Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
File:                     _BP3-iN_idARIzuscyjCIZun1iw.mft (raw, json)
Hash identifier:          tKOPtRG5RtINWd46a213199ZpWoy1ETP1Tb9hndPN98=
Subject key identifier:   E3:3F:76:C9:C4:E7:69:BB:B1:B6:C9:4A:FC:2F:F8:42:7F:0C:D1:EC
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Certificate issuer:       /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial:       01A0D8A869501DE2C5B7877FF7295BBD51BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
Manifest number:          1A79
Signing time:             Fri 25 Sep 2026 13:01:50 +0000
Manifest this update:     Fri 25 Sep 2026 13:01:50 +0000
Manifest next update:     Sat 26 Sep 2026 13:01:50 +0000
Files and hashes:         1: IvZ6Um5m60G1rmPcT0KgjCCstR0.roa (hash: P9MHZuhBNWgKoyXnEBUJRS1TnSoDtxisa290juUJbfE=)
                          2: LcBroKBLXoM6xXO9zi3GvH6KmR8.roa (hash: fH5tm86jikYUxeNxCkC081pHnyjYlsjUYmP8CBL7xrk=)
                          3: _BP3-iN_idARIzuscyjCIZun1iw.crl (hash: EeSJO6FwwG5p/2ILFp3t8oMD1RmcjFUqulk8faCqkzA=)
                          4: dVtzjzM4YSfSrc4WwaY5N5o9pwo.roa (hash: k5YYP5FpQZ54/UVc59zI046GfdNFSJmuZYec2D0RBr8=)
                          5: tOte9icBvp7fZ4JFtJj262jmG2k.roa (hash: 9UlFr1VWg8sSAFkwJ6utTCjAp2VRA7ApImW+9wnEJvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:a8:69:50:1d:e2:c5:b7:87:7f:f7:29:5b:bd:51:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
        Validity
            Not Before: Sep 25 13:01:50 2026 GMT
            Not After : Sep 26 13:01:50 2026 GMT
        Subject: CN=e33f76c9c4e769bbb1b6c94afc2ff8427f0cd1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:62:80:de:df:32:71:7e:cb:b5:a3:a3:4b:
                    41:91:76:6b:6d:1c:97:38:f9:fa:22:8a:54:ae:fa:
                    c7:4b:93:ca:de:ee:cf:47:34:70:18:1f:99:f4:4b:
                    e4:dd:30:4a:21:62:61:5f:b1:ed:fb:6a:b6:70:7e:
                    7b:22:bb:09:e4:8c:05:44:02:25:94:f0:2d:89:c6:
                    92:61:ca:1d:be:fa:25:ee:9b:36:21:ca:68:4a:17:
                    f0:ea:92:1c:2a:4b:48:0a:32:17:b3:76:21:9c:0f:
                    c1:90:96:b5:b9:33:ad:f4:aa:05:24:2c:50:af:ad:
                    c4:8d:6f:9d:8c:c9:d8:ff:ea:36:68:a8:88:04:23:
                    ff:b8:f1:37:b4:5b:ae:5d:41:7f:91:e4:0e:fc:42:
                    33:22:2e:aa:1d:3c:31:4f:a2:e3:7b:b6:f3:3f:fb:
                    cf:40:27:cf:55:9e:6d:95:52:9f:60:b0:0c:60:f6:
                    ba:c5:87:e4:9d:e3:72:9c:6b:97:80:45:8d:4e:53:
                    71:5d:4f:3b:a9:c0:03:5a:25:3e:cc:85:ba:8d:97:
                    03:60:09:97:c3:fa:c9:56:35:43:6f:10:51:20:3d:
                    6a:1a:a9:64:81:e8:65:c5:2d:9b:44:67:ee:32:f9:
                    df:a0:e4:78:a1:53:7f:95:96:13:31:0d:97:1d:13:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3F:76:C9:C4:E7:69:BB:B1:B6:C9:4A:FC:2F:F8:42:7F:0C:D1:EC
            X509v3 Authority Key Identifier:
                keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:88:de:18:07:9c:43:dc:3e:28:43:78:b7:fd:41:4f:12:17:
         3b:9e:88:3d:7e:7d:8b:71:c8:2f:ae:b8:bf:67:db:e2:1d:ae:
         3d:41:5c:da:8e:62:2c:4a:f8:b2:60:e4:6e:40:54:05:bf:2f:
         2b:54:2b:71:34:e7:8c:60:bb:17:01:a3:55:4d:bb:c0:ce:a1:
         36:10:73:c1:07:5e:7b:35:13:74:40:ba:74:96:14:18:0a:ce:
         92:31:c6:d0:94:68:f2:0e:4f:5f:fd:a5:92:97:cf:25:12:4f:
         d7:93:30:45:15:7d:2c:19:45:12:1a:1a:4f:87:cc:2a:1a:1d:
         80:56:e6:de:54:11:ea:62:ef:fa:65:ec:95:20:1e:b6:9c:c9:
         e0:d0:67:99:28:77:ed:40:20:e4:88:48:f0:f3:1f:46:8e:86:
         1c:60:df:8b:2e:8f:7d:0d:89:fd:47:40:44:d5:ba:49:60:b2:
         28:4d:a7:b9:ec:bf:85:6d:46:f8:36:8d:37:f7:47:ef:14:a9:
         6b:b8:bf:b7:21:e0:ca:cd:32:5f:17:e2:bb:70:5f:bb:bf:bb:
         63:1a:5c:e4:fd:0d:b1:a6:c0:2e:23:b9:46:a0:10:8f:6d:dc:
         81:d3:1f:14:c8:24:e5:24:e4:c6:aa:d1:8a:53:62:d6:e8:52:
         06:c5:71:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:04:04 2026 by rpki-client