Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File:                     ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier:          PiSRN2Xe8xBR+Dt/xPMZV1Kk7hJUkLsL1WY5u9/BvVo=
Subject key identifier:   30:F0:BD:DA:36:A7:0C:06:0C:61:DB:81:AB:8E:F9:FC:28:13:C6:3E
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer:       /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial:       01A0DE04E063BC2F634BC2AD9EEC53789AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number:          0B30
Signing time:             Sat 26 Sep 2026 14:00:56 +0000
Manifest this update:     Sat 26 Sep 2026 14:00:56 +0000
Manifest next update:     Sun 27 Sep 2026 14:00:56 +0000
Files and hashes:         1: 1W82at7mSiuchX3iCzO6G2WZfjs.roa (hash: OyjiciJl+n/aBNYiJh6cnpdIClbp0Z2IycUrjNfaQ1s=)
                          2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: 2DgQI9oobdM0U26mHIKXp93Ax9U0jNYn+J3+Sp94VnI=)
                          3: jFw457Jipvup6yZKtXR8tj_7Yhg.roa (hash: FJJh85N3yB8rz50G6DYLIKGlO6AtACjKyBi0U99WQzc=)
                          4: xsaLPUS_EPRPzM8NWjyE1aTWHX4.roa (hash: dBX6NfyeptV43b7aTbE31Dh+/tXWuq6hyAQ37G7Hits=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:04:e0:63:bc:2f:63:4b:c2:ad:9e:ec:53:78:9a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
        Validity
            Not Before: Sep 26 14:00:56 2026 GMT
            Not After : Sep 27 14:00:56 2026 GMT
        Subject: CN=30f0bdda36a70c060c61db81ab8ef9fc2813c63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b5:21:8c:37:65:16:49:9f:c7:c5:e9:c6:b1:
                    8c:df:74:5c:1f:24:31:a9:c0:84:d8:33:19:fb:92:
                    29:dd:98:b1:76:f8:06:86:5f:95:9b:29:0e:d8:ac:
                    6d:e0:72:63:3c:36:96:be:08:17:d2:61:ec:70:07:
                    73:ef:a5:f4:00:8f:8f:02:a7:0a:36:6e:14:4e:f0:
                    01:95:1f:aa:99:3a:e4:7c:1a:88:4c:6e:f2:63:f6:
                    54:c7:5d:c4:cc:ce:82:69:00:0a:41:58:33:a9:b5:
                    c5:fa:23:b6:32:c4:1f:fa:ff:55:4f:8b:61:0c:f7:
                    fe:62:4a:56:46:26:ad:cd:02:38:75:d9:66:47:ad:
                    2a:3d:5e:db:ec:bc:ed:97:71:73:b0:3f:e5:3d:ed:
                    77:65:8f:c7:69:a4:d8:74:7e:6b:dc:d3:11:46:38:
                    23:8c:57:f9:e7:f8:9f:99:15:f2:56:25:76:46:b1:
                    25:ac:0c:f0:e0:ad:8c:64:7b:d1:df:d4:73:ff:2c:
                    be:ff:ab:d0:ea:21:00:fc:1e:c9:c5:85:42:39:db:
                    0d:3b:29:90:4c:5e:9b:de:40:a0:8e:c1:5b:b9:5e:
                    44:e1:9f:34:c4:37:e9:8e:a8:cd:9e:54:1a:3d:46:
                    b7:ed:c6:67:27:58:a1:18:f1:a7:ba:44:9c:9e:56:
                    eb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F0:BD:DA:36:A7:0C:06:0C:61:DB:81:AB:8E:F9:FC:28:13:C6:3E
            X509v3 Authority Key Identifier:
                keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:88:38:02:55:cb:67:cc:e2:53:00:0e:55:6e:29:cd:f2:bd:
         60:72:ca:2f:15:e2:55:bf:5d:45:bf:48:79:9c:d5:ba:4c:8a:
         f2:9d:8d:64:b5:44:61:f6:e0:a9:28:32:85:2b:6e:a9:53:17:
         03:4d:64:1a:87:78:84:8f:cd:96:de:9f:d6:73:6c:ef:e1:5c:
         3f:72:98:b2:2f:74:47:03:cd:b8:40:13:7c:a3:d9:d9:38:3a:
         ac:4b:00:4a:84:dc:68:7d:1a:c7:ec:2c:e9:a8:fd:3d:d0:cb:
         b1:d9:dd:36:90:e5:7a:67:fc:29:15:ba:8f:cb:40:2e:15:f8:
         4b:f3:1e:6a:96:b9:50:a2:77:0e:da:ed:d3:cb:14:cf:8e:24:
         f9:e2:a3:ad:cb:35:4b:a3:b4:37:ec:e0:0b:76:03:16:d6:f2:
         08:17:07:5b:ec:6f:b1:e3:03:2f:8f:64:aa:78:b0:0f:0e:25:
         84:ff:e3:50:52:dc:6a:27:0d:d1:39:93:5c:e8:f6:0e:34:33:
         15:c0:28:6a:74:74:cb:4e:e6:13:78:c1:da:d3:93:93:0e:a4:
         37:aa:f4:92:5a:a3:97:17:a7:23:49:3f:04:0b:c4:00:42:30:
         c1:78:87:1e:86:eb:fd:d0:de:48:80:c9:3d:2f:d2:12:8a:96:
         69:66:41:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:29:13 2026 by rpki-client