Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
File:                     Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft (raw, json)
Hash identifier:          e/rN1TziefoX05XMNdBkegqeLQj2r2fBS06lUmLmmIc=
Subject key identifier:   82:9E:A4:81:B4:8D:8E:78:38:0C:D1:AA:F8:BE:F8:8D:06:07:EC:FD
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Certificate issuer:       /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial:       01A0D5A73E7196B6BF973D67FF461C6BD31B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
Manifest number:          17BB
Signing time:             Thu 24 Sep 2026 23:01:42 +0000
Manifest this update:     Thu 24 Sep 2026 23:01:42 +0000
Manifest next update:     Fri 25 Sep 2026 23:01:42 +0000
Files and hashes:         1: AE9Lfl-4UbNnNijYfCBA7Dotnk0.roa (hash: 4272KJRiaDFrIJ1v9/e6Ri/6Hq4jjOw6FRmI0faWzNk=)
                          2: AjYgA83fEMBqjUVh5HogDvcF4y8.roa (hash: HmdReTlwO7q9dM9EymrF4uah3KgbjfgTzrb6znj83rY=)
                          3: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl (hash: 05nPYCm6hYVfFzFyRL195x6CtAzAOqo7On42L3WvJMA=)
                          4: Un6YiMPdPmnXJEAfLjnF4ejn4-U.roa (hash: Vvj30zXhMxPg9hIHuIBZfVJuw/gM4ZcLB86Kjx9twm4=)
                          5: UziBeF9vZhF9BgfMO9asPeRvxQs.roa (hash: b93bcZj29ys10OmZ+k4Z6n8bU3xxStbAH0qnq54JvrM=)
                          6: XRdK0Q38L08ZiH0X_7usVjWgOqU.roa (hash: NUYv2BvkNVVgRi3KArH9hMTA+2Ow1tmbVRQjMS4xPYw=)
                          7: kHpTZdJdGSTy5cL36tdDAiifHMM.roa (hash: t+ZN1J9Tad6u02+/g5NMqtaDNj7REzYTAjeN7U4LYyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:a7:3e:71:96:b6:bf:97:3d:67:ff:46:1c:6b:d3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
        Validity
            Not Before: Sep 24 23:01:42 2026 GMT
            Not After : Sep 25 23:01:42 2026 GMT
        Subject: CN=829ea481b48d8e78380cd1aaf8bef88d0607ecfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a0:c2:a8:fd:6b:60:19:fb:de:78:b6:23:ae:
                    c4:93:ff:9f:43:d4:de:09:50:54:94:ab:b8:d9:ab:
                    43:93:10:01:40:32:c7:39:40:7c:42:45:b9:b1:7d:
                    36:5c:80:90:a6:9b:db:24:aa:4c:e4:ee:e5:27:04:
                    99:9c:5b:72:57:e3:67:2f:59:09:97:00:68:75:2c:
                    82:9e:a9:a5:6e:ce:7a:a8:16:53:16:55:ce:92:41:
                    a8:67:1a:d9:72:d9:88:40:89:7f:d9:1a:31:66:8e:
                    84:1e:db:ca:4f:06:6f:44:28:27:9c:1b:33:8c:93:
                    21:e5:db:80:e6:e0:2a:63:54:cb:36:51:67:af:4c:
                    ce:08:01:14:6e:84:37:3e:fd:12:8a:1b:5d:5c:43:
                    7f:d5:78:68:bf:de:1a:39:a7:ef:ec:fb:9a:18:80:
                    6c:ea:e2:7a:43:55:f7:7f:ab:7f:13:73:f1:b2:3c:
                    69:ee:2e:ea:e6:99:56:47:0d:3a:54:03:90:e5:3d:
                    11:71:a0:2b:ca:5b:73:0c:80:f4:0a:3e:ed:c4:69:
                    b6:1e:32:fc:bd:0f:8f:70:a0:2e:d9:67:44:25:03:
                    75:9c:f4:da:07:d7:cc:49:3d:53:1e:5f:aa:ad:9a:
                    65:6d:a7:f7:de:a6:00:22:48:d5:01:e9:82:38:84:
                    dd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9E:A4:81:B4:8D:8E:78:38:0C:D1:AA:F8:BE:F8:8D:06:07:EC:FD
            X509v3 Authority Key Identifier:
                keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b0:2c:55:d4:02:39:a3:c2:34:61:a4:3e:95:dd:d6:5f:bc:
         cd:a5:f7:39:9c:15:e7:9e:b0:dc:3c:e4:a8:e0:de:c9:01:6c:
         ee:98:ea:db:4a:0f:0d:1a:2e:a7:b3:41:d5:4b:50:93:2f:ce:
         1c:53:8f:b8:0c:9d:78:4a:1a:d8:52:61:94:20:74:01:80:72:
         65:ce:ba:17:a4:e3:7b:2e:81:1a:38:80:6e:1d:88:f1:ad:1b:
         4f:63:04:a4:e3:8c:f0:e8:f8:e8:4e:d4:3d:ad:f3:34:57:d1:
         78:30:98:ee:b3:4e:5e:f3:a3:5a:cc:7b:07:ea:a6:4b:7a:fe:
         c5:2a:a8:20:f0:3e:d6:51:f1:bf:9d:b3:ac:ed:e6:e5:44:21:
         11:61:a6:f9:3d:92:dd:21:02:b9:6e:7f:37:7d:f1:5e:85:d2:
         fd:e0:10:e2:2c:9b:a1:72:cc:6e:40:f5:31:ac:34:06:35:e9:
         46:4a:88:ed:85:0e:64:d8:76:65:c5:f6:03:5e:3b:53:27:d3:
         f2:5c:58:1c:9c:71:c1:e6:3b:a4:1d:a3:c2:cb:4f:f2:e3:b9:
         f0:ab:a6:76:aa:3d:8e:63:f1:ed:31:16:fa:11:c8:fc:01:e7:
         a1:2a:ae:5a:74:ec:54:d1:e0:46:4c:6e:1f:8d:ab:f9:c5:c1:
         a7:6b:a8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:38:50 2026 by rpki-client