Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
File:                     _jecWObPq6RMIIdrfVmMCFBLUws.mft (raw, json)
Hash identifier:          KQQ0ey/4W7kU4HVT5SN8WQ3VIzbCmRhSzfIHxTSSHGU=
Subject key identifier:   52:E7:BD:00:81:71:33:B1:59:4F:0C:0D:DA:70:B9:6A:17:49:D7:23
Authority key identifier: FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B
Certificate issuer:       /CN=fe379c58e6cfaba44c20876b7d598c08504b530b
Certificate serial:       01A0DBA950A20A1569A7973C8E3138BC58F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
Manifest number:          EB
Signing time:             Sat 26 Sep 2026 03:01:41 +0000
Manifest this update:     Sat 26 Sep 2026 03:01:41 +0000
Manifest next update:     Sun 27 Sep 2026 03:01:41 +0000
Files and hashes:         1: 1f3chHH8Vzxj3ocJFNDQRkHByxM.roa (hash: Yj5a6Anj2XGpmwiiCO9eJxIVZQ77+YUsqu5JfZN+lyo=)
                          2: 3M6LA-oo_M8iW0WHMWzqNuawrXI.roa (hash: mbA8j0JMCwuQFEr3+eq0m532/7RxJbUAb2My/6/L17o=)
                          3: DC6F0mfYavqmIkVWp9CoS3ORJPY.roa (hash: H/N8+lVCJsVtR4s7AZv6JX/uXYchHAlYepuRHlvMSmQ=)
                          4: DqGXOOpUBDyIo6-xMv0lfI01neI.roa (hash: cY+avgvPvcXEHIu9Wj7BmeU7KYCi5ZbN7lhO24Q9+hg=)
                          5: _jecWObPq6RMIIdrfVmMCFBLUws.crl (hash: PTmlzZyMCYuxRQgmuianz1dbxzUfebubGQ4yesH2r74=)
                          6: bIqQRYp65ffuhEfiWgURnnYmOLA.roa (hash: 2t1dhMXRId6Ep0qRGdrx3Oonk4YhaxQhU/sq1I6fhLA=)
                          7: ixHLgv4HQ_wAiB8H1aG1cnHYC0U.roa (hash: Q6evZsXBO9hhV+6BK2xuyToyVzZwGNdUppGvsisAOWo=)
                          8: mQgZ_aeQizevYwNKMCfXAMQNacA.roa (hash: zBq8HYNkmYsx3l9a089U7aq9li/mu5uJZF8m8sHR/3U=)
                          9: wsLBMp1xRJgr69K7X57Is-5d0GE.roa (hash: mpGX3UZzDQtu714gFa7DML2FgzYlJk2cK8dfIFZYaDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:50:a2:0a:15:69:a7:97:3c:8e:31:38:bc:58:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe379c58e6cfaba44c20876b7d598c08504b530b
        Validity
            Not Before: Sep 26 03:01:41 2026 GMT
            Not After : Sep 27 03:01:41 2026 GMT
        Subject: CN=52e7bd00817133b1594f0c0dda70b96a1749d723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:4d:e5:f3:5b:f6:3b:71:e5:1a:76:92:a3:f3:
                    98:fc:ca:d7:b4:cb:c9:83:26:51:8f:8a:22:4c:88:
                    17:4d:8a:14:4a:9a:f3:27:32:dc:61:25:8a:c7:98:
                    44:33:53:92:46:51:3e:f8:bc:c7:a3:58:a9:59:66:
                    a0:80:6c:27:92:56:92:19:d9:9f:4a:75:8f:9d:53:
                    62:2c:b4:aa:a0:3d:1d:ea:9d:6c:73:bc:26:20:37:
                    18:39:d0:e3:67:f7:73:ad:a3:60:fa:22:a4:be:17:
                    c9:e8:f6:21:2d:58:d7:c4:af:57:f3:50:db:9c:30:
                    0b:0d:53:ac:a3:e5:ce:9f:9d:45:01:e7:ab:3d:33:
                    dd:ab:17:23:3c:70:32:2b:d8:32:80:9b:fd:d2:3f:
                    7f:a4:01:5a:97:e2:a2:e9:1c:b7:64:c4:c7:f7:3f:
                    9e:17:2d:52:c0:13:6f:61:eb:7d:7e:a3:b6:30:48:
                    91:e3:69:24:8a:1d:81:72:94:b7:e2:d4:89:fc:e3:
                    34:94:f0:81:ce:29:86:82:e7:40:47:85:c7:10:b6:
                    31:2f:09:33:07:47:cb:31:05:bc:f2:37:96:9e:ac:
                    27:4f:45:9f:75:dd:4c:22:a9:8e:23:3b:09:d6:cf:
                    13:2e:43:e2:28:06:c8:6b:33:8c:37:3c:af:21:95:
                    43:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E7:BD:00:81:71:33:B1:59:4F:0C:0D:DA:70:B9:6A:17:49:D7:23
            X509v3 Authority Key Identifier:
                keyid:FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:33:5b:74:fe:3e:c9:94:26:c8:07:64:49:78:ff:4b:aa:31:
         b5:34:0c:1d:52:83:1a:31:39:a5:f9:07:d5:d9:21:cd:bc:7b:
         5d:81:f2:2d:60:93:5f:c8:75:b7:16:32:34:9c:93:f4:60:a0:
         ce:a6:74:54:1d:d5:91:43:34:97:f5:e9:24:61:20:70:1a:cc:
         e1:1d:15:93:6b:cd:7e:18:26:e9:2c:45:3c:a8:ac:6c:77:e9:
         86:14:5d:c6:f0:6e:ab:a9:6c:ae:a6:c5:53:85:97:5d:73:f8:
         69:77:fa:59:b3:af:8c:aa:5b:44:0b:10:ce:e8:e5:ff:07:43:
         7a:c0:5f:92:5f:da:84:d4:72:a2:d6:0d:4c:34:43:14:4a:bb:
         7d:ed:e7:2e:4c:3b:2a:33:57:fd:6b:c7:09:89:c2:da:77:0b:
         86:c1:13:04:43:e8:4f:13:6f:68:56:33:50:a1:43:7a:a3:76:
         22:70:0b:fd:4c:21:56:9b:17:c5:20:89:59:05:93:64:b2:77:
         7b:df:68:77:0d:96:2c:6f:8b:f2:74:57:1c:27:fb:ba:d7:ea:
         4c:21:02:45:23:2b:8e:5e:f7:14:5b:23:0c:ec:6e:95:12:00:
         92:5b:2d:18:66:42:a2:c8:55:b5:f8:f6:50:3c:3b:b7:43:7a:
         33:b6:a6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:18:20 2026 by rpki-client