Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File:                     acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier:          LVpgmZaDUn4Q4dL7GUhjxZI9S92jumnLcRQNWX1sehQ=
Subject key identifier:   E7:5C:EC:88:B9:D4:1C:72:04:DC:53:BA:C5:F9:45:48:09:23:23:15
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer:       /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial:       01A0D8DF27347A6E57C42174109CDF1C9FF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number:          1A73
Signing time:             Fri 25 Sep 2026 14:01:38 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:38 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:38 +0000
Files and hashes:         1: 8yAZGDwl6Q5NdW6_5msXiHDy6v0.roa (hash: hTQqJteeaF5ZjxlYrkjPbZjafNKCCRD7RpYTaq51+Q4=)
                          2: WHR6l1Q5Ar0v18AKFt90RxwkrKo.roa (hash: WNLKDaJxOe6Uz6jgAOWxAF+kTRgHf8gZjh0RxUla/9E=)
                          3: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: ZBoglfNB3OySMdeRNxoe/M9fG6myGuJddKsy7goL0E8=)
                          4: gKFSZ12cdmISn4h5sbRx_f8ayV0.roa (hash: EtpOpvk7x1JOKFPhiQBQKjgaBtJnr2gJBSccIdWGROA=)
                          5: yNU-ToeAL7NXOOz9_-FlFzYfpBA.roa (hash: TjYy4/mDVjYziy+CeletARV0PQ6H5KzIho/639xxwbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:df:27:34:7a:6e:57:c4:21:74:10:9c:df:1c:9f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
        Validity
            Not Before: Sep 25 14:01:38 2026 GMT
            Not After : Sep 26 14:01:38 2026 GMT
        Subject: CN=e75cec88b9d41c7204dc53bac5f9454809232315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:96:ba:63:e3:41:db:73:b8:54:ab:cc:48:16:
                    0c:78:a4:4c:ea:fe:96:52:c7:fb:9a:02:53:66:34:
                    84:c4:bc:c6:92:ec:80:68:56:bf:57:5f:ac:cf:68:
                    59:17:fb:61:ed:0a:a0:bb:63:48:55:62:e1:8a:dd:
                    93:e1:88:c8:42:0f:31:ad:7f:44:0b:b8:6a:46:af:
                    ae:07:24:00:71:fe:6a:d8:0e:74:03:1a:52:b0:72:
                    31:c8:b0:4d:35:4e:c1:8a:2a:bb:90:5e:a4:d3:cc:
                    71:82:a5:ba:ea:9f:a7:9c:cf:85:0f:04:a1:f3:08:
                    8a:66:04:ed:97:67:41:c7:b8:cd:ce:7b:74:a5:4c:
                    18:5a:03:43:4a:07:b2:c1:52:6a:64:54:d0:92:d9:
                    80:32:c2:61:29:71:38:d5:cd:c4:89:b5:ae:05:c1:
                    a4:45:81:c6:e4:f3:24:98:48:f9:c3:66:d0:42:c8:
                    1b:1d:fb:12:f8:41:bb:07:83:30:97:3c:5a:ff:1b:
                    d6:db:32:6f:a6:b7:8d:30:c7:eb:33:92:14:38:cf:
                    07:6f:2d:ec:5c:b9:f9:eb:e1:1a:1f:7b:4c:5b:35:
                    14:cb:ca:08:13:5d:7f:5b:c9:9b:c8:52:4a:e2:fa:
                    44:72:11:f1:b4:45:85:f2:83:8f:94:36:ae:e9:5d:
                    3d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5C:EC:88:B9:D4:1C:72:04:DC:53:BA:C5:F9:45:48:09:23:23:15
            X509v3 Authority Key Identifier:
                keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:43:a5:16:db:8b:5b:92:07:0d:ae:32:b7:af:dd:84:47:4e:
         af:8f:05:1a:53:7d:2c:a3:5d:b0:7a:dc:ca:b3:bd:61:11:67:
         f1:83:67:87:f3:c3:4e:75:f0:c3:c7:49:68:c9:5f:b7:e1:a7:
         e2:61:0d:a6:b8:09:49:2a:40:89:33:e5:cb:3a:a9:7a:08:ad:
         34:4a:e4:4a:a2:de:07:36:6b:1d:65:a5:92:16:97:45:0d:27:
         d7:e2:84:98:3e:c0:14:f9:8c:1e:b0:c6:23:6f:4b:8d:aa:58:
         87:5a:5d:f3:13:a5:d9:0f:4a:57:72:23:ff:06:d9:f9:fb:35:
         b0:1d:7f:4d:a3:a4:9a:91:f9:ba:9d:2b:d5:31:d7:c0:b1:3f:
         2b:65:ff:a2:c9:74:14:59:36:fa:0f:ae:64:93:aa:ed:38:5e:
         60:1e:97:b6:c1:5d:d5:b2:c9:4f:91:44:0f:e5:50:2b:70:d0:
         ec:49:da:04:2d:9a:dc:e9:7e:8b:7a:d5:5f:99:f4:49:31:88:
         55:fc:8c:83:0f:bf:81:93:4b:bf:4d:ed:7b:f5:5b:66:67:50:
         9f:d3:7a:b3:43:da:15:22:9e:11:95:63:2d:a8:e7:6c:b6:66:
         25:db:3a:a3:af:4b:d8:33:f2:28:0e:6b:07:59:92:81:4f:b6:
         2b:fd:5d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:26:23 2026 by rpki-client