Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File:                     fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier:          dTBjOm4m+Ohzm6n+BtVuSZ3BLaWgfvTAsgODmu7Hmxg=
Subject key identifier:   86:8C:0D:CA:E9:58:4B:1B:ED:B2:45:02:E8:61:1D:89:D0:34:45:D5
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer:       /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial:       01A08D56DFEB3662CDB0CF4509C0EDE581B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number:          0727
Signing time:             Thu 10 Sep 2026 22:01:15 +0000
Manifest this update:     Thu 10 Sep 2026 22:01:15 +0000
Manifest next update:     Fri 11 Sep 2026 22:01:15 +0000
Files and hashes:         1: d3XCpcyn0uAgmWptpHQjYP7UPLA.roa (hash: ou/aEB+Ce2n+pbDK9cilwO6M3zpwbvFU2gW96y63Kxw=)
                          2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: Xo/pJ/s5dtSQYSoH0wpHxr0LESOfU5i5Lk+zsAfQ3uE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:56:df:eb:36:62:cd:b0:cf:45:09:c0:ed:e5:81:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
        Validity
            Not Before: Sep 10 22:01:15 2026 GMT
            Not After : Sep 11 22:01:15 2026 GMT
        Subject: CN=868c0dcae9584b1bedb24502e8611d89d03445d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bd:ca:43:76:f7:a3:9b:e9:5c:31:4b:b1:9b:
                    da:79:61:60:be:d6:94:48:98:20:7e:a5:01:9d:99:
                    cc:40:8f:54:bc:73:40:f7:ae:c2:32:b9:ac:8f:2c:
                    50:ad:43:26:c8:c6:25:e4:4d:20:69:13:c7:fb:dd:
                    45:66:38:2a:d2:fc:9a:c7:a1:55:0c:1c:d1:0f:86:
                    a2:3e:67:6c:e5:44:4d:1c:09:b4:1f:77:c8:97:8f:
                    59:cf:8b:43:88:48:c4:64:bf:29:40:ed:ba:ce:66:
                    60:91:59:a0:72:ac:28:52:5c:f0:ef:0f:c2:1b:d3:
                    35:dd:83:40:c9:32:27:39:5b:e4:05:c3:4c:16:dc:
                    e0:a8:c4:6f:25:09:ca:4c:09:57:f1:ad:d4:15:1e:
                    bb:37:83:fd:a1:d6:4d:58:6f:aa:63:fa:ab:26:1e:
                    90:8a:bd:de:69:f8:ef:b1:27:55:f4:22:cf:ec:14:
                    88:63:45:08:1c:fc:49:95:ef:3b:df:27:bf:1b:7d:
                    93:91:b5:a0:88:67:30:1e:7b:63:e2:46:f8:d9:d9:
                    c3:91:ae:34:0d:39:e5:4b:e5:6f:0a:d1:c2:ec:38:
                    f5:e9:ec:84:b8:7d:0b:8f:8b:29:36:ff:1c:df:95:
                    f5:2b:17:de:7a:d0:ad:64:27:0d:2c:0c:eb:8d:ba:
                    2d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8C:0D:CA:E9:58:4B:1B:ED:B2:45:02:E8:61:1D:89:D0:34:45:D5
            X509v3 Authority Key Identifier:
                keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:59:90:93:45:15:5b:1d:98:8f:e7:d3:c2:fa:55:39:37:8e:
         52:01:f3:3c:c0:ef:50:dd:c8:16:95:55:7f:89:20:7c:20:aa:
         a8:1a:6c:fc:c9:ac:18:9f:d3:f0:16:f9:89:a5:b9:bb:da:19:
         f1:4c:e2:23:83:21:9d:34:77:a8:c7:31:b7:e2:e8:e3:80:45:
         af:ad:65:ca:db:1e:04:13:a7:1e:0a:e0:15:d3:62:0f:26:53:
         cd:e7:8a:1c:82:81:32:10:b2:98:92:d1:b9:e5:e4:a0:e2:29:
         18:7c:0d:a2:f9:e3:c6:d7:47:42:e0:b8:16:24:59:3b:b5:9a:
         ed:54:50:ef:c4:9e:7e:97:c3:7e:6f:fb:7b:9a:8c:42:43:9f:
         19:93:af:96:34:84:e5:a8:6b:96:60:cf:9e:18:1b:f7:d5:95:
         61:b2:c3:58:80:44:0c:06:6c:a3:98:c4:98:97:05:b4:df:a9:
         be:ff:9b:ec:16:eb:c2:6d:9c:1e:91:f2:ba:ba:41:50:bf:dc:
         57:43:30:96:d9:0c:9d:19:a9:7f:a9:e7:24:a2:8a:ed:bf:fa:
         b5:29:63:5b:ed:59:f3:5f:d4:52:74:40:97:90:06:0e:ac:33:
         ad:c7:b3:2e:f2:58:00:dd:fe:a6:5b:39:dc:96:bf:cf:f8:7d:
         7a:45:ba:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:54:18 2026 by rpki-client