Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
File:                     fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json)
Hash identifier:          s0LInNVAOKrWYAU0/FYCXLHRrk3n8kMk0gI3MUgRNAM=
Subject key identifier:   D3:ED:75:22:2B:5C:1B:F5:CA:15:4F:30:AD:F6:AB:56:02:35:49:04
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Certificate issuer:       /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial:       01A0DD6092B0643F73E1CBA685B897540CE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
Manifest number:          1A99
Signing time:             Sat 26 Sep 2026 11:01:28 +0000
Manifest this update:     Sat 26 Sep 2026 11:01:28 +0000
Manifest next update:     Sun 27 Sep 2026 11:01:28 +0000
Files and hashes:         1: 5SEARh8FCEo871iB7G34fI2Kpe4.roa (hash: m8tzPmTHhc1WTCJBLsi032NvSAtwSGzKJid4Omy7Mh4=)
                          2: BBgeRSvbUJdniHYX4zOgCcL8ACY.roa (hash: PLe5zqvpsl1axyHkG+6mNC+e0kIU1k+pLvAFxSmrAmU=)
                          3: GINhKUhmBtKk0TkbBRxpcNSu6zI.roa (hash: AfFS2Kk3dLWfENSQf5EMy1ayLLvaFvbW7wW4mzMrY2c=)
                          4: GcjqtR6eaVf9zI7HkXKSnJA3w6w.roa (hash: A4MXiuxUupC9OPHA/5SoE0YyMSrNretsQcoN/Jow0+w=)
                          5: UxGBNLJORbA-dUtSWizJlzSR79A.roa (hash: iSbtbOdc4793QhhKCfmSFXrRr7lnZaOwHAQy1vMKWow=)
                          6: VI1RqKQ9FUKeH02MRHEork21o40.roa (hash: wdOOodFBuGweEJw4KzRpikC1wFqxQBn+ps1AczyBeZ8=)
                          7: Yu1zmysTEBKjL5YYLMMg4Z_eWEA.roa (hash: KRT9o5BiHue3+B57E9epeCM9JN4yPOhoqN4HYF+hLEU=)
                          8: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: kQ4umw+4QTzcxZx9Gj9ybARuyBez7C1EURyfWWJBpig=)
                          9: gxHDLsArjTiXKEpHJWMyRpUv3cY.roa (hash: dCObsibTUgKigew1g86RJZOg/QuYkH7A+/+pCpHO7nk=)
                          10: nuyOFFadfRrO-PHC8XAHyHRujfs.roa (hash: /f8gp/JEgFhNhBZOt0Zfqqd/+VO8Z7hxkEAexMPxwQE=)
                          11: u1nf-Thyw228svKtPSH3GG9Q0kM.roa (hash: zfCV7njN88258Q8HEPbW3g+KPAWnYoYtUU7LB/pH0+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:60:92:b0:64:3f:73:e1:cb:a6:85:b8:97:54:0c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
        Validity
            Not Before: Sep 26 11:01:28 2026 GMT
            Not After : Sep 27 11:01:28 2026 GMT
        Subject: CN=d3ed75222b5c1bf5ca154f30adf6ab5602354904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:41:53:ce:91:9e:90:07:2c:2d:7c:95:c5:e5:
                    54:6f:1a:7e:d9:f2:6b:30:8b:43:ba:b3:12:b3:9b:
                    a3:40:e4:d3:3e:cb:07:8a:f2:5d:24:2d:1a:31:78:
                    f7:27:ff:86:46:53:8a:09:be:3f:0b:39:a0:c0:97:
                    77:c3:0b:e2:bd:26:04:f1:cf:e2:78:be:b1:57:93:
                    14:f7:02:83:8c:ce:e8:94:a4:4a:a1:08:48:a1:eb:
                    15:ff:05:3d:62:78:ce:92:69:22:a4:be:bc:80:0d:
                    28:53:0a:45:6d:d3:ae:af:fd:ec:43:2d:e0:56:91:
                    76:79:7e:d0:40:68:61:b9:db:0e:3e:97:87:72:df:
                    74:44:6d:28:65:79:5f:54:ca:c4:84:31:6a:a5:99:
                    f5:f0:40:f4:ec:c6:ca:62:b6:1c:8b:ff:89:1f:55:
                    27:c2:f7:72:3e:dc:73:5b:6f:fa:99:23:a9:7a:9e:
                    f3:7a:84:aa:a8:e8:83:07:ce:fd:1c:3e:d8:fa:48:
                    c4:c8:45:cf:04:13:27:ab:71:56:c8:bc:ba:a3:ad:
                    d8:a2:62:5f:00:f0:ae:9b:11:05:72:71:33:a8:54:
                    52:8c:6d:5e:a9:6d:6e:39:4a:46:5e:39:f6:ed:1a:
                    a3:43:60:82:5f:db:b8:46:8e:eb:43:23:85:43:d1:
                    ce:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:ED:75:22:2B:5C:1B:F5:CA:15:4F:30:AD:F6:AB:56:02:35:49:04
            X509v3 Authority Key Identifier:
                keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ca:03:f1:e4:4e:c9:22:e8:24:a7:24:2d:22:59:e5:e8:e6:
         12:f5:01:e4:7a:8d:09:0f:b2:60:67:50:a5:53:c3:78:0d:a0:
         47:c2:35:60:d8:bf:92:c8:92:64:2b:d3:c6:62:84:0b:d0:b4:
         14:67:09:4f:a5:07:c1:67:1a:08:d8:cb:03:32:0d:97:fd:36:
         c4:b2:ce:8b:2e:30:43:45:61:df:c9:00:45:5e:17:66:92:88:
         e4:a9:f3:3d:aa:dc:89:70:83:ab:27:7c:79:bf:d0:de:e1:f0:
         0b:ff:a7:4b:b3:01:62:e5:a4:46:90:27:3e:96:dd:b2:10:42:
         b2:41:79:81:89:34:f2:a7:33:64:a3:15:f0:27:2f:1a:05:17:
         f8:ab:c4:8d:4e:d7:34:cd:15:99:0c:85:84:fb:32:97:be:ce:
         e7:9c:1d:90:ef:5a:c3:0e:ae:c4:73:cc:97:39:5f:e2:d8:cb:
         01:da:5f:fa:f2:f1:4a:75:5e:da:a1:73:c7:41:6a:c4:70:07:
         6b:b3:1c:87:04:2e:5d:c6:36:39:7f:be:02:62:09:62:4c:35:
         67:52:80:53:e3:a0:68:ec:38:9d:a6:37:05:76:c5:43:cc:a6:
         ce:8f:a6:9e:4b:cb:b5:a6:7c:c2:2c:68:d5:e9:0d:d1:5d:08:
         b6:dc:d0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:13:55 2026 by rpki-client