Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.mft
File:                     Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.mft (raw, json)
Hash identifier:          CFD9CWsZMpQ2GTcWQffARO12H7K32T2xaxTwKeYKG18=
Subject key identifier:   20:4A:30:F8:D8:8C:57:6A:8D:D9:9A:C1:11:DF:FC:13:03:9D:E1:94
Authority key identifier: 16:BE:9E:09:16:EC:D4:9B:20:D5:42:FF:3A:41:0E:41:6B:75:85:B4
Certificate issuer:       /CN=16be9e0916ecd49b20d542ff3a410e416b7585b4
Certificate serial:       01A0D192440BCD3B7F47F8CC15C2F12698A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.mft
Manifest number:          014D
Signing time:             Thu 24 Sep 2026 04:00:18 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:18 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:18 +0000
Files and hashes:         1: 0Cd2elJmPfw3k07ZzpbgOsWM-Rw.roa (hash: 4EyMxyk40sEsJZUEtalZtRmXEeKDljoGWzTzInzC81s=)
                          2: 0gPtkRSls5KYbhu8jAujQAA3_xI.asa (hash: oNSjgZ6qh//nbwysNwp5XzC/bf7xWHiY0F7H5aaEOto=)
                          3: AU-swXxl72gZyALHdqhjgdRWBx8.roa (hash: 8TRT/xoqqhzVh0IB0LZwneWwiLY/tgMy6Mb+5VJxVds=)
                          4: Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.crl (hash: 8J32qr0V/eEtBwrdWG1t2IAzWBlOqkXltUz0M+T9sY4=)
                          5: dunuEmFd6kXfKHHl9Q23ONpszHE.roa (hash: xEQlXHfQVTehivNYjm2usMnLx3UCGWXBfr3bSmDFC04=)
                          6: ih1gBauvjKjI0Y1A_bwmzOajV-U.roa (hash: uXb64iV5xQB6Dm557eWXOR7ACbRC3DydbqgS0WTD8js=)
                          7: ju7AHz44EsnqG_lR5q-wwqoTol8.asa (hash: F/aaCwPStk80o8CbjwwyHGN3cHNRH84RSZ1IzQuGfdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 04:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:44:0b:cd:3b:7f:47:f8:cc:15:c2:f1:26:98:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16be9e0916ecd49b20d542ff3a410e416b7585b4
        Validity
            Not Before: Sep 24 04:00:18 2026 GMT
            Not After : Sep 25 04:00:18 2026 GMT
        Subject: CN=204a30f8d88c576a8dd99ac111dffc13039de194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:f6:1f:5d:82:54:22:2f:ac:f2:dd:d3:83:
                    a5:6f:bc:a9:7c:26:b2:ee:96:ec:66:5c:c4:2a:a7:
                    99:ec:64:fd:b8:51:6b:39:99:c9:2a:60:c1:d1:e2:
                    5b:0a:6b:51:0f:8a:2f:5e:74:80:47:f2:3b:87:83:
                    fa:17:57:6f:13:1d:d0:c1:de:a5:1b:f7:ea:79:8c:
                    d6:70:36:90:04:68:15:ed:d7:6f:21:f7:f8:f5:3e:
                    22:df:66:86:01:55:f6:92:d5:e1:bc:22:a9:3f:fb:
                    cb:ef:0e:21:7c:d0:bd:a6:a5:59:b8:98:79:14:16:
                    34:8e:cf:59:b8:1f:ca:aa:2e:10:fe:e0:5e:78:d6:
                    89:17:70:6d:50:9e:fd:36:20:83:b8:56:01:00:e5:
                    c8:76:2e:80:a6:4b:a4:97:40:f9:84:92:05:1a:57:
                    2e:35:60:62:ac:b5:ba:a5:62:4b:17:9b:1a:e7:3f:
                    01:1e:d0:a0:7f:80:6d:4a:be:94:cb:6f:92:29:d5:
                    c1:1c:0d:d4:b2:b9:95:f1:2b:bd:a1:10:62:6d:76:
                    84:08:69:f4:74:bf:a9:ea:d0:74:b2:d2:b0:ef:86:
