Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/fgqiKQNbtRmegi0Nc4c8kxp0s5c.mft
File:                     fgqiKQNbtRmegi0Nc4c8kxp0s5c.mft (raw, json)
Hash identifier:          FpbVwG1nNQE4KUJ3P09xLq00VS7pnTZHgtEoAvlyUBc=
Subject key identifier:   71:F7:30:A3:F0:82:37:9E:0E:91:29:C4:B4:08:5D:5C:6D:F5:A0:65
Authority key identifier: 7E:0A:A2:29:03:5B:B5:19:9E:82:2D:0D:73:87:3C:93:1A:74:B3:97
Certificate issuer:       /CN=7e0aa229035bb5199e822d0d73873c931a74b397
Certificate serial:       01A0D20147EB39693B726E8B3F947D82D55E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgqiKQNbtRmegi0Nc4c8kxp0s5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/fgqiKQNbtRmegi0Nc4c8kxp0s5c.mft
Manifest number:          2F
Signing time:             Thu 24 Sep 2026 06:01:34 +0000
Manifest this update:     Thu 24 Sep 2026 06:01:34 +0000
Manifest next update:     Fri 25 Sep 2026 06:01:34 +0000
Files and hashes:         1: Y1u9X-euBf52bXrPXABuqf1wVfo.roa (hash: Rh1lv2JUerfY3TIJzhgvFKyL9IDtwVRzCPOLfofmaGc=)
                          2: fgqiKQNbtRmegi0Nc4c8kxp0s5c.crl (hash: z4xCHPBJ9Pdo5W82WGEOy1OkmpPWq1MK5ZdT7cnPkWI=)
                          3: hGjAKW9JBbb2okUNgyTtzh8yQRg.roa (hash: wGrUB5iKzwchIffKrS8H+33LD/kv5hAL0g4NpTJiaUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/fgqiKQNbtRmegi0Nc4c8kxp0s5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/fgqiKQNbtRmegi0Nc4c8kxp0s5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fgqiKQNbtRmegi0Nc4c8kxp0s5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:01:47:eb:39:69:3b:72:6e:8b:3f:94:7d:82:d5:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e0aa229035bb5199e822d0d73873c931a74b397
        Validity
            Not Before: Sep 24 06:01:34 2026 GMT
            Not After : Sep 25 06:01:34 2026 GMT
        Subject: CN=71f730a3f082379e0e9129c4b4085d5c6df5a065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:59:44:62:b2:7b:00:7f:d6:b6:aa:d5:17:dd:
                    19:92:82:c4:48:63:1f:bd:05:62:17:e1:23:25:31:
                    8a:5d:d6:29:d8:bb:48:89:cb:bb:b1:01:7a:b8:01:
                    80:96:fa:de:9f:c1:08:83:55:59:d3:27:b5:c6:81:
                    23:54:8c:4b:5e:40:56:28:d9:10:75:b1:a3:2c:c9:
                    59:7a:6d:99:00:cd:bb:51:be:af:b4:39:5a:1f:ed:
                    45:3b:4e:23:23:e6:84:05:00:21:7e:60:12:d6:e7:
                    e3:d2:b3:88:7b:42:66:25:7e:24:84:7e:63:8b:6e:
                    f4:02:eb:9f:da:28:be:61:dd:83:33:d4:33:f1:08:
                    d3:12:0f:5c:79:5f:a5:94:81:6b:50:24:fe:b2:31:
                    ce:62:63:5f:36:2c:d9:ce:6a:0d:12:1d:84:6d:94:
                    36:5e:08:bb:1c:51:ac:30:3f:88:57:d2:6a:3a:87:
                    2b:31:13:c6:a8:8a:ee:24:1b:84:6b:de:e3:cf:09:
                    a1:ff:fe:ca:f7:81:95:f3:94:a8:a7:98:06:c1:0d:
                    6d:a5:19:b3:87:05:0b:0f:22:14:89:0b:3e:b1:05:
                    b3:6a:f2:98:6b:38:4b:d3:e2:17:07:37:5d:cd:d8:
                    63:4b:ac:53:fd:af:78:c4:ce:c0:6b:91:23:27:8a:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F7:30:A3:F0:82:37:9E:0E:91:29:C4:B4:08:5D:5C:6D:F5:A0:65
            X509v3 Authority Key Identifier:
                keyid:7E:0A:A2:29:03:5B:B5:19:9E:82:2D:0D:73:87:3C:93:1A:74:B3:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgqiKQNbtRmegi0Nc4c8kxp0s5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/fgqiKQNbtRmegi0Nc4c8kxp0s5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/fgqiKQNbtRmegi0Nc4c8kxp0s5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:fc:33:ca:48:15:75:d3:9c:28:cc:06:ad:27:fd:22:89:c3:
         74:77:c0:2a:72:93:40:83:1e:54:fb:30:86:4b:94:07:db:db:
         28:df:57:e6:e0:25:ea:d3:36:cd:97:38:aa:1c:6c:58:d1:90:
         5b:1b:90:c2:a1:6f:0f:d4:13:1f:23:0b:e1:f5:a0:66:cd:17:
         f2:45:60:4d:36:03:79:b5:d1:6e:43:56:c3:d1:88:fe:6e:a4:
         6d:a9:83:be:dd:a2:0d:b5:d1:51:c6:24:0c:f6:33:25:81:08:
         e4:5d:de:9e:58:f4:fa:bd:09:38:71:7f:1f:c3:4c:1d:c7:7e:
         51:6f:4d:c3:92:0a:96:47:15:a0:2c:38:4f:d3:da:56:42:4d:
         6e:6c:32:51:2d:6b:63:de:0f:20:81:0c:82:23:d1:4f:18:f4:
         d6:10:d1:26:f1:13:34:f6:8d:3d:74:f7:41:1f:ba:45:6f:ea:
         92:e3:a1:c3:c7:4e:51:89:36:36:37:04:08:d3:0d:85:ff:fc:
         0e:0b:e3:74:56:ce:88:00:e6:e5:f6:13:8f:2a:03:a1:90:da:
         38:67:ae:a5:b2:7f:79:c3:e5:eb:a5:d7:df:80:0b:09:9c:0b:
         78:57:81:d1:7e:0c:3b:ee:69:63:3b:5c:9f:5f:14:1d:37:1a:
         53:55:b0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:08:53 2026 by rpki-client