Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
File:                     1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft (raw, json)
Hash identifier:          tlgKWfGmfuc42cd5/SmWsr7iPi2l13cZaX8Mf5WIKQc=
Subject key identifier:   79:78:F3:34:69:D2:FD:23:90:5B:42:A8:1F:5A:69:20:ED:36:F3:F5
Authority key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
Certificate issuer:       /CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Certificate serial:       01A0D048D45B0731749DA3553872FFC38A71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
Manifest number:          07FF
Signing time:             Wed 23 Sep 2026 22:00:28 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:28 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:28 +0000
Files and hashes:         1: 0zJNP_Zrhzmc5S2W0e83m-7IfBI.roa (hash: pWQnInZ9CqxHtxn5Tca4LgLQUf2//UKZQVaoYXa+1S4=)
                          2: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl (hash: BDPEveUh1vzJsG2s9qZUEDBE3c0se6NM47NB13aQZuU=)
                          3: exZJZ1LXS_XWUoEEXClUotzMvKs.roa (hash: 3zCaN398dTtCF4YEIkTfNp550PcdnP/Kt5xJ2IMRAQY=)
                          4: xf5PZxrbr-dkbQ2U7iTmmHrt4OY.roa (hash: iuA6Ubj9SVImqFnRUoknVGt5/lBTwc0pgWqE61xubQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:48:d4:5b:07:31:74:9d:a3:55:38:72:ff:c3:8a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
        Validity
            Not Before: Sep 23 22:00:28 2026 GMT
            Not After : Sep 24 22:00:28 2026 GMT
        Subject: CN=7978f33469d2fd23905b42a81f5a6920ed36f3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:42:5d:72:40:39:39:c8:b8:cd:7f:6c:51:1d:
                    1b:17:93:c6:c0:c3:07:26:9b:92:50:56:0e:b7:82:
                    76:d2:25:28:a1:70:a2:02:b1:7d:1e:12:a8:f0:9f:
                    cc:85:ea:12:dd:9d:c5:35:e2:01:58:34:c7:77:89:
                    a2:f4:b9:49:fd:0f:39:53:dd:9f:47:d5:88:8d:46:
                    b3:3f:cb:f1:6c:de:e9:3b:25:ab:5a:77:72:0b:7b:
                    7e:38:45:34:6e:82:20:59:e1:8f:62:0a:be:ca:9a:
                    24:20:59:de:34:0c:0e:34:7f:05:61:8f:c2:df:2a:
                    13:dc:70:1c:2a:8a:39:05:46:1d:7e:86:b6:a4:a7:
                    22:a2:b4:3c:63:90:c6:bb:21:51:f2:5f:34:6a:34:
                    43:e1:36:fc:90:13:6e:3b:bb:a5:97:f8:8e:e8:0a:
                    d0:2e:93:18:e2:8f:46:9f:fd:0a:a2:46:8d:d2:2f:
                    91:9f:94:f5:7f:55:df:2f:79:1d:0e:dd:98:06:6e:
                    00:dd:e6:de:1a:ac:7f:fd:fd:15:09:1a:c3:6a:aa:
                    f8:a4:ac:8d:c1:63:00:40:88:99:0b:c7:a3:79:65:
                    81:d7:85:c8:45:f0:28:d4:9f:a6:9c:b7:49:3d:9b:
                    ff:5f:16:8e:ec:39:04:66:fd:f2:49:de:f1:91:f2:
                    80:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:78:F3:34:69:D2:FD:23:90:5B:42:A8:1F:5A:69:20:ED:36:F3:F5
            X509v3 Authority Key Identifier:
                keyid:FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:24:48:ea:04:a5:61:7f:bc:24:2f:b8:6b:c5:1b:db:bd:a4:
         70:ea:47:bb:6f:f8:4d:f1:4b:c9:70:74:56:9d:3d:93:c5:a7:
         16:27:35:9f:85:dc:3d:68:96:6b:a0:37:e2:45:84:f9:90:31:
         4b:ee:fb:5f:36:f6:a8:af:a8:9d:29:ab:9e:ab:a3:7a:9c:fa:
         ca:63:dd:f5:8e:8f:33:74:ec:3f:eb:07:d7:58:02:95:76:14:
         9d:43:70:07:bc:55:c9:67:03:27:06:f9:53:9f:19:70:b9:55:
         24:87:21:94:61:47:83:58:5d:df:36:b2:0c:26:27:8b:7a:af:
         34:c8:3b:63:ea:04:e2:ff:c1:97:73:43:a6:71:6e:b6:e6:e0:
         ed:bb:9c:ac:89:cf:25:42:0d:7a:f7:13:8d:a8:21:78:d0:88:
         b2:1f:83:b5:f4:b5:0e:c8:6a:a6:f0:e6:0d:f4:97:83:0a:ed:
         a8:84:19:cf:e9:7b:c7:c7:2f:ee:95:c9:80:b6:46:ae:79:e8:
         9c:fb:a4:2e:4f:8d:c0:cf:c2:dd:5f:d7:1b:58:f2:79:21:d9:
         de:6d:87:95:8a:02:8e:01:7b:0d:34:69:34:ee:3d:ab:1e:95:
         8f:08:d2:2f:41:5c:fa:e8:2a:13:02:5a:5d:f8:01:e0:a9:6a:
         70:98:4e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:33:07 2026 by rpki-client