Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
File:                     1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft (raw, json)
Hash identifier:          DxrwzyoOWnQNWi2zlpqjThR9KZv2lRKh4t4UC2MiXOM=
Subject key identifier:   F5:3C:09:DF:FF:DD:FF:8E:A0:82:E9:66:DA:FA:F4:90:33:6E:3C:B7
Authority key identifier: FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
Certificate issuer:       /CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Certificate serial:       01A0CA0FDDC9DF20EE5D3DEC9A8810B55E6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
Manifest number:          0905
Signing time:             Tue 22 Sep 2026 17:00:32 +0000
Manifest this update:     Tue 22 Sep 2026 17:00:32 +0000
Manifest next update:     Wed 23 Sep 2026 17:00:32 +0000
Files and hashes:         1: 1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl (hash: dyMbWso4OWt1/H+q+bssB1nss6Xip1BB/SSiUoFV63I=)
                          2: 7VaINFSPqt3mXGHqO2ZFwEPWEfE.roa (hash: 5sz1u1bzF1UGMTJq4Lxgn8XO6YmGX618edjqYJ+pTDo=)
                          3: NLxrIIugp3R4DpT8Bd4iByRao_Y.roa (hash: wBPPunNUH66uF/lnjqaErJgsT6xEJ8SJhXS+mFEdnAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:0f:dd:c9:df:20:ee:5d:3d:ec:9a:88:10:b5:5e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
        Validity
            Not Before: Sep 22 17:00:32 2026 GMT
            Not After : Sep 23 17:00:32 2026 GMT
        Subject: CN=f53c09dfffddff8ea082e966dafaf490336e3cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:9c:b9:b4:19:ae:0f:c8:2f:3d:73:6b:0e:
                    65:b3:f0:99:97:ba:d9:34:d8:3e:cc:f1:3f:c3:38:
                    44:24:f4:96:2d:5f:6e:39:70:ef:f5:25:ce:a1:60:
                    43:81:bb:42:7e:36:47:0d:8f:24:16:bf:05:cc:d1:
                    37:18:f7:0b:cc:25:24:8b:af:cc:fc:1e:f0:1c:f9:
                    d2:a0:24:0e:61:75:ab:0a:da:b4:3a:58:8d:fd:bf:
                    05:52:15:55:77:71:11:55:b3:45:02:fc:8e:46:d8:
                    1a:e4:7a:c7:2d:e7:7f:48:f9:62:4b:ba:ca:d7:50:
                    f3:ea:f5:fd:ae:a2:80:28:c6:25:07:ad:45:9f:e9:
                    03:09:c5:53:c1:af:1c:5b:5a:d5:8d:64:d7:df:5d:
                    ea:46:e0:ad:76:78:d1:05:5c:98:a6:b2:01:04:dd:
                    3b:4e:7d:84:94:55:82:99:1a:cb:30:d9:3e:56:4a:
                    86:6c:cc:9a:95:c3:8c:0b:68:46:63:2c:ac:71:a0:
                    64:46:e0:9e:89:84:d7:dc:4a:e3:eb:19:18:90:c7:
                    14:98:4a:a7:41:4a:1f:86:34:91:0b:b6:45:49:c0:
                    3a:b5:51:fa:9c:87:e9:76:b3:9a:a9:00:df:45:6c:
                    b6:d8:41:6e:eb:59:78:5e:ad:a3:7d:e8:4e:8f:64:
                    5a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3C:09:DF:FF:DD:FF:8E:A0:82:E9:66:DA:FA:F4:90:33:6E:3C:B7
            X509v3 Authority Key Identifier:
                keyid:FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:7a:40:62:c3:b2:1e:6f:41:7a:02:6e:f1:10:56:f7:d3:d7:
         08:6f:d6:06:85:92:0e:82:0e:5c:d3:0e:86:1b:2a:d3:8e:90:
         a4:1d:6d:64:f0:0f:f8:73:d5:73:88:e9:45:87:3e:90:91:16:
         67:5c:a5:46:10:7b:7d:45:7e:88:45:ab:23:46:3b:af:d3:be:
         16:7a:50:ba:c1:3f:07:01:6a:6a:7d:9c:7e:56:01:e2:ba:6e:
         64:ff:68:24:7c:80:10:88:ed:45:f5:7d:f0:cc:be:42:cd:b4:
         9f:8b:24:f2:51:cf:aa:35:f0:fe:25:67:ea:0d:12:1c:c3:94:
         8a:bf:f9:15:79:35:e8:f2:0f:c9:26:f5:6b:b6:ac:b8:b7:76:
         59:1a:4a:85:34:09:cd:45:7b:97:09:68:c3:d2:bf:d6:73:44:
         ce:07:de:18:a9:80:cc:40:f9:a9:f4:d8:8f:4a:96:ad:08:be:
         02:bf:9e:e7:fb:1b:82:fe:df:54:fb:40:0e:a0:87:b4:ed:18:
         42:6f:2e:1a:96:4c:d9:60:33:af:ff:ba:a3:d5:3e:40:3a:0c:
         6d:43:13:0a:94:9a:56:fc:8f:1a:28:02:25:1a:c3:44:4f:f9:
         72:52:94:9c:c5:11:d5:61:cd:14:d6:16:7c:4d:d4:01:21:20:
         90:49:59:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:22:11 2026 by rpki-client