Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.mft
File:                     FwMkTJ3yJS6tRDbZHfa4RAQUWmA.mft (raw, json)
Hash identifier:          5kuyluXzbtFmeAZVOstsZr34QMnn0/kOdJZHfwEl4dQ=
Subject key identifier:   3E:1B:0B:9E:96:9C:3A:E2:41:EC:26:33:6D:67:78:D8:45:E2:6E:CC
Authority key identifier: 17:03:24:4C:9D:F2:25:2E:AD:44:36:D9:1D:F6:B8:44:04:14:5A:60
Certificate issuer:       /CN=1703244c9df2252ead4436d91df6b84404145a60
Certificate serial:       01A0D7CC3C8FE77EC2B48A9451FDFEB72BB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.mft
Manifest number:          E9
Signing time:             Fri 25 Sep 2026 09:01:21 +0000
Manifest this update:     Fri 25 Sep 2026 09:01:21 +0000
Manifest next update:     Sat 26 Sep 2026 09:01:21 +0000
Files and hashes:         1: FwMkTJ3yJS6tRDbZHfa4RAQUWmA.crl (hash: PRMffMQDym5Wgw99G9OMh0bgOO/6MvWnrH/Ir3kWapo=)
                          2: xU7UoNQMWPE1i86W4dVgdFTRphY.roa (hash: q2xkz4MQhyERngQ8lq1SS1tWjkdb+8VOT+aKd0BdBYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:cc:3c:8f:e7:7e:c2:b4:8a:94:51:fd:fe:b7:2b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1703244c9df2252ead4436d91df6b84404145a60
        Validity
            Not Before: Sep 25 09:01:21 2026 GMT
            Not After : Sep 26 09:01:21 2026 GMT
        Subject: CN=3e1b0b9e969c3ae241ec26336d6778d845e26ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:17:17:63:9d:b3:66:fe:dd:9e:20:ac:02:
                    df:4d:ed:1e:8c:03:d9:1f:95:69:4d:d0:66:de:11:
                    fc:bb:b0:66:a8:42:fd:86:48:29:63:be:db:a6:44:
                    bf:e8:5d:db:23:f9:63:34:6e:c9:66:52:0f:f3:18:
                    0b:ca:b4:b8:03:a4:63:78:fd:f8:4b:c8:7e:14:c9:
                    cd:48:85:bd:fa:fd:51:3c:59:23:09:59:a5:c8:30:
                    87:1a:2f:2a:06:30:a0:68:4b:84:d6:5e:51:07:30:
                    db:87:6b:cb:27:9f:1e:af:f1:4c:81:c4:ce:fc:26:
                    2e:1d:ab:1d:15:50:57:e5:30:aa:19:ec:dc:93:6e:
                    b4:ad:e6:33:64:c9:e2:d9:29:95:10:cf:0f:d1:76:
                    9e:4e:48:da:91:a4:4f:62:f2:63:33:e0:60:26:81:
                    44:28:21:2a:c8:7c:8a:dc:59:46:1c:fd:53:37:00:
                    0b:a0:7c:76:bd:93:7b:af:fd:26:26:8e:d3:01:e3:
                    39:a1:2c:7f:e0:dc:ba:ac:94:fe:a1:bb:83:bc:83:
                    5f:ce:1c:49:42:4f:da:96:74:1a:74:86:07:e6:5e:
                    49:85:35:4e:72:b1:02:a6:41:71:b0:3a:6d:6d:2d:
                    80:c2:7a:23:5c:5f:67:8b:c8:9d:a9:10:36:58:5a:
                    c1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1B:0B:9E:96:9C:3A:E2:41:EC:26:33:6D:67:78:D8:45:E2:6E:CC
            X509v3 Authority Key Identifier:
                keyid:17:03:24:4C:9D:F2:25:2E:AD:44:36:D9:1D:F6:B8:44:04:14:5A:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:48:fa:5b:7c:45:f9:64:3c:0b:4f:f3:ec:05:69:a6:f2:ec:
         91:3e:31:28:07:aa:d9:e1:12:9f:0e:27:dd:8a:fa:2f:26:dc:
         22:42:8e:eb:fe:86:3e:d3:1e:35:4a:76:cb:05:05:8b:aa:76:
         54:8a:2f:8c:80:30:a3:a3:33:36:58:79:30:93:86:5e:ae:da:
         fd:6d:45:d3:b6:f4:6a:be:ef:9e:02:ed:e6:e7:92:0b:67:09:
         31:01:b5:b5:41:53:32:fb:ee:60:0a:9a:8c:81:5c:90:34:a0:
         d6:93:a9:21:75:b6:6e:56:2b:04:c8:75:0f:32:3b:a6:a9:73:
         a0:78:11:e0:4f:bb:60:07:08:3d:94:03:cb:1c:d0:b7:ad:68:
         ef:8f:00:0f:9f:e4:77:a7:18:89:94:28:01:83:ba:2d:7e:b8:
         82:60:2b:e4:41:7d:2f:1b:2d:79:79:cf:bf:6b:72:ae:62:eb:
         69:dd:c0:a7:2f:5a:41:34:52:35:d4:b6:96:2e:49:31:66:d5:
         52:5f:a4:59:9d:51:39:18:4a:13:23:3d:c1:79:0d:fb:91:47:
         c8:56:08:66:07:57:d5:81:e0:3f:cb:46:0a:d4:2f:58:8b:bc:
         cc:44:86:ef:7f:50:88:47:99:4b:b3:45:76:76:0a:6f:4a:5d:
         f8:32:85:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:08:17 2026 by rpki-client