Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
File:                     PPYV8G0jIox2moX68FEDk9Bk4OA.mft (raw, json)
Hash identifier:          ohpEV3l+Jb7urKuW0GcAVYu1RC/HMrlZ04ZQqBOo1Pc=
Subject key identifier:   3D:8D:EE:A4:C2:DE:44:FF:FD:87:32:99:59:23:AD:E9:65:AE:5B:78
Authority key identifier: 3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
Certificate issuer:       /CN=3cf615f06d23228c769a85faf0510393d064e0e0
Certificate serial:       01A0DBE01809F4573A140BC168ECE1DB51D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
Manifest number:          F9
Signing time:             Sat 26 Sep 2026 04:01:31 +0000
Manifest this update:     Sat 26 Sep 2026 04:01:31 +0000
Manifest next update:     Sun 27 Sep 2026 04:01:31 +0000
Files and hashes:         1: 2XSKC5_2aJdXis0i0E32cdzCcnE.roa (hash: WPJFZgYN6ewzMbdHq7cQDqzD7p7iGCXVy5MenFdGn80=)
                          2: 4Rp0pYTPzmcpl3vtXAjsk3xrRxU.roa (hash: kFKfBo1lMckvkQ9+DKJA3J99ay1w596AtH69ok/038k=)
                          3: BIsCV-yWcFXQhnmlMMlsDm3h-uM.roa (hash: x1HdnC8VQIIwXch3xUdE0ehAwnjU8Ct5Jcy6U24BIMg=)
                          4: Cxczu6pG_j9G8YgyCFhNWqwjOHY.roa (hash: WwxhEZK9JwB3xoHnIPrE7wXjUmLlZC5xHb6l9AOXBgc=)
                          5: IhnU6UFpK0ZZZ7JoJGYFZAdvlLk.roa (hash: ZMMMD3tfRdZSRuiATRZh0enby+U17qaQ+RlXaiCW2Ao=)
                          6: PPYV8G0jIox2moX68FEDk9Bk4OA.crl (hash: oxzg46wCWC8MDWCYbWiHojkUu2OcwvCeyHPx+1Y3iFo=)
                          7: U47iKHcrgk6MFqkfqnJiGQZYHQU.roa (hash: TFdMzY4JMZ5lpBgywZ+gPmSJF7oZ1XI4SO9S+xKiraI=)
                          8: oxs1tuSUXUJmLqoL27S7ChGx4fM.roa (hash: 9KLCRWwLN8lTVB3jayQYsnUAOfMC7o7LYOk7o51/yYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:e0:18:09:f4:57:3a:14:0b:c1:68:ec:e1:db:51:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cf615f06d23228c769a85faf0510393d064e0e0
        Validity
            Not Before: Sep 26 04:01:31 2026 GMT
            Not After : Sep 27 04:01:31 2026 GMT
        Subject: CN=3d8deea4c2de44fffd8732995923ade965ae5b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:69:f1:ab:85:b3:18:cf:06:a7:2b:86:44:
                    73:2b:54:27:ed:be:a7:30:17:f4:5e:c9:e4:49:48:
                    05:9d:e7:27:08:2c:10:e0:ae:80:13:ac:6b:66:b2:
                    19:fc:9f:df:7a:fb:55:d3:06:8b:d2:34:cc:04:b2:
                    f4:4f:b6:bc:75:20:45:ce:30:3b:b0:cd:50:f2:19:
                    ee:fe:e4:06:35:17:63:25:f4:bf:af:79:69:7f:0f:
                    53:6d:be:72:bc:8d:a4:e4:07:29:e1:85:d0:6e:31:
                    84:cf:d9:3e:1c:12:9f:ba:c6:ff:83:d3:30:a2:24:
                    54:fb:01:f9:46:46:f2:c1:00:c8:90:28:05:31:80:
                    b2:f1:6e:1e:fc:a2:a2:d5:4e:7f:87:5c:d1:c0:d1:
                    92:97:7f:87:d0:8e:f4:88:bb:2c:98:d5:45:77:25:
                    5e:e5:31:ae:26:30:d0:64:16:4a:f3:f4:8e:ba:df:
                    f9:00:08:41:ac:58:b1:3d:8b:12:63:83:a3:90:9d:
                    ac:37:2b:ec:35:b1:8f:8a:db:ae:3f:02:42:a4:b4:
                    8f:11:12:d3:cd:65:71:0c:48:f3:58:2f:28:51:5c:
                    b1:2d:8a:9c:ef:72:87:f6:ac:35:b6:38:d9:b4:37:
                    a8:d2:06:6f:37:52:f5:85:96:3b:d0:f3:35:6a:bf:
                    50:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8D:EE:A4:C2:DE:44:FF:FD:87:32:99:59:23:AD:E9:65:AE:5B:78
            X509v3 Authority Key Identifier:
                keyid:3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:75:9e:17:77:71:bd:1d:06:62:90:80:60:96:ce:df:9e:6a:
         de:45:2c:a1:d9:bd:f4:f6:d9:21:41:9a:9e:ef:75:d9:38:1e:
         a1:63:93:d1:db:41:82:18:4f:b8:b8:a7:3e:6e:7c:84:df:f8:
         ef:4f:cf:5d:ef:16:37:9c:fd:2f:5c:6f:f0:be:71:85:eb:fa:
         28:54:fd:0b:98:59:98:db:e0:0b:0c:70:3a:c8:58:7a:f2:eb:
         33:00:af:fe:e2:bd:1d:ff:6d:00:68:27:86:da:c2:11:63:e5:
         a5:56:0d:fd:59:8e:74:2d:c3:4a:17:9b:9f:10:b0:99:88:5c:
         68:eb:06:4c:c4:11:15:f2:d0:e1:3a:ed:88:81:d1:49:91:8b:
         15:d9:4a:a9:bf:ba:14:8f:d1:cf:ce:aa:9c:ae:15:b5:8c:c3:
         42:3c:61:0e:b1:d4:c8:14:c5:42:9d:57:af:6e:53:6e:52:aa:
         23:f4:4d:5e:94:3c:e8:c6:7d:b1:3c:f5:91:57:81:44:a8:b0:
         99:dc:ba:88:26:0c:df:2e:7d:ca:73:ed:9c:bb:0e:0f:f2:77:
         2e:0f:2c:e0:10:99:5f:57:c2:63:fb:7f:b7:c0:5e:74:98:88:
         63:d7:dd:f2:29:b8:58:88:ae:f1:4b:62:93:f0:8c:0d:a1:84:
         e5:46:50:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:10:52 2026 by rpki-client