Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
File:                     ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft (raw, json)
Hash identifier:          RDCZB8rYvU7ScyRQXJ9J/S6UC0VtrrmExESpNGFfCCA=
Subject key identifier:   84:AD:AA:DE:43:9E:27:28:98:9B:6B:E6:B2:6F:D7:B5:8C:D0:21:EB
Authority key identifier: 7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48
Certificate issuer:       /CN=7edbf83aff434512c503712f22291602f55bff48
Certificate serial:       01A0D614CFB4C7ABDC6EFF30E1148D31B8B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
Manifest number:          1A02
Signing time:             Fri 25 Sep 2026 01:01:22 +0000
Manifest this update:     Fri 25 Sep 2026 01:01:22 +0000
Manifest next update:     Sat 26 Sep 2026 01:01:22 +0000
Files and hashes:         1: ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl (hash: 5RODdG6CjJ3Jvj9gPFTA1GaXUooB9UOKU7Z4TZeBUXk=)
                          2: z4ZmrsMi4rffTSSj7sG9KUI2RbI.roa (hash: Mu3/esgK0X5k7pGlanJsUxVxpFzxsfzlGM/QwNB28fo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:14:cf:b4:c7:ab:dc:6e:ff:30:e1:14:8d:31:b8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7edbf83aff434512c503712f22291602f55bff48
        Validity
            Not Before: Sep 25 01:01:22 2026 GMT
            Not After : Sep 26 01:01:22 2026 GMT
        Subject: CN=84adaade439e2728989b6be6b26fd7b58cd021eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3c:0a:94:0f:64:68:37:4e:3f:5d:b7:1e:3b:
                    5d:8a:53:58:b0:9d:e4:5e:63:71:69:25:c1:95:e6:
                    c9:e2:11:1a:fc:5d:60:21:86:0b:7e:94:a0:09:23:
                    cf:00:62:35:b8:a5:33:3c:55:5d:0d:42:06:a9:9c:
                    24:d9:10:ce:8e:aa:75:5e:c4:cc:d3:d4:bf:09:d2:
                    b1:fc:d4:f3:ff:ab:5b:3c:1c:2d:d8:a0:f7:c9:ba:
                    44:ba:1d:85:6c:c8:f0:e6:87:9a:94:cd:30:d0:a2:
                    2b:82:69:c8:34:a5:6c:70:05:1f:db:fd:e7:de:1b:
                    33:75:2a:75:a1:25:21:f8:71:93:5d:eb:48:17:2c:
                    6a:83:92:a1:55:9c:b6:5b:86:71:b7:45:e4:a0:1d:
                    11:d9:69:67:ce:2a:d1:e0:e0:12:63:94:87:7b:43:
                    d0:e9:a7:c9:af:5f:a4:cb:8c:90:12:fa:52:a8:42:
                    11:67:b6:a1:83:01:42:e1:42:f4:f1:89:4b:eb:50:
                    9b:c4:94:bf:51:ac:b6:5d:60:da:f7:9d:98:b6:51:
                    44:d9:12:32:4a:59:a3:c1:c5:2f:04:ee:bf:5a:13:
                    42:5f:e8:3e:d4:4e:f4:67:fd:0d:9f:b5:7f:f2:d5:
                    97:b3:85:34:61:61:17:02:59:4a:e0:b2:51:39:5f:
                    76:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AD:AA:DE:43:9E:27:28:98:9B:6B:E6:B2:6F:D7:B5:8C:D0:21:EB
            X509v3 Authority Key Identifier:
                keyid:7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:dd:9e:3b:7f:41:37:b8:b2:3a:a2:6f:6f:ec:b6:cd:1d:e2:
         0b:f0:82:b4:c7:c3:76:b7:dc:c3:99:c0:8b:86:be:3a:ba:10:
         29:5f:f6:e6:14:ce:a1:a9:01:ac:6e:a1:69:00:cd:5e:d5:04:
         8c:ec:07:e4:81:2a:3f:c6:d7:3c:eb:f1:16:3e:b7:b8:9a:eb:
         46:f8:ff:07:e8:50:64:f0:f8:ae:16:70:89:fd:a0:db:19:4d:
         78:b6:aa:1a:c9:36:39:11:ff:76:d5:22:7e:46:d3:1f:67:d7:
         4c:d3:2a:c3:f7:3a:a6:6f:a3:83:42:cb:42:27:88:fa:fa:2a:
         44:91:36:52:8a:47:11:50:23:2b:f6:b7:5f:2c:8d:eb:db:56:
         81:ba:37:43:ba:8f:d3:7f:10:e5:0b:85:f6:94:b1:e1:df:94:
         50:17:53:31:64:b2:d2:e6:e5:70:3d:23:9d:f5:52:48:fc:92:
         95:d4:bb:a8:88:2e:d0:0a:38:30:1b:f6:d4:e3:4e:fc:d6:1c:
         53:36:c2:87:1e:23:43:d8:64:80:45:77:d5:30:b7:1a:20:f3:
         19:e8:55:8c:e7:30:bf:4e:be:a6:a9:5f:2e:cc:0b:da:9b:37:
         06:d8:fb:4c:2c:7f:61:d9:94:df:20:5b:5b:06:5c:76:7e:bb:
         35:5a:04:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:32:07 2026 by rpki-client