Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File:                     CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier:          b/TEuCUlD1qXJi4qQn6VEf9uMnVAQYooBAui5E4/fMs=
Subject key identifier:   7C:6F:C0:25:E1:B0:0B:DF:88:E2:7B:E1:C1:9F:62:E7:9D:D7:89:9A
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer:       /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial:       01A0D15C0096008B4C9315EB7D0F8A4CD3E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number:          17B4
Signing time:             Thu 24 Sep 2026 03:01:02 +0000
Manifest this update:     Thu 24 Sep 2026 03:01:02 +0000
Manifest next update:     Fri 25 Sep 2026 03:01:02 +0000
Files and hashes:         1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: rdELlsy/Q4GOMCYAfKsGlRYvUimr+dl0umK4fbXHx1s=)
                          2: VFkF_gxwqOLJ92XDVRj4P0SgEao.roa (hash: Wjt9QdwBOWPZNtbiGNmLCWVPtfz89jktbtlEjzpW8gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5c:00:96:00:8b:4c:93:15:eb:7d:0f:8a:4c:d3:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
        Validity
            Not Before: Sep 24 03:01:02 2026 GMT
            Not After : Sep 25 03:01:02 2026 GMT
        Subject: CN=7c6fc025e1b00bdf88e27be1c19f62e79dd7899a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f2:c5:38:3c:db:a2:92:57:b4:0b:d9:c4:05:
                    1b:d3:1f:f8:78:35:5a:db:67:61:97:36:10:b1:ff:
                    04:5e:69:d8:a6:ac:53:0f:b5:87:7b:4a:ac:3a:5f:
                    a5:a4:b4:29:98:4b:1b:68:a7:73:c0:89:8b:e4:53:
                    b1:65:e9:9c:23:43:14:88:a5:56:bb:10:60:f8:0d:
                    39:b0:ac:9f:18:43:4b:d4:16:02:82:cd:94:10:91:
                    52:05:e8:2a:dd:18:f7:35:d5:63:28:d8:03:32:cb:
                    30:75:ae:f5:ae:c8:b4:6b:0a:02:d4:ac:db:1d:b1:
                    1b:0a:26:6b:4e:ad:05:74:9e:9a:f4:c5:6a:5c:b0:
                    7e:c6:80:d9:48:30:50:eb:50:96:a4:1c:8f:6c:dc:
                    27:4b:7b:61:58:f4:5d:82:91:5f:74:c0:73:9c:94:
                    91:24:08:e6:9b:af:74:e8:48:53:3d:2a:bd:1b:ec:
                    4f:14:5a:09:e4:5b:4b:29:00:23:37:3a:08:c4:a7:
                    06:09:43:fd:51:b6:bd:c5:66:c4:9c:0d:12:d3:49:
                    57:cd:37:b6:07:cb:7f:c6:63:ce:dd:06:3a:27:34:
                    67:a7:d8:10:d8:fe:33:ae:ac:85:5d:1b:bd:56:d7:
                    be:bc:a4:2e:c4:39:25:2a:5a:a9:8b:f5:29:38:08:
                    82:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6F:C0:25:E1:B0:0B:DF:88:E2:7B:E1:C1:9F:62:E7:9D:D7:89:9A
            X509v3 Authority Key Identifier:
                keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8e:35:56:fb:79:cd:79:69:f8:9a:63:6a:b8:ac:ca:f4:f3:
         5e:bd:da:ab:c7:56:f7:2f:90:a1:6a:5e:df:3b:49:22:36:a7:
         df:c2:3e:09:d3:61:53:0c:d6:49:d2:3d:6a:04:2b:97:32:67:
         3e:4a:31:83:d1:d7:ac:cf:5b:8f:1d:df:f4:fb:25:89:97:dd:
         d7:e6:c0:15:94:33:8b:03:e2:0b:fc:e2:a7:9c:e2:b4:fc:a3:
         bd:77:88:b3:aa:39:5a:36:e7:02:28:36:a8:0b:59:00:88:5d:
         da:38:7e:05:f4:37:65:bf:31:94:e7:52:d8:55:ff:bb:61:29:
         94:45:ef:8e:87:64:58:81:83:37:42:e5:68:cd:fc:88:67:c4:
         9b:81:ce:48:f7:67:5d:ab:7a:53:f4:58:7e:ee:6e:fb:cc:b8:
         e8:bd:2c:56:b2:e5:fd:ee:17:5f:da:94:ce:32:48:f4:7f:fd:
         ef:f1:4c:00:0e:04:fb:fe:2a:f6:9a:ee:d4:9d:cc:c4:dd:65:
         ef:0d:df:f5:a3:89:72:0b:5d:79:9f:8c:8d:81:8f:b6:fa:c4:
         2e:3c:11:f7:84:5a:25:88:68:63:3d:62:71:5d:11:de:77:e7:
         5e:7a:9d:15:31:10:94:b8:32:a6:16:89:be:7a:b1:17:00:5b:
         5a:90:b0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:52:51 2026 by rpki-client