Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
File:                     54O2KriupSB3DFdAS-d3H2eewLU.mft (raw, json)
Hash identifier:          IP7A3UJAcuHQO/B1CDhr7FWgvI6paIj3v6GosAYnz6A=
Subject key identifier:   1F:3A:1E:ED:C6:7F:61:FB:16:4B:B3:6A:CF:D4:39:3C:B5:D3:2C:BF
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Certificate issuer:       /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial:       01A0CAEB9AEF37C86A8DCF8B215C1484E751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
Manifest number:          19FF
Signing time:             Tue 22 Sep 2026 21:00:33 +0000
Manifest this update:     Tue 22 Sep 2026 21:00:33 +0000
Manifest next update:     Wed 23 Sep 2026 21:00:33 +0000
Files and hashes:         1: 54O2KriupSB3DFdAS-d3H2eewLU.crl (hash: YyVxhctvPl3XkM6x25z4DVdvzKngPcJf8q4uGs56gQI=)
                          2: 8ZwMCE0GKxtxHvWw4iCZk5ccrLQ.roa (hash: ihfIEbqwEULTE/OLIE3mqsVCssWQ6XBCkAGO8OC7UiQ=)
                          3: KM-isetfFQ48jT5UlKY2Mm7Ax0Y.asa (hash: 8i1NfCOqJ0Jq8VqPBEJyQbTSUD60u+xKuWbGsqyrU/A=)
                          4: Kn1fdpMjWnhcO_e1XOSq5Q_SqOo.roa (hash: ipV86oOkjGzli6pzk5Ar8vQYROabIbZnZILhX3gNwHo=)
                          5: P7qWrs2V2AQezp3eeUtgLDcatjI.roa (hash: 24DT/UvLaMHn12NZyYMSEhf55ywjNyUpSkfYVKDW1As=)
                          6: m9ne4AYiPOSdzaOHma0RPMHFIXo.roa (hash: CcdNSaFI+Idh1vG8DNWCzWCXN6GNcifanXez8Ab1HsA=)
                          7: slPUQzpAJ12Ih9Jzqnj5F0SKAxg.roa (hash: Nu5TAyzLPZcJp+J4t6JX8dbl8sGpnXq2tX6BxvM07Oo=)
                          8: yd0VNlAOh1ENu0y1pBAFD8ujbvw.roa (hash: bFUcyJVn75mPPcVkoj5xBq3tVwT0rV177XBSyfgCsxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:eb:9a:ef:37:c8:6a:8d:cf:8b:21:5c:14:84:e7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
        Validity
            Not Before: Sep 22 21:00:33 2026 GMT
            Not After : Sep 23 21:00:33 2026 GMT
        Subject: CN=1f3a1eedc67f61fb164bb36acfd4393cb5d32cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:32:32:21:08:47:30:e3:0b:88:a3:36:00:ec:
                    01:e8:b8:66:e9:1f:94:76:83:1f:1e:93:5f:71:bd:
                    50:a9:96:63:19:a4:20:1c:fc:6f:e5:72:f8:86:ee:
                    d7:57:93:9c:b9:4f:a0:32:21:cf:37:8a:7f:66:64:
                    fe:1f:c5:91:c4:a3:14:be:3a:50:33:52:79:85:a5:
                    fd:73:59:45:77:6c:a4:14:6c:96:35:de:dd:dc:22:
                    53:8b:9c:29:07:d9:08:06:fa:64:81:03:b7:18:5f:
                    ee:ae:46:be:f6:86:db:c0:6c:58:b5:47:2e:88:0c:
                    46:b0:4b:73:51:35:dd:f0:a9:b0:29:6e:f1:95:f1:
                    8d:c6:1c:9a:71:51:66:21:d1:23:d4:b6:04:c0:f0:
                    93:6b:bb:ba:7e:e2:9c:df:2f:55:61:4f:a6:f3:96:
                    23:55:26:30:a4:b2:47:f9:76:f6:05:f4:7d:d8:30:
                    bf:6d:f1:ea:98:41:ca:c3:ea:2f:62:2a:06:45:d2:
                    36:e2:37:3f:e7:f9:9e:fb:56:2f:a7:8f:80:bf:c3:
                    79:57:c1:7e:83:e2:a7:ed:44:4f:43:12:7b:25:3b:
                    37:64:2b:e7:de:48:a8:e3:e3:f8:a4:1f:e5:4c:e4:
                    c4:3e:21:ec:93:be:da:b8:62:5b:fc:5d:c5:a0:19:
                    b9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3A:1E:ED:C6:7F:61:FB:16:4B:B3:6A:CF:D4:39:3C:B5:D3:2C:BF
            X509v3 Authority Key Identifier:
                keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ec:a8:18:dc:83:62:68:6e:87:b5:cc:ba:d5:cc:92:fd:99:
         8b:e1:d6:7f:e7:d4:eb:7f:5e:dc:d5:b1:a1:9c:44:6d:c4:2b:
         97:e7:5e:d4:61:8a:77:b1:ab:a7:87:83:c5:f7:17:5e:ee:31:
         9e:2e:52:38:d9:b2:f2:75:ca:53:83:1d:a5:ed:47:dc:e2:d3:
         65:c1:60:f8:d2:c8:9b:fe:e3:34:e4:81:eb:9d:76:db:ec:9d:
         f9:55:b2:fe:52:cd:5a:c7:d6:a5:f4:c4:6a:f0:36:06:fb:ef:
         32:cd:6b:1a:aa:3e:f2:d1:fc:75:9e:b9:f3:40:12:75:8b:60:
         e7:21:96:b6:e6:d4:bb:85:55:e1:e3:de:5d:2a:33:32:38:ba:
         b0:be:50:d3:4e:b7:80:7a:13:0d:4d:cc:9f:54:bc:17:eb:2d:
         13:cf:4b:ef:0a:c5:20:05:2f:8e:e2:02:5e:86:e1:23:8e:9a:
         dd:24:5b:30:6c:f2:d0:79:3f:ac:e1:f9:e2:3b:7e:5a:7b:8e:
         da:08:5f:66:40:9a:0e:91:58:47:bf:a6:81:2a:ca:97:2f:c9:
         86:d7:5a:88:57:c0:75:0c:6a:73:d4:8f:09:30:67:95:22:1a:
         57:45:79:dc:55:49:d9:42:27:5e:c2:28:1c:2c:33:f0:c0:e2:
         6a:74:3f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:01:22 2026 by rpki-client