Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File:                     hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier:          5zDUcwgDXphdxvpqJ7c6uNMspZNPqF0V5aLQ2aC+YRU=
Subject key identifier:   85:3E:1F:20:56:3F:D9:FC:31:B1:A3:30:CA:C4:40:A5:74:41:6A:C6
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer:       /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial:       01A0E475B130FDA002AF0BEA4FAB92386697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number:          1914
Signing time:             Sun 27 Sep 2026 20:01:53 +0000
Manifest this update:     Sun 27 Sep 2026 20:01:53 +0000
Manifest next update:     Mon 28 Sep 2026 20:01:53 +0000
Files and hashes:         1: Fbp_lxqUHehCSWbyl7sXqy6NV7c.roa (hash: 2HfCb9kniGEaBDNnHz9GBiRgabhJI0HLcxsnmcMaKY8=)
                          2: Kw8ydkhlfzZHeJTkr7mnY0TC51Q.roa (hash: A/++N69JbstSCEAobrMDwfyAGtA60/N4ZLrwg/2X2ok=)
                          3: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: UN1wGAKWnsfsPwN9f64JOoGtdDslDXBa0nT9AeOAUhE=)
                          4: tTro6Q3OQALzLcA8FA4eU5RfBWA.roa (hash: jtcqT3NEeBB17kUbe2vD9a8c2cug0yjIQxz7WQqkvtg=)
                          5: vbHBtb2iPNz_qrAoEkpCxsaIZZc.roa (hash: OIkOu0+4El6Pg/y3PaYXt7py5eZ3TqMx4VnZc06tByw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:75:b1:30:fd:a0:02:af:0b:ea:4f:ab:92:38:66:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
        Validity
            Not Before: Sep 27 20:01:53 2026 GMT
            Not After : Sep 28 20:01:53 2026 GMT
        Subject: CN=853e1f20563fd9fc31b1a330cac440a574416ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:0e:68:ff:16:86:8d:ab:a7:47:3a:a8:09:
                    fa:fc:42:2e:36:2a:4d:56:22:66:71:bf:8c:93:8d:
                    fc:47:ae:29:47:13:ba:c4:f0:87:82:a3:ee:46:70:
                    75:eb:4c:8f:55:5d:c3:15:11:e5:79:89:e6:84:89:
                    7f:9f:e8:07:09:0c:f6:66:b2:1b:67:19:e9:7e:7f:
                    d5:01:62:e0:ca:6e:bc:c8:b8:61:52:ab:b8:cc:7e:
                    ae:35:be:ca:11:ab:e1:2c:4f:30:47:ab:b4:a3:6e:
                    b8:b9:8a:1c:4b:d8:73:87:27:d0:d0:37:be:a3:75:
                    2f:62:ee:4b:6e:6c:2f:4e:32:a3:bf:a1:73:f0:90:
                    ae:10:fe:d5:1f:a6:4f:51:22:72:7e:bc:bc:aa:63:
                    9e:a1:24:82:62:c4:33:9d:97:eb:9a:00:06:99:96:
                    3d:17:51:05:fb:f9:10:1f:78:2b:47:9a:9d:00:bf:
                    a8:30:eb:c1:8f:7d:ef:94:d7:45:b5:11:96:44:cd:
                    14:ef:da:dd:47:8d:ac:65:c1:53:f5:36:f2:da:00:
                    e7:a0:ae:25:4b:ba:e2:31:8a:54:d6:b4:30:dd:89:
                    97:66:ff:82:4a:50:3f:2c:5c:0e:1a:72:c2:23:14:
