Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
File:                     sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json)
Hash identifier:          2CqGwE5HK5T3Q05Bq8ltaVCfmxYjTZYeCTCiHIsoy4E=
Subject key identifier:   4B:72:8A:8D:51:EC:58:E7:EC:77:98:F0:CD:9F:42:A4:15:46:2E:C8
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Certificate issuer:       /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial:       01A0CF366730B3225185050CC552960EA3D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
Manifest number:          1A77
Signing time:             Wed 23 Sep 2026 17:00:44 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:44 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:44 +0000
Files and hashes:         1: bfrimfrKsjP1H4_yDGl-HHi3rMo.asa (hash: otCqFBX6IsFFPV79counVC38hvqm6kku/jKcnRUQmy0=)
                          2: jBaDpEBDAYie4QVmG2idiVMicHU.roa (hash: AeUtnpVbiCMHcgah37AQQSPjhAtuX6iYq8o2QCK3d6Q=)
                          3: msFdZet1jGf9Pxj7w6VmCeW1jMQ.roa (hash: fyqpHHLV2QyOw8iBPdNynqjL383PMJfcyHqqNVPJBtE=)
                          4: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: o3LGZIFXR+KJdznpb4Moz3uaMjQCTAeDKlSWRuzgG6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:36:67:30:b3:22:51:85:05:0c:c5:52:96:0e:a3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
        Validity
            Not Before: Sep 23 17:00:44 2026 GMT
            Not After : Sep 24 17:00:44 2026 GMT
        Subject: CN=4b728a8d51ec58e7ec7798f0cd9f42a415462ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:f2:f3:29:f0:72:74:98:f6:3a:6b:9b:2e:
                    81:6c:48:03:7b:29:1f:a9:0e:38:50:d8:ce:ef:03:
                    68:64:4d:04:60:fc:fd:26:c9:ce:34:6d:dd:7b:27:
                    bd:33:b6:ea:16:6e:da:f1:a5:26:60:ab:72:d8:ea:
                    9e:34:ee:82:f0:bd:5b:3a:6c:54:8a:7c:e8:9f:da:
                    8c:07:93:85:b1:65:17:d1:87:2b:19:b3:43:8e:15:
                    2e:5b:9f:8f:76:29:d6:d5:36:80:b8:f7:41:8e:9b:
                    52:d9:f6:d3:d2:ef:33:f7:f6:88:19:2c:e5:53:0d:
                    7c:7f:e7:43:3b:ec:0c:e0:89:65:95:50:d3:6d:b6:
                    9d:2e:19:f0:3c:d1:c2:1e:ab:15:d5:fd:9a:c4:33:
                    dc:a2:b4:07:32:ad:c2:89:7e:c5:fa:e6:39:4a:2c:
                    a9:18:b1:d4:e8:7e:0e:c9:3d:6b:2b:a7:f8:75:b5:
                    d5:1f:58:ff:37:88:27:b1:c1:9d:ae:e9:61:d4:3b:
                    27:bd:41:3c:eb:90:fb:44:9b:12:e2:79:96:75:9b:
                    f2:a9:f9:1e:b6:6b:41:72:9a:70:64:bb:65:a9:11:
                    63:4e:2f:6f:81:08:05:3c:62:50:39:f7:57:a0:7d:
                    37:b6:e8:fc:78:76:70:01:d3:72:b8:82:46:25:d8:
                    d2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:72:8A:8D:51:EC:58:E7:EC:77:98:F0:CD:9F:42:A4:15:46:2E:C8
            X509v3 Authority Key Identifier:
                keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:39:74:2f:c3:3d:b7:aa:f7:9a:b8:fb:e3:f8:b7:54:93:ee:
         7d:f7:72:43:fa:4d:4c:f1:cf:23:d1:76:c2:c7:9c:08:46:fb:
         b1:57:ad:2d:1c:ef:8f:42:e6:74:17:5a:1c:cf:82:3c:cf:7e:
         47:43:f7:e5:4f:c1:3a:ca:8b:2f:44:12:d7:53:8f:55:3d:31:
         a6:93:58:f7:f9:12:f8:d2:da:1e:5e:c2:d8:20:39:68:98:38:
         63:79:7e:e9:c7:6d:0e:0d:e7:37:c1:f5:a9:a1:7a:d9:9b:97:
         e5:3d:86:34:b6:74:40:70:a0:61:d5:61:cb:f3:57:72:1d:e9:
         f3:b8:02:c5:03:4c:61:d7:a2:49:85:e8:17:9f:5e:93:d7:fe:
         e3:f3:bd:f4:05:c4:cf:4f:ba:34:7c:48:c3:28:66:9e:7e:67:
         ce:78:c0:b9:d4:a3:39:11:b6:35:cb:5d:aa:b7:85:87:64:36:
         9c:7b:31:24:1c:52:8c:14:94:ec:6a:18:d5:dd:1d:34:b3:e0:
         07:9d:71:5d:23:43:c2:6a:fc:45:48:e8:4c:8f:a7:3b:5d:b2:
         fa:73:bb:c1:56:f0:2a:dc:14:cc:b2:c3:6e:36:d3:bc:79:d2:
         77:09:a8:0a:c4:15:3a:1a:b7:3d:f3:56:a3:60:ba:da:c5:8f:
         7c:83:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:41:40 2026 by rpki-client