Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
File:                     sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json)
Hash identifier:          wsx0u/ruYytLt9bCsIgHxNDZi5Nwuo8KfCdQOAFFx54=
Subject key identifier:   DD:DE:02:F2:76:88:3E:10:C7:29:92:53:43:9A:8F:98:3A:2B:8A:B5
Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
Certificate issuer:       /CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Certificate serial:       01A0D539818711582AC16985B2194F4063A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
Manifest number:          13FF
Signing time:             Thu 24 Sep 2026 21:01:50 +0000
Manifest this update:     Thu 24 Sep 2026 21:01:50 +0000
Manifest next update:     Fri 25 Sep 2026 21:01:50 +0000
Files and hashes:         1: H1ayDIygYNIOiS92j6cNtqBQm1c.roa (hash: zAMEhxkwZgHjIWB7MVVQZowg1h/HvADUtVLj69PryUA=)
                          2: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: 5rVIDE2ULFvTvVyWgFdlC1IeGdFdyE16xgVG0P+3QOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:39:81:87:11:58:2a:c1:69:85:b2:19:4f:40:63:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809
        Validity
            Not Before: Sep 24 21:01:50 2026 GMT
            Not After : Sep 25 21:01:50 2026 GMT
        Subject: CN=ddde02f276883e10c7299253439a8f983a2b8ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:23:f1:49:f6:1b:bc:2b:fb:65:fb:d3:9e:00:
                    80:d8:59:af:9e:4b:39:cd:27:bb:2d:2a:ea:cb:88:
                    cf:47:6c:cf:2d:c0:1b:24:43:b2:65:79:9e:c3:fd:
                    f7:18:21:0f:c7:15:1b:c9:a2:ef:30:6a:d9:6c:e6:
                    34:84:8d:b5:11:c9:a8:6e:b2:90:a0:37:e4:4b:cb:
                    b3:03:40:0c:6f:86:74:70:c5:b1:c1:1e:0a:33:2a:
                    1b:2b:5a:e1:f5:d7:24:24:fd:0d:ad:bc:d0:c6:df:
                    2a:87:c8:65:af:87:81:76:c6:3d:39:33:e4:1b:04:
                    11:c6:8c:df:dc:a5:4a:ed:1f:b6:a7:c0:ce:8d:6a:
                    4b:dd:d2:d3:eb:76:26:71:21:2b:f6:1d:e9:96:56:
                    ef:53:26:e9:c1:30:b5:79:b6:3d:9f:08:4a:98:c5:
                    e3:68:09:cc:26:7c:3c:71:f7:fd:1e:0f:31:5a:b6:
                    b2:da:2d:25:b9:b2:ed:81:6d:5d:c6:c8:1b:c7:60:
                    61:89:0b:1b:f6:31:ae:56:8d:88:7c:74:a1:8c:5f:
                    71:24:55:2e:c2:9c:88:31:7d:16:c8:2d:13:21:83:
                    70:55:f7:fe:0a:65:57:db:bc:2b:4c:e0:61:a6:93:
                    a0:6d:89:17:dc:d5:df:35:09:ee:0e:4d:f7:fc:87:
                    5a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DE:02:F2:76:88:3E:10:C7:29:92:53:43:9A:8F:98:3A:2B:8A:B5
            X509v3 Authority Key Identifier:
                keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:00:03:ae:88:23:b7:e9:2c:96:ec:08:50:14:be:54:22:73:
         4f:b9:29:a5:09:89:3b:c9:d8:63:ca:b0:31:e9:5d:f8:3a:fd:
         06:68:2d:72:ab:01:93:43:e4:9b:8f:02:e5:8b:8a:0c:5b:36:
         c4:ee:04:16:34:86:5f:b1:7a:3d:1b:f0:77:66:6d:5f:ef:89:
         ca:75:49:41:7b:19:8a:cc:91:61:15:8a:6f:2a:42:c7:92:38:
         cf:2f:4b:0e:90:45:88:ac:07:83:00:ee:09:6b:d2:d8:96:b6:
         3d:00:12:8e:7f:ae:99:6f:5c:1a:3c:d9:36:7d:14:a8:08:3d:
         46:71:e6:73:b3:ff:6c:51:c4:e2:04:57:df:5e:73:df:1c:eb:
         18:da:df:fe:75:55:92:6c:a9:d0:e7:1f:7b:34:84:1d:bb:ab:
         6c:d9:93:ac:fd:bf:70:da:e3:48:6a:3c:73:32:ec:02:81:f8:
         60:3c:cd:44:b0:14:3d:2b:4a:1f:10:83:33:d9:d8:8a:35:c4:
         89:ac:37:93:6f:ac:8f:b6:87:7b:bb:74:0b:a9:31:a7:59:56:
         51:b7:ef:fa:4e:7d:a5:d6:60:51:53:58:f6:3f:53:c0:53:64:
         35:b3:c6:34:19:eb:38:d1:8c:6a:c6:ab:14:7e:cf:35:76:b5:
         3b:9b:b0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:55:04 2026 by rpki-client