                    ee:98:26:aa:1e:14:11:36:04:54:db:7e:42:a1:42:
                    cf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3E:1F:20:56:3F:D9:FC:31:B1:A3:30:CA:C4:40:A5:74:41:6A:C6
            X509v3 Authority Key Identifier:
                keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:22:32:cf:c2:2d:2f:f4:45:57:f5:3e:33:63:6b:18:e0:75:
         11:db:7a:57:a1:c2:4d:05:70:18:de:af:c9:f9:65:1d:5c:4d:
         0e:14:82:56:e6:7d:f9:70:6a:54:26:dd:de:72:7e:7d:49:9b:
         73:4b:53:a9:17:4d:5e:c2:4d:92:f6:0f:a5:12:00:d0:fa:3e:
         2a:57:7c:75:3c:46:c3:bf:b2:27:c6:e9:a4:69:37:68:27:cb:
         e2:2c:c5:0c:ba:ea:3f:93:9b:ac:b9:ae:db:05:dd:24:a6:0d:
         cd:9b:79:f4:9f:a4:98:f3:44:06:40:1f:57:8c:ec:0e:53:9e:
         b6:ea:c9:9a:1e:2f:20:2d:3b:a3:e4:9a:fd:c8:32:9d:1f:76:
         0e:ab:95:00:d3:ae:c5:52:e5:7b:85:2b:c6:da:df:b6:7b:10:
         c2:0a:f3:2e:80:07:dc:fa:7c:19:d8:12:e6:cf:d9:4e:09:c6:
         b6:ae:85:8f:dd:96:f3:f8:ad:96:90:80:7d:06:f2:60:e1:77:
         df:de:15:a2:c8:f1:94:3c:b4:ad:22:7f:d4:88:33:09:32:94:
         26:3a:4f:77:cf:89:32:58:e5:37:ba:de:32:a6:41:cd:a5:b6:
         ed:b2:83:68:87:5b:a2:b5:e0:6f:b6:e2:73:ed:21:47:d6:08:
         9a:ba:ba:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDkdbEw/aACrwvqT6uSOGaXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZjRlZTE0ZjZkMzhhN2NmMDcxMjc5ZGZmN2IzOTE3MDJl
MzcxMzUwHhcNMjYwOTI3MjAwMTUzWhcNMjYwOTI4MjAwMTUzWjAzMTEwLwYDVQQD
Eyg4NTNlMWYyMDU2M2ZkOWZjMzFiMWEzMzBjYWM0NDBhNTc0NDE2YWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+kOaP8Who2rp0c6qAn6/EIuNipN
ViJmcb+Mk438R64pRxO6xPCHgqPuRnB160yPVV3DFRHleYnmhIl/n+gHCQz2ZrIb
Zxnpfn/VAWLgym68yLhhUqu4zH6uNb7KEavhLE8wR6u0o264uYocS9hzhyfQ0De+
o3UvYu5LbmwvTjKjv6Fz8JCuEP7VH6ZPUSJyfry8qmOeoSSCYsQznZfrmgAGmZY9
F1EF+/kQH3grR5qdAL+oMOvBj33vlNdFtRGWRM0U79rdR42sZcFT9Tby2gDnoK4l
S7riMYpU1rQw3YmXZv+CSlA/LFwOGnLCIxTumCaqHhQRNgRU235CoULPWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIU+HyBWP9n8MbGjMMrEQKV0QWrGMB8GA1UdIwQY
MBaAFIX07hT204p88HEnnf97ORcC43E1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80ZGYzOWEtNzgzYy00ZDdkLWIxYmUt
YmZkOTVhOWE2ZTY0LzEvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80ZGYzOWEtNzgzYy00ZDdkLWIxYmUtYmZkOTVhOWE2ZTY0
LzEvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyIyz8It
L/RFV/U+M2NrGOB1Edt6V6HCTQVwGN6vyfllHVxNDhSCVuZ9+XBqVCbd3nJ+fUmb
c0tTqRdNXsJNkvYPpRIA0Po+Kld8dTxGw7+yJ8bppGk3aCfL4izFDLrqP5ObrLmu
2wXdJKYNzZt59J+kmPNEBkAfV4zsDlOeturJmh4vIC07o+Sa/cgynR92DquVANOu
xVLle4UrxtrftnsQwgrzLoAH3Pp8GdgS5s/ZTgnGtq6Fj92W8/itlpCAfQbyYOF3
394VosjxlDy0rSJ/1IgzCTKUJjpPd8+JMljlN7reMqZBzaW27bKDaIdborXgb7bi
c+0hR9YImrq61w==
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:58:03 2026 by rpki-client