Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
File:                     f_F65Ue58mQeYFd_5VPdtvdJoIc.mft (raw, json)
Hash identifier:          9nXuMWu8VahXJ085oaQVnsl8F3GUl5egDhNnei2AZwA=
Subject key identifier:   BB:CB:10:D3:67:66:AE:D7:BF:7A:BC:02:52:55:21:A2:28:3A:29:08
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Certificate issuer:       /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial:       01A0D8DEEF803C223D5F8D31CF2C5077E132
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
Manifest number:          07B9
Signing time:             Fri 25 Sep 2026 14:01:23 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:23 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:23 +0000
Files and hashes:         1: Zjq47TVO4K627iIIjOoWIZXtu1g.asa (hash: JXch2/qmckjBicLeZ4EWsB84M7oMBgitZLv/xnZohHU=)
                          2: f_F65Ue58mQeYFd_5VPdtvdJoIc.crl (hash: 2SmQTRYTvkfWY4TrXdVdR3/29h/fL3mWnwJ6AxvbGpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:de:ef:80:3c:22:3d:5f:8d:31:cf:2c:50:77:e1:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
        Validity
            Not Before: Sep 25 14:01:23 2026 GMT
            Not After : Sep 26 14:01:23 2026 GMT
        Subject: CN=bbcb10d36766aed7bf7abc02525521a2283a2908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2c:0b:e6:58:91:e8:b3:a0:ba:f7:ac:db:16:
                    ab:73:47:9e:40:46:38:a3:bb:ad:10:ed:7e:d3:3a:
                    90:df:5f:ad:56:f8:88:64:5b:af:f9:9f:9b:3a:52:
                    59:a0:6c:6e:65:e8:17:28:23:ac:58:9c:cd:77:ef:
                    52:bb:8b:3e:e9:c2:80:4c:96:72:99:31:63:bd:b2:
                    35:af:5d:9b:4d:f5:d1:fa:df:8e:d6:10:fd:29:d7:
                    24:22:bf:e5:97:7e:e7:95:d6:04:7d:d0:fe:46:3b:
                    e0:aa:ed:2a:9a:bd:69:06:73:28:fc:76:6e:af:b3:
                    39:a6:c1:95:5f:f9:e8:a1:cb:f3:37:4a:06:d2:49:
                    b8:e1:b7:3a:1e:aa:bd:9d:e6:4d:a0:a9:61:7b:ea:
                    e2:20:68:d6:58:2a:d5:6f:a7:b4:ca:98:40:68:a3:
                    14:f3:fa:8a:ac:46:d9:1f:96:92:d5:9d:18:68:f1:
                    b7:d7:b4:5c:45:39:f7:ac:cb:fc:f3:0f:56:8e:90:
                    8d:e2:d3:87:d0:b4:e7:98:83:28:d6:4f:a2:e1:97:
                    eb:62:51:9a:b4:0e:ab:a0:86:6a:3b:d5:42:82:8c:
                    1c:8f:ad:15:06:9b:73:40:a4:61:7c:7d:23:06:a0:
                    05:ed:de:de:4c:29:8b:bf:fb:13:88:75:9a:c6:a8:
                    b9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CB:10:D3:67:66:AE:D7:BF:7A:BC:02:52:55:21:A2:28:3A:29:08
            X509v3 Authority Key Identifier:
                keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d0:00:a9:0e:ef:1b:3e:85:7d:86:31:2f:7e:8e:8d:9c:81:
         ee:bd:3a:57:3d:21:a4:a9:e6:13:34:cc:cf:e7:19:86:5e:ac:
         ca:a2:ff:62:76:49:7e:6f:62:53:15:71:2c:94:db:53:09:0f:
         69:4f:7e:08:6f:11:67:10:b4:41:eb:08:c9:dc:9b:64:13:ae:
         58:b7:f3:a9:12:94:07:c3:9a:c4:0e:9d:1a:a4:b4:f6:0c:04:
         f8:06:1f:5c:db:cd:34:bc:bb:3c:32:52:7e:58:33:65:28:e7:
         40:30:ac:9c:93:95:af:31:6c:00:ab:14:bb:4e:0f:47:cc:93:
         62:93:d7:54:8a:4a:8f:7c:24:91:66:44:14:13:50:d5:e9:b4:
         f3:0f:04:6f:8f:0f:45:3d:39:8b:b2:b6:2c:44:b9:6e:eb:98:
         29:79:62:a2:80:37:56:2b:6d:83:7d:77:45:c6:90:ea:bc:93:
         74:26:ba:c4:f3:44:83:d1:e2:ea:12:54:06:71:b5:97:d5:1e:
         9c:85:d6:71:cb:31:42:ab:36:02:70:a6:3a:f6:c3:f7:94:42:
         ee:40:aa:d1:39:b6:7e:21:99:14:1a:3f:e1:68:7a:da:e5:5f:
         c0:2d:80:d1:e2:c0:fa:d1:26:f7:ad:1c:1a:8d:99:37:95:60:
         38:a0:ad:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:44:34 2026 by rpki-client