                    fa:97:ee:91:c3:96:55:c8:17:77:96:95:49:a8:f4:
                    f7:df:0b:c9:2b:17:73:50:3e:39:d4:5b:a4:82:dc:
                    21:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4A:30:F8:D8:8C:57:6A:8D:D9:9A:C1:11:DF:FC:13:03:9D:E1:94
            X509v3 Authority Key Identifier:
                keyid:16:BE:9E:09:16:EC:D4:9B:20:D5:42:FF:3A:41:0E:41:6B:75:85:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:72:3c:63:38:45:40:e7:cd:52:b7:58:52:14:b9:0e:a5:27:
         27:0a:10:39:da:d5:ef:05:f5:a0:7b:6e:77:a3:67:25:47:bd:
         31:8d:0b:fa:70:78:78:1f:32:23:55:55:21:a0:c9:24:6b:30:
         7d:5a:fd:8d:a3:0b:ad:c9:ae:91:69:2d:12:3b:80:0e:5b:66:
         64:6d:37:c7:24:20:af:61:db:c6:af:37:e3:87:cf:41:7e:e9:
         10:16:97:a1:29:2a:54:2c:c1:06:b2:68:f2:01:fb:29:20:10:
         06:3b:c0:bb:21:42:7e:d8:2c:86:ab:96:98:d7:11:43:56:71:
         8e:a0:81:49:31:bc:9a:11:b3:af:77:cd:8c:a1:da:4b:ad:a3:
         8e:97:e3:15:ec:4e:7e:b3:87:fe:f0:f9:86:c0:c4:fe:65:4a:
         21:be:03:4c:e8:82:ab:b2:ce:bd:8a:2f:f8:a8:0e:bf:cc:3d:
         94:59:a8:b9:92:91:de:3c:b9:59:94:22:5f:f0:6c:63:3e:a9:
         dd:51:76:9a:a3:b8:a2:9a:e5:6d:ee:82:2b:66:ff:29:34:48:
         17:cd:fc:db:47:62:8a:11:79:13:ac:31:09:c2:fd:4f:70:f7:
         1f:1a:62:e7:62:c2:82:0a:78:cd:b6:20:09:9b:46:57:87:b8:
         f0:b3:f8:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRkkQLzTt/R/jMFcLxJpihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YmU5ZTA5MTZlY2Q0OWIyMGQ1NDJmZjNhNDEwZTQxNmI3
NTg1YjQwHhcNMjYwOTI0MDQwMDE4WhcNMjYwOTI1MDQwMDE4WjAzMTEwLwYDVQQD
EygyMDRhMzBmOGQ4OGM1NzZhOGRkOTlhYzExMWRmZmMxMzAzOWRlMTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKX2H12CVCIvrPLd04Olb7ypfCay
7pbsZlzEKqeZ7GT9uFFrOZnJKmDB0eJbCmtRD4ovXnSAR/I7h4P6F1dvEx3Qwd6l
G/fqeYzWcDaQBGgV7ddvIff49T4i32aGAVX2ktXhvCKpP/vL7w4hfNC9pqVZuJh5
FBY0js9ZuB/Kqi4Q/uBeeNaJF3BtUJ79NiCDuFYBAOXIdi6Apkukl0D5hJIFGlcu
NWBirLW6pWJLF5sa5z8BHtCgf4BtSr6Uy2+SKdXBHA3UsrmV8Su9oRBibXaECGn0
dL+p6tB0stKw74b6l+6Rw5ZVyBd3lpVJqPT33wvJKxdzUD451FukgtwhgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBKMPjYjFdqjdmawRHf/BMDneGUMB8GA1UdIwQY
MBaAFBa+ngkW7NSbINVC/zpBDkFrdYW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnI2ZUNSYnMxSnNnMVVMX09rRU9RV3QxaGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85ODUwYzAtZDVjOS00MDFjLThjMDkt
MjBiYWJiOTc2NmM4LzEvRnI2ZUNSYnMxSnNnMVVMX09rRU9RV3QxaGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85ODUwYzAtZDVjOS00MDFjLThjMDktMjBiYWJiOTc2NmM4
LzEvRnI2ZUNSYnMxSnNnMVVMX09rRU9RV3QxaGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInI8YzhF
QOfNUrdYUhS5DqUnJwoQOdrV7wX1oHtud6NnJUe9MY0L+nB4eB8yI1VVIaDJJGsw
fVr9jaMLrcmukWktEjuADltmZG03xyQgr2Hbxq8344fPQX7pEBaXoSkqVCzBBrJo
8gH7KSAQBjvAuyFCftgshquWmNcRQ1ZxjqCBSTG8mhGzr3fNjKHaS62jjpfjFexO
frOH/vD5hsDE/mVKIb4DTOiCq7LOvYov+KgOv8w9lFmouZKR3jy5WZQiX/BsYz6p
3VF2mqO4oprlbe6CK2b/KTRIF83820diihF5E6wxCcL9T3D3Hxpi52LCggp4zbYg
CZtGV4e48LP4Mw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:44:13 2026 by rpki-client