Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
File:                     FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft (raw, json)
Hash identifier:          f7peoHT7LzcomdpHUElaxhNGnJoRPlh8x2YcSoFfNPg=
Subject key identifier:   77:77:A4:6D:B1:B5:B1:EC:03:BA:CE:D7:62:0E:6F:1F:69:F2:99:42
Authority key identifier: 14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24
Certificate issuer:       /CN=145c4728382ec5354e106023df467a4113b49324
Certificate serial:       01A08BD5B598607A872618000AC57F12A795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
Manifest number:          0260
Signing time:             Thu 10 Sep 2026 15:00:33 +0000
Manifest this update:     Thu 10 Sep 2026 15:00:33 +0000
Manifest next update:     Fri 11 Sep 2026 15:00:33 +0000
Files and hashes:         1: FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl (hash: tMA2eM4gJHEGaGKdi8k6mNutInJlEDD0PjylqJxZGuY=)
                          2: py9eyb051zBNGRXqf0w217Iyr0U.roa (hash: V1rIxP2aeir1g3qKAPo7xgCkgSSb/VU/nyh0Upf99zs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d5:b5:98:60:7a:87:26:18:00:0a:c5:7f:12:a7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145c4728382ec5354e106023df467a4113b49324
        Validity
            Not Before: Sep 10 15:00:33 2026 GMT
            Not After : Sep 11 15:00:33 2026 GMT
        Subject: CN=7777a46db1b5b1ec03baced7620e6f1f69f29942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ec:bb:bb:83:10:72:bd:dd:59:dd:ad:78:b7:
                    31:98:df:4f:e7:fd:b4:4f:43:09:08:37:e6:a9:4e:
                    b3:27:db:0a:46:51:2b:17:c5:f7:3c:90:ec:3c:fc:
                    fc:17:38:7e:ba:b7:74:c7:8c:fa:91:83:00:5e:10:
                    68:d9:fa:89:92:85:54:c1:05:96:79:67:cc:2a:9b:
                    9f:8a:b7:ac:af:91:84:0e:bc:3b:4a:bb:79:23:e8:
                    be:5a:89:97:fb:c1:c9:3d:b3:1a:de:b2:67:ab:44:
                    7e:99:de:ba:19:91:37:ef:ba:a9:b4:4b:de:20:d3:
                    c1:9d:0f:cb:a8:d8:da:93:1a:34:9e:c7:55:7b:b0:
                    be:e9:54:aa:92:4f:b8:b9:37:83:69:4d:aa:56:5e:
                    c0:21:56:47:2a:88:5f:d1:51:dd:d2:f0:52:60:e5:
                    9d:40:af:46:6c:62:63:a1:1f:2a:bc:b0:fb:45:8f:
                    72:86:4a:13:ef:14:63:ed:3d:53:db:2a:76:d0:68:
                    2b:d2:ce:62:c8:34:de:13:08:4e:4f:06:ee:2f:d1:
                    5f:79:8e:ab:14:d8:97:c3:52:8d:8c:02:66:67:e3:
                    11:2c:1a:69:6c:fb:22:1b:78:83:cc:13:64:40:2f:
                    56:43:54:4f:05:5b:73:35:e2:b8:41:df:62:c5:47:
                    aa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:77:A4:6D:B1:B5:B1:EC:03:BA:CE:D7:62:0E:6F:1F:69:F2:99:42
            X509v3 Authority Key Identifier:
                keyid:14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e4:86:7c:3b:d9:8e:54:d2:25:c9:75:11:a3:8a:8e:e3:15:
         1b:87:54:31:4c:46:fb:09:37:46:5a:d5:6d:bb:37:19:48:3e:
         4b:eb:d0:bb:2c:43:d7:8e:24:13:04:6b:57:e6:18:eb:6e:f0:
         d6:2f:74:21:58:1d:ba:6d:07:bc:98:af:b3:7c:50:a3:02:68:
         e0:3a:50:8a:09:46:f5:b6:86:a4:8b:ed:57:00:a4:63:df:70:
         8d:0b:21:41:3b:69:3d:b2:93:e9:0c:e0:6c:63:f6:51:39:06:
         d8:ad:74:c8:75:80:fb:d1:a8:8d:68:9b:bd:7e:d1:67:d2:37:
         68:91:78:34:51:c4:ea:df:97:b9:61:5a:fd:ba:00:b6:df:dc:
         88:d1:38:36:15:7d:71:74:17:b5:ba:96:a2:3c:9d:74:c6:93:
         ef:8f:46:14:f6:bd:df:03:88:66:d9:9f:38:ff:2f:d3:0c:e8:
         da:00:3a:27:a4:69:35:4b:cc:c6:1e:4b:0b:0e:08:7d:87:8f:
         92:6d:94:0d:8e:a7:1f:ac:97:04:d6:4c:7e:ff:2d:74:15:41:
         c4:fd:27:85:fa:05:7e:ca:d0:9d:3f:c7:b0:5d:e9:64:44:17:
         22:ec:1e:29:37:a5:5f:34:41:c8:bf:f3:ff:b5:f0:e4:9b:5f:
         f9:3d:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:54:52 2026 by rpki-client