Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
File:                     APfVbNN-MeClJfW7GluvX0meQG0.mft (raw, json)
Hash identifier:          WMeSDJtke2PSxTcd8NToxFI6wVEUmI1SrjtDMkh9Hqk=
Subject key identifier:   A7:7F:1C:1F:7D:1C:CF:50:CF:B5:D8:15:10:63:2E:7A:25:62:7D:62
Authority key identifier: 00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D
Certificate issuer:       /CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
Certificate serial:       01A0CB599EFF4DAF4A88CC5DC4BBCFB4B7F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
Manifest number:          19BE
Signing time:             Tue 22 Sep 2026 23:00:43 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:43 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:43 +0000
Files and hashes:         1: APfVbNN-MeClJfW7GluvX0meQG0.crl (hash: yUgoDMNeAraD588f/oqqQ5J8Q22jwm0wBywByFTBXKk=)
                          2: UGPRCcRwCxmD212yXnFn6rGxyZs.roa (hash: Rr/MnDTFXlxKNuJFFVDipyDc937yhBa1XA4JFiwrOyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:9e:ff:4d:af:4a:88:cc:5d:c4:bb:cf:b4:b7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
        Validity
            Not Before: Sep 22 23:00:43 2026 GMT
            Not After : Sep 23 23:00:43 2026 GMT
        Subject: CN=a77f1c1f7d1ccf50cfb5d81510632e7a25627d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:ec:18:33:c7:79:7b:67:ab:0c:d2:49:1d:
                    c2:b8:f1:dd:15:9b:de:41:0d:de:88:36:8a:f0:e4:
                    e0:33:bf:b2:f7:d9:cf:a1:5c:d4:1d:43:78:e9:dd:
                    01:32:d0:2d:19:e8:fe:6f:fd:aa:ce:77:5d:04:c6:
                    91:c3:e7:11:e4:63:52:e7:63:05:9b:14:26:fd:60:
                    10:4c:f5:61:88:9d:d0:56:b6:5c:88:dc:84:5e:e8:
                    bd:76:08:b4:03:cb:65:59:44:96:7c:bb:6f:58:f5:
                    21:45:a5:d7:46:61:7e:b8:e2:2e:cc:3b:2a:93:85:
                    f1:0e:0f:ce:7c:03:5c:3f:5b:aa:39:8c:f4:37:f9:
                    1b:79:f3:53:23:db:6e:cb:7f:20:3e:67:3d:e0:7a:
                    ef:1a:07:ca:72:22:51:56:61:1f:d1:af:cb:49:e7:
                    9d:56:3c:8e:3a:1d:45:2f:6d:63:e9:14:88:20:b5:
                    16:1d:ab:40:8e:47:9b:c8:a0:26:7f:ee:5c:2d:10:
                    70:42:6f:af:14:e7:7b:14:9e:de:8b:84:c1:dc:2d:
                    92:c8:21:c4:e5:8c:be:aa:91:69:00:86:d2:66:a2:
                    9a:52:b9:c7:fc:81:89:e8:02:bd:fa:dc:dd:81:5c:
                    1b:e6:dd:7f:d5:0d:82:83:33:bf:07:5b:48:66:a6:
                    3c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7F:1C:1F:7D:1C:CF:50:CF:B5:D8:15:10:63:2E:7A:25:62:7D:62
            X509v3 Authority Key Identifier:
                keyid:00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:15:27:04:77:41:b3:0d:37:a7:f7:5d:d7:14:ce:9d:e3:e1:
         4d:40:0b:57:5e:c6:93:4e:66:db:e3:6c:22:f2:5b:6d:6c:c0:
         f1:8a:92:b2:95:48:5f:ad:49:7c:94:c7:d2:75:ca:88:2b:9b:
         0e:82:71:d8:d9:93:3e:14:20:48:14:eb:09:3c:0e:00:07:7b:
         8c:d4:dc:28:2d:3a:21:28:d8:00:eb:b1:75:87:92:84:ee:d4:
         f6:11:6b:48:22:46:7f:05:70:94:d5:1d:23:3f:db:53:44:4f:
         b7:cf:b5:08:4e:7d:92:bd:8e:57:8f:c2:ab:8f:e7:1b:25:f3:
         92:eb:2a:70:bf:7c:9a:48:be:d5:ec:8f:7f:67:8c:12:09:07:
         49:1b:39:fc:65:e3:c0:c8:66:c7:da:e6:c8:f4:d2:75:9f:32:
         d4:e2:6b:21:84:eb:2e:2d:de:dc:74:0f:8f:4c:88:65:05:12:
         31:58:c6:8a:2a:bb:9e:bc:86:fc:aa:cd:f5:f0:94:3e:da:b8:
         af:34:5c:e4:ee:8f:c5:4f:45:43:e2:62:85:0a:5b:55:26:46:
         70:4f:bc:35:bb:41:35:61:a7:cd:c2:cb:6b:4b:02:b7:ce:3a:
         c1:b5:45:f0:9a:5c:fb:d8:43:bf:87:9f:73:5a:df:90:ef:6c:
         8f:b1:03:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:23 2026 by rpki-client