz9JIMvjDNTyblY=)
                          16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          17: f3jhbY_gIkYJlG66YPHL9CELrKA.roa (hash: P9/795AGn5WxQVcAaPxONrO6IpW+dBt+ePqrhqEc80E=)
                          18: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: p2cHmto2cfKx9hC2HZMriro4hlh4rfWtmdDIlNOjnUQ=)
                          19: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          20: kpma4xqgzEEytLfdE-9LrfzAf44.roa (hash: vgqc9IvueEpWlOduqOn71G/7ZnxuYFS4IHbsYXqcCYM=)
                          21: mE5DN157XZf7igs7Qp5o_mpfYoY.roa (hash: OK0s5oWuJ3ewBiMYcBCwgUB2nCoplpS+aaStS616Tlc=)
                          22: nv5fiWXYzHu66gzzAc2gY1E_2Ws.roa (hash: bTjCfnE77NEactYbdS6nJYXWVoGC6Uw3L9qEunQvAs8=)
                          23: o6aWDaWLtgSw0yJqWoQY-eXoND4.roa (hash: 7Qa4eT/ei1RS6VIpX+STSPoJ4j3+B1WFU+LfkEGMwlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e2:50:52:6f:79:5b:4a:da:05:d1:38:b3:82:43:bf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Sep 27 10:01:49 2026 GMT
            Not After : Sep 28 10:01:49 2026 GMT
        Subject: CN=1f8a2b3f290603aa82359ccd067852a9bab7a7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:b6:c7:14:e8:42:7e:da:d9:98:4a:01:29:
                    e5:53:7e:34:9c:46:39:20:4d:81:0c:51:c8:25:c3:
                    5c:7d:fc:b3:dc:f8:18:19:59:c8:41:86:0f:92:54:
                    a3:67:05:db:ac:39:96:c6:4d:21:bc:62:1f:a5:a1:
                    95:74:0f:89:f5:56:f9:c1:65:90:00:c7:64:d0:3a:
                    d7:13:60:18:51:98:c3:ad:ea:70:3c:6a:3b:8e:37:
                    f6:85:02:9a:4d:3f:ae:f6:d1:53:a9:0a:bd:88:a4:
                    ea:1b:e9:e2:8c:f7:64:9b:71:d6:4f:64:29:2a:7e:
                    91:cd:85:36:5f:d4:cd:93:48:aa:f4:02:ef:8b:34:
                    7b:43:be:d0:7a:37:d4:6e:17:fb:f5:0d:93:90:b3:
                    36:4c:7e:44:e4:33:4c:f5:89:39:5e:94:44:56:92:
                    27:2f:e6:69:75:e1:51:a6:0c:a4:fb:d6:68:68:bc:
                    4d:15:83:ec:7f:79:8d:f1:4c:14:24:4e:e1:22:d9:
                    c2:12:91:96:89:40:7e:60:0e:62:85:a9:ee:1e:1d:
                    94:a6:c3:59:d3:b0:b3:05:71:a2:4c:b4:16:da:98:
                    90:f6:a5:91:64:3e:ff:d0:71:8d:71:38:59:48:71:
                    f7:4c:8b:9d:96:81:80:f1:69:9c:f7:d1:67:0a:d4:
                    d5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8A:2B:3F:29:06:03:AA:82:35:9C:CD:06:78:52:A9:BA:B7:A7:C9
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:80:84:67:6c:7e:6d:d4:61:f6:58:6f:64:b5:b6:a8:41:7b:
         24:2a:c1:da:c9:36:86:7d:ff:27:d9:af:11:ec:63:af:0f:74:
         7a:87:e1:b1:bf:b7:5c:f5:31:ee:6e:71:e0:7e:49:b6:9e:da:
         64:f7:91:eb:16:af:6d:c0:53:03:66:ff:a3:ca:0e:f6:88:a9:
         74:90:ee:c7:7c:93:84:82:96:bf:10:e3:ac:a0:1e:4f:57:35:
         51:26:95:73:1a:46:41:36:32:06:9b:5b:37:22:a5:6e:ab:aa:
         f0:68:06:82:66:82:8c:4a:b5:e3:1a:3a:82:90:47:ab:6b:64:
         e1:35:86:77:e5:e9:02:cb:27:70:55:80:d5:5d:65:25:74:5c:
         66:59:94:a8:b9:f6:26:ec:ea:18:c3:38:35:af:2e:56:f8:86:
         fb:97:88:98:b2:73:68:cd:2a:fb:0f:74:73:82:a4:0c:dc:a7:
         79:c9:8c:df:ad:1d:f2:8d:48:20:d2:82:2b:34:a9:e8:0b:37:
         0e:24:54:b3:4b:6a:48:13:4b:8a:e6:0c:59:2a:70:5f:c2:36:
         b4:d9:d5:50:ce:04:13:52:1b:e3:8e:f4:6c:1d:c9:4a:a9:3f:
         8a:a9:35:a6:22:9c:5d:d6:96:f3:a9:40:62:c5:fb:8e:50:f6:
         82:2b:bc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:27:50 2026 by rpki-client