Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
File:                     A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft (raw, json)
Hash identifier:          Mjfs0YPuKARl/JkgXnsJ0Ybb7OAnibauBmrvpZZoPfI=
Subject key identifier:   35:5E:0B:83:BC:F5:51:29:B5:F7:CB:B3:3E:71:AC:D8:F1:7A:5B:39
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Certificate issuer:       /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial:       01A0D7CCF03B60EDFD3D056C5AE03DF7DC9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
Manifest number:          14B8
Signing time:             Fri 25 Sep 2026 09:02:07 +0000
Manifest this update:     Fri 25 Sep 2026 09:02:07 +0000
Manifest next update:     Sat 26 Sep 2026 09:02:07 +0000
Files and hashes:         1: 0p95IngmkZetH0gXJAOs3SDAY0E.roa (hash: LNPnqbLWCMHvDTcExFmSigDZZyvSElARaSkh4q6WPOA=)
                          2: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl (hash: c1oE384Vg1utY3nXMrWc4UAG4YOAeIFO2xboZ3S6c6Y=)
                          3: Kmej-qj8fPfHORtg4SVaVONzC0U.roa (hash: 6jPhrS5Z1S4tcgzddswtFrBAws8weds+gbgTtA+mUrw=)
                          4: QpnXyX_umcsmqvreaTpX1ie0BoE.roa (hash: QyePGZ/3nR4Ec0qcv35y65LN0I6BsNvKBqNN8cDu/NU=)
                          5: YwRJ2tVF3VFoI8oBKxmxmrlWvzU.roa (hash: e5XlfGq0oDoZyjw7Mj6ppUzfy4+mxsWTLSJb/MkUC8s=)
                          6: fG4rAo9hnNmK3VLhmWi71rIfAd8.roa (hash: gGzEO/u7SMQDSlMk5ffb5FzkNVdHLmHQvEqqwyoxESc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:cc:f0:3b:60:ed:fd:3d:05:6c:5a:e0:3d:f7:dc:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
        Validity
            Not Before: Sep 25 09:02:07 2026 GMT
            Not After : Sep 26 09:02:07 2026 GMT
        Subject: CN=355e0b83bcf55129b5f7cbb33e71acd8f17a5b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:32:30:59:82:ac:3d:b6:44:1a:59:3d:e6:cd:
                    eb:69:02:c5:da:80:26:4e:64:cb:2e:10:11:65:bf:
                    08:9d:6a:43:88:32:df:95:0d:a5:73:c9:00:36:1c:
                    1e:de:77:c4:d2:55:31:ac:bb:11:cf:5c:93:79:a2:
                    07:69:e7:53:3a:00:da:e4:88:13:b9:af:04:33:03:
                    b9:69:3e:dc:4d:d2:75:82:a2:79:b6:93:c9:ad:05:
                    c0:73:b7:02:12:d9:31:a2:71:36:8e:42:0c:f7:33:
                    c2:df:37:b6:67:ed:69:db:53:65:9c:56:c2:b6:67:
                    1b:49:15:66:47:5a:5f:cd:b6:ad:a7:c9:17:da:51:
                    93:5a:ca:04:c0:70:c0:4f:75:db:8f:ca:2d:8b:d6:
                    ca:73:fe:3c:fb:18:c4:98:d4:b2:9b:fd:ce:ba:8e:
                    04:57:bb:6b:a2:0d:e5:93:9c:c6:6a:b6:5d:60:81:
                    44:2b:24:9e:6b:14:d4:f4:3e:d5:19:f1:84:62:cf:
                    09:0f:41:ef:8c:71:be:84:4a:74:13:c0:1a:bc:c7:
                    1b:81:0d:60:52:26:98:79:cf:41:46:2b:29:92:0e:
