Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.mft
File:                     fCimJ8ox8pJiLD67o5SC405dlWw.mft (raw, json)
Hash identifier:          7+Bb5+h9J4G5wprmEpqbC0tH8BTUD3/kSCHXcrAYDiE=
Subject key identifier:   EC:39:83:E6:35:A4:F8:63:23:6D:CC:FD:66:4C:60:F5:9A:E6:A7:D1
Authority key identifier: 7C:28:A6:27:CA:31:F2:92:62:2C:3E:BB:A3:94:82:E3:4E:5D:95:6C
Certificate issuer:       /CN=7c28a627ca31f292622c3ebba39482e34e5d956c
Certificate serial:       01A0D5DDA747FC4A6E3A0B8C0810DEFA9D42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fCimJ8ox8pJiLD67o5SC405dlWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.mft
Manifest number:          010F
Signing time:             Fri 25 Sep 2026 00:01:08 +0000
Manifest this update:     Fri 25 Sep 2026 00:01:08 +0000
Manifest next update:     Sat 26 Sep 2026 00:01:08 +0000
Files and hashes:         1: B0aaQzDUymEy_TMI7vVm762HqmA.asa (hash: flZ5LVNjeKipvaNx0Yaj9neDFvSoUInt+O77VeDAqvk=)
                          2: fCimJ8ox8pJiLD67o5SC405dlWw.crl (hash: VRkFYVWLvLM/XEhqGrPWPf3V0yRYDE+KobwCq44O5FA=)
                          3: rWg34RDLNclyJ8h9Kinq56b8NJk.roa (hash: gt1C9E3imgPTL1bHVhUKlCkyG2mLcYb0pVG6jC6JYNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fCimJ8ox8pJiLD67o5SC405dlWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:dd:a7:47:fc:4a:6e:3a:0b:8c:08:10:de:fa:9d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c28a627ca31f292622c3ebba39482e34e5d956c
        Validity
            Not Before: Sep 25 00:01:08 2026 GMT
            Not After : Sep 26 00:01:08 2026 GMT
        Subject: CN=ec3983e635a4f863236dccfd664c60f59ae6a7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:0a:17:0e:de:1b:c2:ae:93:98:10:84:7d:
                    b3:54:d7:9d:17:7a:f5:db:58:4c:f3:b4:2e:15:c3:
                    55:12:4f:b8:87:48:9e:6e:5c:cd:d1:78:2b:a6:b6:
                    d9:18:af:af:a3:70:c9:d0:19:b3:71:ba:03:8a:14:
                    db:9b:bf:f6:14:85:cb:c5:ae:19:81:86:80:a0:a8:
                    10:62:47:92:c3:04:3a:ad:42:df:a2:28:79:e6:24:
                    53:d2:79:dc:76:fa:ff:36:22:7b:42:72:ab:f3:bf:
                    43:09:6f:53:9b:37:9a:30:0d:20:4a:cc:3b:44:a3:
                    f1:8d:91:3c:95:8f:77:24:6b:b2:a4:df:c0:d1:f1:
                    5b:78:e0:82:24:62:de:a9:35:60:12:8f:6e:5b:c8:
                    df:79:38:11:60:17:f6:a0:ae:01:ec:ce:b8:b0:7b:
                    be:67:38:97:25:97:42:2f:81:91:f7:ae:dd:a0:06:
                    45:d6:03:e2:01:4f:27:e8:dd:3d:96:23:2a:5d:69:
                    d7:ee:1a:44:5a:0a:b3:1b:54:0f:aa:a0:82:d8:78:
                    e3:e6:93:a4:b4:e6:4c:e0:c1:95:07:96:9f:b5:45:
                    6c:fa:53:c7:62:7a:ea:f6:8b:08:8f:23:bb:39:1f:
                    e4:ee:82:98:24:70:09:f5:7c:d5:fb:05:b4:2f:21:
                    c5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:39:83:E6:35:A4:F8:63:23:6D:CC:FD:66:4C:60:F5:9A:E6:A7:D1
            X509v3 Authority Key Identifier:
                keyid:7C:28:A6:27:CA:31:F2:92:62:2C:3E:BB:A3:94:82:E3:4E:5D:95:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCimJ8ox8pJiLD67o5SC405dlWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:bd:c5:20:49:8e:8d:11:fc:e1:b1:c8:24:c7:50:7c:8a:42:
         01:23:69:b9:f8:12:71:36:9d:bd:1b:49:be:ac:3e:1f:9f:e4:
         73:89:67:1f:c9:fd:94:e7:f0:81:3b:66:ac:68:cc:28:47:78:
         f1:70:e4:bb:4c:12:fe:3c:ae:70:39:f2:dc:b9:18:a8:74:af:
         1b:40:7b:5b:6d:59:de:af:4e:c0:8c:20:8e:88:50:86:5a:73:
         fa:7e:03:29:78:da:31:75:45:7d:d5:e4:21:8b:be:08:5e:c9:
         65:b7:88:cb:db:35:94:d6:ed:cd:e7:d9:27:3d:f0:b4:88:2e:
         a5:5d:88:87:08:d6:69:dd:9f:07:55:e0:32:22:72:d8:ac:eb:
         b3:ae:de:a2:91:d2:82:05:5a:41:c9:48:dd:9f:e0:b5:c5:c9:
         61:e8:a1:ad:c4:ae:a3:38:23:00:20:d8:17:f5:b7:b4:0f:82:
         4a:6c:4f:7e:b6:ed:17:d4:df:0a:22:4e:75:e7:7c:ca:a2:30:
         b4:ef:47:27:de:52:2c:6a:a5:78:82:8e:39:75:fd:a5:58:a4:
         90:ba:04:51:26:39:16:41:82:ce:5b:aa:4e:6a:a4:09:2d:4b:
         d1:3b:8b:59:2f:52:3b:f7:38:8e:c6:23:74:98:67:11:82:9b:
         3c:00:ce:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:13:59 2026 by rpki-client