Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
File:                     _OoI6EId8vJFx8szPudqFKiILUo.mft (raw, json)
Hash identifier:          0fuIrfvhp386oRh0I96dITyyAoOdgLMYgFUAXFNhWgs=
Subject key identifier:   95:78:13:15:54:A5:7F:10:B0:6D:F9:23:C9:A2:40:83:EE:9C:C5:7E
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Certificate issuer:       /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial:       01A06F161E1461FF13D362E3E3353A2E58D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
Manifest number:          1A3C
Signing time:             Sat 05 Sep 2026 01:01:55 +0000
Manifest this update:     Sat 05 Sep 2026 01:01:55 +0000
Manifest next update:     Sun 06 Sep 2026 01:01:55 +0000
Files and hashes:         1: 102NyqwI6NUjHs7bCvz-B7agUdM.roa (hash: 5hj0xFAny5+vtgd3t6VT//Hd2v6CocMrOduYjNO+NI4=)
                          2: 1nVHIu-5n51i9XhRUguwo5Agsgg.roa (hash: gfFsI93bvHGfawYL3os2AP8o+JuPoCqZf2VysVyBfmc=)
                          3: LAOAzix8Zi6Y7eROUhiHseM7d1U.roa (hash: Qhgem+rCCIPGj27tJdRK6lacEFlZtLP66ADVBe3CFfA=)
                          4: _OoI6EId8vJFx8szPudqFKiILUo.crl (hash: 8eBxswMFbyzFVdd5cSxSRHmfyl4X6u9+hX/KAKqiCaI=)
                          5: vtzoMlVsaR1SjsCwCY3vHw4SD88.roa (hash: l1imowCkVJ1ojfww3ZUzrxP/ubYhQS8cf2hc3Hjykbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:16:1e:14:61:ff:13:d3:62:e3:e3:35:3a:2e:58:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
        Validity
            Not Before: Sep  5 01:01:55 2026 GMT
            Not After : Sep  6 01:01:55 2026 GMT
        Subject: CN=9578131554a57f10b06df923c9a24083ee9cc57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f3:03:cc:fe:b4:2f:40:79:26:0c:3e:39:ad:
                    ca:77:68:e4:cd:61:4e:5a:4a:f9:b2:eb:f1:8a:94:
                    a2:32:81:62:65:c8:0b:3a:27:8c:4d:60:ba:3e:59:
                    3f:4e:2f:60:3c:f4:d5:40:15:e9:3d:5d:66:2b:97:
                    ed:80:3f:08:a5:37:09:78:bd:c1:8a:84:a2:67:f2:
                    14:4e:7c:bf:43:9f:8b:d8:12:56:f5:66:d5:43:89:
                    ab:05:55:43:70:b2:cf:e6:17:60:dc:d7:40:82:d9:
                    0f:b1:ca:e5:7b:5c:3a:28:46:1e:7a:34:1e:06:56:
                    36:da:24:61:e0:c4:7f:bf:05:c8:90:80:25:b8:9c:
                    7a:15:b6:81:b7:b9:f6:2b:fe:28:8a:6f:b1:8e:f8:
                    40:5c:e7:a1:a6:9f:62:03:42:1e:24:eb:47:8d:5c:
                    ca:7d:f9:3b:3e:17:fb:f4:b8:8d:05:38:5b:d9:c3:
                    57:d6:6a:bc:33:60:ce:4f:b2:3f:e0:b3:14:14:78:
                    0a:bf:1e:4a:fb:10:eb:6f:5f:ee:b0:fc:4a:92:9b:
                    f8:8c:0f:10:cd:45:ab:b6:bb:7f:8a:fb:d4:5c:6e:
                    9e:0f:46:c0:1b:75:8e:0d:c3:34:a7:64:20:9f:a7:
                    1f:3e:25:af:d0:37:45:ce:c1:82:1d:43:c2:6a:97:
                    e8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:78:13:15:54:A5:7F:10:B0:6D:F9:23:C9:A2:40:83:EE:9C:C5:7E
            X509v3 Authority Key Identifier:
                keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:eb:fc:25:4c:fd:8e:4a:50:71:04:5a:3b:fb:6c:da:5a:a0:
         65:ee:57:92:94:69:b3:3e:04:df:b7:01:ba:52:ce:2e:e9:01:
         ff:5c:a7:83:6c:c3:57:de:0f:82:83:eb:93:44:56:25:ef:20:
         b4:c7:53:3f:ff:0d:e2:82:26:36:0a:88:2d:ca:c7:28:07:1a:
         30:21:86:d6:47:11:e3:75:b2:48:b8:19:1d:c7:46:22:e2:27:
         4b:53:c9:a8:8c:fa:d8:c9:fc:75:2b:42:3c:a3:fd:e5:64:5d:
         d2:1a:87:e2:e3:e9:0e:17:e7:9f:99:4d:82:84:96:2d:8e:13:
         35:f7:1e:8d:c6:82:87:a9:16:14:b5:5b:69:62:34:fd:3e:b5:
         2e:4e:fb:28:12:2b:26:da:e7:98:8f:55:46:e2:6f:61:81:c2:
         a2:5d:27:95:51:96:be:da:48:d6:83:8b:eb:2f:61:f4:79:39:
         93:cf:e2:b0:0c:db:7a:4f:2f:4b:22:8b:00:05:3c:50:db:4f:
         89:7f:d3:40:5c:c2:f2:30:9e:15:6d:07:af:3d:57:ab:12:df:
         08:bc:2f:1e:5e:ce:4e:de:6f:2f:fc:ad:ea:93:92:ae:74:41:
         19:b3:95:27:63:b3:3c:84:d4:9d:4c:3e:34:60:d9:4e:5e:cb:
         e1:b7:5b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:03:07 2026 by rpki-client