Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
File:                     fzXVrkF_Re6FBdds6qGzTEWDlKA.mft (raw, json)
Hash identifier:          DahFx9nwZCEjy53Dc3JQ10Hpr9g1/IpRdP5QavCbDUs=
Subject key identifier:   6B:74:5F:8F:07:C6:24:0C:34:3B:5B:CF:59:53:98:83:FD:7C:D3:EF
Authority key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
Certificate issuer:       /CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Certificate serial:       01A0BA9C91E68BD618F3FA6C98BAD06FD935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
Manifest number:          1340
Signing time:             Sat 19 Sep 2026 17:00:17 +0000
Manifest this update:     Sat 19 Sep 2026 17:00:17 +0000
Manifest next update:     Sun 20 Sep 2026 17:00:17 +0000
Files and hashes:         1: GGZjVcrh7o5QnLA3XYwWxwIPlsw.roa (hash: RM/Nw8R0IKgYPKDSKvz2CTTdZeBN9XNA59dgKmXAkeU=)
                          2: fzXVrkF_Re6FBdds6qGzTEWDlKA.crl (hash: SCfx8WzTyhAWPIvvv8vUuKrs9i3xQB293bnVKCzhjlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 17:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ba:9c:91:e6:8b:d6:18:f3:fa:6c:98:ba:d0:6f:d9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
        Validity
            Not Before: Sep 19 17:00:17 2026 GMT
            Not After : Sep 20 17:00:17 2026 GMT
        Subject: CN=6b745f8f07c6240c343b5bcf59539883fd7cd3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:40:5c:7c:75:89:97:5d:74:21:c1:fa:82:cb:
                    f3:76:38:23:c1:f6:f0:26:3d:b9:b4:70:65:d1:2f:
                    4e:45:2e:4f:10:64:5b:43:41:f8:76:f7:2e:f7:ab:
                    61:6a:9d:b9:69:4e:0e:ed:61:47:9e:92:30:6f:c0:
                    98:be:4e:32:23:77:2e:8c:45:21:aa:5c:20:83:bb:
                    1a:8b:50:d0:ae:21:27:4f:a7:c7:6c:a9:e5:a9:52:
                    76:d3:2f:f2:2f:c8:67:23:57:8b:70:5b:53:bb:81:
                    e6:ce:35:38:8e:b8:2b:6e:d6:ba:77:6b:59:2b:2b:
                    d1:ab:d8:2b:a9:d5:f3:92:4a:76:75:e4:c4:8e:7e:
                    e5:39:05:76:d8:c1:8e:4d:cf:91:74:7d:d5:74:b2:
                    80:13:bd:41:d9:78:de:89:a0:16:6c:b1:e6:23:32:
                    15:ce:5c:56:f6:ac:84:b0:93:c5:29:3a:3b:55:47:
                    26:a7:17:bc:1f:df:49:33:a0:3b:c6:32:cc:a1:e7:
                    05:88:40:f9:d6:63:14:36:3d:89:e6:6c:f0:8e:e4:
                    1f:12:4d:ad:71:64:6a:9f:8e:4d:fc:4f:17:5f:cd:
                    81:77:e9:5d:01:55:98:8a:f2:e5:25:1f:08:24:97:
                    f8:dc:68:8e:23:98:e7:8e:0c:e0:c5:5f:7d:02:9e:
                    88:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:74:5F:8F:07:C6:24:0C:34:3B:5B:CF:59:53:98:83:FD:7C:D3:EF
            X509v3 Authority Key Identifier:
                keyid:7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4c:4f:12:45:d8:23:61:2c:65:10:73:00:c0:dd:e1:13:c7:
         55:6a:e6:c2:af:7c:eb:9f:e9:94:0d:93:49:8c:9e:e0:fd:3b:
         2e:82:ed:76:06:ec:3c:3c:3a:a0:a1:fe:b7:8b:85:e0:91:4b:
         27:dd:76:5d:3e:e5:16:ba:05:3d:82:88:f8:9e:8e:66:5d:72:
         a2:0b:93:af:c1:03:81:6d:2e:d4:9c:0e:f9:5b:a3:b4:c8:3c:
         ac:aa:48:52:c9:8e:ca:c0:39:46:d8:7c:35:91:03:27:c9:eb:
         80:9a:ea:de:0c:ab:61:0e:e1:53:48:f4:f6:7d:dd:8b:17:c5:
         20:67:95:37:69:ef:c9:72:71:bb:ae:ff:91:d3:17:b7:8f:a1:
         1c:fe:bf:d9:dc:ab:95:3d:fa:ab:05:a2:07:c8:44:b2:93:c2:
         10:1e:a8:31:cc:0f:d2:df:22:8a:13:f0:47:7c:9c:ab:22:8d:
         7a:dd:5c:59:2e:1b:58:d2:6c:c1:59:47:bc:c4:b6:83:b9:b5:
         f4:e4:89:8e:03:bf:9f:10:54:93:61:31:08:24:11:03:31:88:
         9f:c4:0d:8b:8d:12:07:32:aa:ef:4d:af:91:b2:99:62:2c:4a:
         dc:42:62:8f:db:99:3f:9b:3c:7c:97:bb:c8:b7:b9:55:33:23:
         7e:21:75:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 02:35:37 2026 by rpki-client