Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
File:                     9vojpSZFyW2w3bFNJPa08FWfvis.mft (raw, json)
Hash identifier:          Vmu6gQolKkCSrSpGQWKZiDTCIt0lK9HFyWHjea8AbAU=
Subject key identifier:   4F:4C:A3:16:E9:D6:30:3D:19:B1:39:D5:B3:C8:26:A2:F5:85:92:7A
Authority key identifier: F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B
Certificate issuer:       /CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
Certificate serial:       01A0CB224946D5AC94843CA16E52073F3CCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
Manifest number:          0269
Signing time:             Tue 22 Sep 2026 22:00:16 +0000
Manifest this update:     Tue 22 Sep 2026 22:00:16 +0000
Manifest next update:     Wed 23 Sep 2026 22:00:16 +0000
Files and hashes:         1: 1e5gN7A5IMLAfWh5okyUEY4gzTs.roa (hash: YcxcWdqXrpjTgUSpqzxnLLj/efKoZUVfv7p5P2dPWuE=)
                          2: 9vojpSZFyW2w3bFNJPa08FWfvis.crl (hash: x6VsEO33YTLXnVsjMCBZ1ECC+fKxfBZD0NuVNXD2zdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:49:46:d5:ac:94:84:3c:a1:6e:52:07:3f:3c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
        Validity
            Not Before: Sep 22 22:00:16 2026 GMT
            Not After : Sep 23 22:00:16 2026 GMT
        Subject: CN=4f4ca316e9d6303d19b139d5b3c826a2f585927a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4d:71:b6:8b:04:f6:2a:5f:2d:bf:3a:bf:af:
                    14:44:9c:11:7a:c3:d2:30:4f:41:09:05:dd:e5:90:
                    00:0b:30:d5:96:8c:af:d2:5e:ea:d0:85:5f:84:46:
                    40:af:7e:11:20:62:35:55:0f:e9:b7:d6:c5:42:b1:
                    8e:6c:ea:23:fe:6b:20:85:80:8b:b7:2f:26:7a:c1:
                    ed:a1:7b:d2:50:54:3d:ba:e6:3c:d7:bc:77:9b:43:
                    90:9e:59:96:45:b9:63:9b:2a:0f:30:c2:6e:e5:be:
                    01:c0:6d:ad:f9:1d:f1:8c:10:dc:13:fb:4d:d0:ad:
                    6e:ba:5c:7e:1f:d7:ee:26:d1:84:ea:dc:b8:87:43:
                    1a:3f:5d:2e:51:49:3e:fe:ef:d7:90:f4:72:a5:01:
                    b4:a4:9c:92:58:fd:b8:75:81:ef:4e:a7:64:7d:a6:
                    67:71:3d:00:ce:fb:a3:f9:2a:e5:a2:87:c8:9c:0a:
                    e3:bf:34:c8:2f:6f:ed:bb:1e:59:81:18:66:c0:00:
                    67:97:ef:c7:72:85:59:50:0f:0e:99:c7:af:2e:fa:
                    ef:4c:94:88:a4:a8:c3:29:f5:d9:de:d6:60:b4:ab:
                    8c:f8:57:45:28:f9:65:0b:04:f7:dd:10:aa:d2:43:
                    c6:c5:7b:16:20:48:8e:b9:ea:71:87:9f:73:eb:7f:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4C:A3:16:E9:D6:30:3D:19:B1:39:D5:B3:C8:26:A2:F5:85:92:7A
            X509v3 Authority Key Identifier:
                keyid:F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e1:e8:48:f4:20:e5:fc:fb:b9:82:16:ff:8c:4c:64:4d:70:
         00:81:8f:a6:e9:09:ce:0d:7a:a8:9e:76:3f:00:dd:a7:9d:e0:
         e1:0e:00:db:81:37:ce:06:6a:84:c9:de:a8:f1:5a:f1:05:fe:
         1f:35:12:e5:13:ba:8e:ee:7a:f1:e8:d2:d5:40:26:73:25:5e:
         7b:69:e5:9e:cb:72:e8:05:05:5c:b2:58:42:a4:16:8e:ca:59:
         60:ae:ff:14:db:9a:6c:13:ca:61:4f:b9:a8:9b:85:23:ac:60:
         0d:55:a9:e6:37:15:7b:de:89:5b:13:d1:92:60:25:bc:86:4d:
         dd:ea:8c:21:42:40:b1:22:ed:13:6d:54:79:c3:e7:ba:ef:ce:
         1e:23:f1:a4:e9:09:41:97:b8:54:dc:bb:26:45:8c:f7:90:a2:
         cb:cb:71:6c:9f:14:02:71:83:db:8d:ac:76:61:c5:25:ff:42:
         41:e5:24:cd:87:f8:65:25:e0:e4:d3:21:e4:75:6d:21:c9:d9:
         42:0a:71:cb:c1:03:b3:24:26:c4:b3:2d:6e:de:a3:54:be:c4:
         a6:b0:49:48:12:df:e7:a8:c4:ce:19:f7:7a:42:dc:a7:ce:32:
         58:72:3f:af:83:b9:af:12:10:d5:35:12:4c:11:a6:c5:b3:81:
         84:25:1f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:23:05 2026 by rpki-client