Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
File:                     f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft (raw, json)
Hash identifier:          zsmilc2fqqRC8yMP9X0SJiMi1V5UIBDCy2Azlun8g/s=
Subject key identifier:   77:81:3F:73:DF:0B:40:6E:BF:6E:5B:5D:00:6D:FA:B4:22:61:74:DC
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Certificate issuer:       /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial:       01A0D501ECC4CFD6F6CEF3EECF30BE21A029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
Manifest number:          1A75
Signing time:             Thu 24 Sep 2026 20:01:08 +0000
Manifest this update:     Thu 24 Sep 2026 20:01:08 +0000
Manifest next update:     Fri 25 Sep 2026 20:01:08 +0000
Files and hashes:         1: 1-JpO8q1qatRpRIjMok1nlLPPJtY.roa (hash: lxSDrjSJfDdxFsFnnvYvxdk4e0Y7x830KJAg7m4hvFQ=)
                          2: AkISYLOC_fnGrIUjLvM1LtDRQ5k.roa (hash: SsHVMDv4qWTRMiOyQPgpmacaVt+8MOyUS0XN6APKH7k=)
                          3: KAkO-7xOFpTAGhNLp1btnqE2bSE.roa (hash: IGYFUhUO628GeghMUJEog11qsWIupQM1Ghm5aRQ86iM=)
                          4: f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl (hash: rsaVSjVf2o5yRmPHCrXNp1cSpxfi2K/9uQTP4w12d/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:01:ec:c4:cf:d6:f6:ce:f3:ee:cf:30:be:21:a0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
        Validity
            Not Before: Sep 24 20:01:08 2026 GMT
            Not After : Sep 25 20:01:08 2026 GMT
        Subject: CN=77813f73df0b406ebf6e5b5d006dfab4226174dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1f:32:95:4c:36:9a:0b:90:28:26:1a:8e:de:
                    76:7f:76:dc:65:68:63:b5:49:5d:59:27:e6:2e:6f:
                    e7:5a:da:cc:41:04:89:a6:12:d2:8a:be:65:eb:c0:
                    fd:bb:16:a5:65:db:0c:f6:e8:67:91:66:52:56:16:
                    fd:4b:7c:49:a9:4e:3b:d4:dc:d9:9d:71:39:a6:78:
                    5b:25:dc:b3:29:a1:df:99:70:a0:ce:dd:f2:a0:4c:
                    2e:d9:9f:d3:21:ac:8a:3b:f5:2a:a7:a6:c6:77:73:
                    98:a1:7c:ce:95:c2:23:ba:a8:fe:5f:de:99:85:d5:
                    c1:8b:5e:57:43:ec:32:59:cf:96:69:f4:f3:2f:19:
                    d0:bd:ab:7c:86:9c:87:c8:67:8a:5b:a8:91:26:fd:
                    d6:18:0f:5f:63:8d:4c:b8:a1:14:54:1d:e6:de:3d:
                    87:a3:8e:d1:5b:8c:de:57:ce:5f:2f:03:f9:96:18:
                    3e:45:3f:96:08:24:e0:b8:f0:b7:27:fc:75:b3:09:
                    e2:8c:30:98:45:45:37:76:46:4c:1d:05:5f:09:52:
                    23:2f:93:84:5d:84:1d:16:12:ed:dc:06:51:b7:ea:
                    e3:4c:11:35:5c:f7:ed:99:de:cf:1d:d9:fa:59:07:
                    7c:e6:45:48:78:ff:10:11:0a:b6:08:14:b9:4d:a2:
                    dc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:81:3F:73:DF:0B:40:6E:BF:6E:5B:5D:00:6D:FA:B4:22:61:74:DC
            X509v3 Authority Key Identifier:
                keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c1:10:b4:b9:0b:40:33:0b:ac:ca:b6:25:e7:85:f8:f3:d7:
         31:dd:0b:5f:0d:a1:e5:ad:c4:17:90:d0:b9:d9:18:c2:f1:3f:
         49:07:cb:5a:09:ed:73:e8:f0:16:39:69:ea:9a:ef:ea:fb:a8:
         c0:c3:22:55:85:72:27:25:ca:3c:7e:e0:38:e0:a7:5c:07:c7:
         b9:02:5b:73:a0:50:49:8e:f9:bc:67:69:6f:59:34:27:fe:0e:
         b8:57:97:fa:b3:4a:f3:a9:a0:ea:14:7d:c7:48:c9:e2:02:4e:
         18:eb:43:06:a9:27:b4:d4:34:3b:3e:49:fd:5b:b5:3f:6b:51:
         9b:0d:4e:9e:aa:78:51:86:d1:22:4a:ee:f7:4e:94:49:b5:f0:
         21:5d:10:fa:69:99:db:68:e5:ef:79:7f:89:59:8c:6e:44:4f:
         de:2d:af:67:d1:64:7d:f0:2d:9a:a1:a4:1c:ef:2b:3f:28:ac:
         2b:fb:5d:f7:a3:57:6f:ce:f4:10:e5:f7:6d:c1:d4:a4:6c:d8:
         59:36:89:c0:6e:0a:fc:b6:3b:e9:9f:58:4d:e0:27:f7:43:12:
         c6:13:a8:61:38:26:1f:20:7a:7b:81:d0:64:51:0a:6f:b4:a1:
         21:9b:a8:4e:2c:6e:22:a0:7c:12:10:0a:c2:0f:99:20:9f:db:
         53:ac:f9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:37:45 2026 by rpki-client