                    42:cf:7d:e5:7e:e4:15:ab:ac:65:d3:56:84:90:49:
                    1a:b2:4f:de:0f:44:bd:3e:d4:0b:be:20:87:67:de:
                    c4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5E:0B:83:BC:F5:51:29:B5:F7:CB:B3:3E:71:AC:D8:F1:7A:5B:39
            X509v3 Authority Key Identifier:
                keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ce:e5:ce:ef:b8:84:07:c8:c1:14:f7:2b:54:d5:a3:4a:d5:
         73:b7:ab:8d:57:00:e1:6a:a5:dd:19:ea:7c:69:1a:80:d4:41:
         37:a7:af:fd:55:e3:d7:82:19:ae:11:c8:8a:3b:66:c1:b0:63:
         36:cb:11:e9:c1:75:c9:cd:ee:a2:1d:06:b0:9a:36:35:37:99:
         86:d5:b3:ce:1e:95:5f:29:ec:90:a7:83:c3:31:38:66:aa:c7:
         15:87:30:05:48:7e:cb:e2:25:91:0c:02:5e:9d:b6:5d:66:42:
         5f:8c:4f:8a:15:14:1c:c7:52:d8:dd:97:97:e8:be:90:54:0e:
         35:66:fb:31:41:dc:c7:31:a1:b6:7a:42:06:ee:55:46:f9:1e:
         b7:89:89:e7:cf:1a:20:cd:98:52:af:ad:86:d4:58:dd:06:58:
         82:0a:79:0f:4c:f3:61:c1:00:b5:c8:34:8e:35:76:4d:c6:2e:
         3c:dd:00:d6:8f:92:b9:f4:ec:38:d4:ab:02:77:cd:6b:83:01:
         09:66:67:9f:d2:2f:87:73:b1:ed:68:3c:72:7f:f1:aa:ab:c1:
         88:9b:3b:54:ee:7a:1a:97:69:dc:d6:2c:e5:9b:5c:59:bc:ab:
         d6:2d:59:f3:3e:43:b3:99:b8:bb:49:0b:c9:d4:ad:36:7b:61:
         6c:98:a9:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXzPA7YO39PQVsWuA999yfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjdlN2NmODE3NmUzMDI3NjRkNDgyOTlmYzIyYTliZGM2
YmE2ODMwHhcNMjYwOTI1MDkwMjA3WhcNMjYwOTI2MDkwMjA3WjAzMTEwLwYDVQQD
EygzNTVlMGI4M2JjZjU1MTI5YjVmN2NiYjMzZTcxYWNkOGYxN2E1YjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTIwWYKsPbZEGlk95s3raQLF2oAm
TmTLLhARZb8InWpDiDLflQ2lc8kANhwe3nfE0lUxrLsRz1yTeaIHaedTOgDa5IgT
ua8EMwO5aT7cTdJ1gqJ5tpPJrQXAc7cCEtkxonE2jkIM9zPC3ze2Z+1p21NlnFbC
tmcbSRVmR1pfzbatp8kX2lGTWsoEwHDAT3Xbj8oti9bKc/48+xjEmNSym/3Ouo4E
V7trog3lk5zGarZdYIFEKySeaxTU9D7VGfGEYs8JD0HvjHG+hEp0E8AavMcbgQ1g
UiaYec9BRispkg5Cz33lfuQVq6xl01aEkEkask/eD0S9PtQLviCHZ97EeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVeC4O89VEptffLsz5xrNjxels5MB8GA1UdIwQY
MBaAFAP358+BduMCdk1IKZ/CKpvca6aDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUt
M2NmM2I0NjNhODZhLzEvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUtM2NmM2I0NjNhODZh
LzEvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOs7lzu+4
hAfIwRT3K1TVo0rVc7erjVcA4Wql3RnqfGkagNRBN6ev/VXj14IZrhHIijtmwbBj
NssR6cF1yc3uoh0GsJo2NTeZhtWzzh6VXynskKeDwzE4ZqrHFYcwBUh+y+IlkQwC
Xp22XWZCX4xPihUUHMdS2N2Xl+i+kFQONWb7MUHcxzGhtnpCBu5VRvket4mJ588a
IM2YUq+thtRY3QZYggp5D0zzYcEAtcg0jjV2TcYuPN0A1o+SufTsONSrAnfNa4MB
CWZnn9Ivh3Ox7Wg8cn/xqqvBiJs7VO56Gpdp3NYs5ZtcWbyr1i1Z8z5Ds5m4u0kL
ydStNnthbJipkQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:52:47 2026 by rpki-client