Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File:                     fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier:          CVlkb6xDumAWt7ECsICuad9FAnClNJ+EnigcqNhyouM=
Subject key identifier:   E5:36:55:67:1B:44:A3:53:95:22:79:DE:08:3E:90:49:E7:82:02:CC
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer:       /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial:       01A08C0D2755088E0AF76431B5B712F6AEA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number:          1884
Signing time:             Thu 10 Sep 2026 16:01:07 +0000
Manifest this update:     Thu 10 Sep 2026 16:01:07 +0000
Manifest next update:     Fri 11 Sep 2026 16:01:07 +0000
Files and hashes:         1: 6rNJQsn9nenf7gQdwKGULkmO48g.roa (hash: 07pBJi7Nc/k7+K1BPHdbPiHNkGiQWcczdjGOzLq8Sbk=)
                          2: 7c37mQO9hber9Y9a4WDKVYTKyGs.roa (hash: h/wnhDSGEGx3npO9CQ/X4FjS1+UA0bB6gXGJME9onWs=)
                          3: B3wonFQq_huZTMz-8wuSey9Fs1I.roa (hash: JnpdkfXYgXXAYDW/V89kghjchKm1vbi2ArxR3XgZ6B0=)
                          4: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: M4xHfXHqA0uny2xTCFl66zy+eubroirdEbvZOVJ79JE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0d:27:55:08:8e:0a:f7:64:31:b5:b7:12:f6:ae:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d59659636089e32324697629c218da38a2b673d
        Validity
            Not Before: Sep 10 16:01:07 2026 GMT
            Not After : Sep 11 16:01:07 2026 GMT
        Subject: CN=e53655671b44a353952279de083e9049e78202cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:75:39:76:b3:71:74:af:ca:87:d9:4e:90:
                    3e:8c:a3:2d:77:55:43:c1:5b:05:91:f0:37:9b:61:
                    64:fd:22:e0:d1:09:c4:76:52:ca:a2:20:c8:8c:12:
                    b8:15:d2:21:b7:3f:56:80:be:01:06:48:83:be:f4:
                    02:18:cc:e4:c0:46:7f:86:e6:4a:eb:dd:bc:6d:fc:
                    c8:a9:e3:d5:12:f4:2e:19:eb:a8:70:60:4c:72:91:
                    d2:c0:e9:63:36:81:e8:ad:ad:05:91:05:36:35:44:
                    4a:62:96:b4:55:6a:40:3f:84:ff:bd:78:c8:29:d3:
                    69:6b:d4:2b:64:b0:9b:27:bf:b5:5f:0f:29:fe:bd:
                    25:12:f3:d5:af:49:5b:b9:10:88:2c:8c:7b:e6:36:
                    1b:16:a1:a0:d8:cb:30:d3:54:2c:dd:d2:82:20:30:
                    10:71:1e:46:fc:f4:16:cf:5a:e2:e6:e5:74:d8:66:
                    69:c4:dc:62:b9:89:8b:ca:7c:90:25:0c:73:c9:ea:
                    6d:56:71:c2:0f:f0:f0:f2:62:12:64:b2:f7:f9:17:
                    cc:17:b0:1a:9b:5a:7c:22:9d:b7:20:85:c1:e5:a2:
                    15:b7:00:bb:30:a4:19:14:cb:0e:72:5f:5e:ef:f4:
                    7d:b7:b8:69:0a:d3:cb:93:34:85:d5:09:10:53:40:
                    1e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:36:55:67:1B:44:A3:53:95:22:79:DE:08:3E:90:49:E7:82:02:CC
            X509v3 Authority Key Identifier:
                keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:72:c0:b1:ec:ef:1b:3f:87:78:74:3f:8e:9d:d6:e4:b5:52:
         9a:a5:ec:94:cd:3d:8c:ac:4a:84:b8:1d:9a:8e:55:4c:76:38:
         8d:11:1d:97:ce:b2:6a:00:d5:ee:99:af:29:67:6e:f6:b5:fc:
         ee:94:14:21:ed:38:5c:0a:a4:8c:5d:7c:e8:de:67:65:e4:09:
         10:ef:27:4d:38:c5:3a:66:8a:95:b5:f9:4e:63:5a:6f:58:96:
         f4:5b:2c:c6:20:f2:97:3e:9a:b1:9d:3c:0c:19:db:e0:d9:be:
         ec:70:10:43:21:68:2c:04:d7:64:14:c7:92:82:03:03:e4:52:
         96:59:90:7b:f5:9c:79:47:ec:f2:4b:b3:87:8c:c6:c6:30:3e:
         bf:2f:74:a7:c2:e7:b8:5c:b7:a7:9b:69:0c:8a:77:b3:be:42:
         0e:e3:f5:04:b2:52:e7:1d:c9:ae:94:3b:04:dc:9a:66:36:86:
         bb:f5:cb:22:34:25:9f:a8:17:c3:4d:72:e5:34:03:f9:52:19:
         26:8d:76:74:8d:d6:02:61:76:26:36:90:88:5e:3d:99:bd:b7:
         26:e2:6f:b3:c5:8c:53:0b:91:9f:b1:97:d3:7e:64:79:2b:71:
         cb:b4:3c:77:64:d8:95:ee:ca:88:8d:3a:a1:ac:08:7e:0f:f5:
         f8:f8:fa:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:40:23 2026 by rpki-client