Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
File:                     9FT4T3gIX46gOklonL43LnSsFTw.mft (raw, json)
Hash identifier:          HAeEHqx1+ENHIqjNbR/I5thFE3M9yrKEo2Ly61aDyHw=
Subject key identifier:   D1:05:D8:ED:29:BD:FF:1E:AD:7C:20:2E:48:63:95:B8:59:9F:C5:D0
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Certificate issuer:       /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial:       01A0D0804FFCE50C67B18A093C0A87136BB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
Manifest number:          1A6B
Signing time:             Wed 23 Sep 2026 23:01:05 +0000
Manifest this update:     Wed 23 Sep 2026 23:01:05 +0000
Manifest next update:     Thu 24 Sep 2026 23:01:05 +0000
Files and hashes:         1: 9FT4T3gIX46gOklonL43LnSsFTw.crl (hash: wmsU/tnHhuGBxU5FrUXpjCXpO9h0LDTuxJzAr5ahSkA=)
                          2: Y6ybWhEjwuda51l0uiaZjIT-fg8.roa (hash: 8LGe+xcRdI8B6zAIoBChynO4rGVdoYzlhKSA0vPLuGw=)
                          3: aEVMMMA5f1UmRI8NYOUQQuTtgsQ.roa (hash: pdfghptkrLhCdjHFzkd4R/q6hTlSpA/AvR6T+/fF+rc=)
                          4: sbz6OVH06vkYwN8qjWyWv5JQ98I.roa (hash: mqPWKkpNLvEdA2xxPfKh+1E+EB8NghsX64s1n44EHeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:80:4f:fc:e5:0c:67:b1:8a:09:3c:0a:87:13:6b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
        Validity
            Not Before: Sep 23 23:01:05 2026 GMT
            Not After : Sep 24 23:01:05 2026 GMT
        Subject: CN=d105d8ed29bdff1ead7c202e486395b8599fc5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:df:f9:11:47:2d:27:9d:dc:aa:ef:1e:7a:
                    bd:a5:9d:1c:f3:12:8e:6c:a9:82:5d:73:ab:2e:df:
                    03:d8:98:e8:2e:93:97:5e:7a:5f:bf:a3:5d:8d:5a:
                    54:6f:7f:4e:ce:5c:1b:ee:00:97:fe:36:c8:4c:ec:
                    c9:5c:24:14:99:17:88:bd:fb:ea:0e:2c:89:ca:0c:
                    a1:a8:ce:60:46:89:13:0b:5a:77:b7:ac:6f:ed:ad:
                    ae:e5:cb:33:d1:fe:22:af:26:b4:53:cd:e8:bb:ad:
                    82:a3:49:59:25:99:25:da:a2:a5:10:61:63:2b:d1:
                    55:6a:76:28:86:d6:8a:79:6d:d9:24:4c:83:18:69:
                    a2:a3:84:90:a3:cf:f8:68:ef:40:ec:65:00:81:7c:
                    cd:a0:b3:16:8f:9f:aa:c6:69:93:d5:63:fa:c6:39:
                    e5:6d:73:5f:c7:5e:71:0f:bf:5a:bf:ec:97:1c:0c:
                    12:66:9d:7b:8e:fb:3b:64:56:a5:7f:3b:d1:56:6b:
                    51:8b:b0:40:68:81:d9:5d:bd:fc:c4:7c:6a:01:69:
                    81:fb:af:0d:4b:14:a1:8e:a5:bf:94:ef:5f:60:7b:
                    8f:79:ac:6c:18:27:4e:ad:99:8d:28:03:f3:4c:18:
                    9f:d9:0a:d5:3f:ef:9a:a3:3d:ea:46:8e:f5:79:94:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:05:D8:ED:29:BD:FF:1E:AD:7C:20:2E:48:63:95:B8:59:9F:C5:D0
            X509v3 Authority Key Identifier:
                keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b1:7a:26:d6:df:80:44:83:ac:80:1b:88:e0:bc:2b:f4:cc:
         51:58:27:d6:64:3c:7b:3d:21:18:3b:8f:0d:06:1a:e1:9d:f9:
         22:d6:76:57:84:31:a2:dc:11:92:48:c6:a4:44:ea:aa:d4:7c:
         57:ac:15:f9:e1:c9:88:40:f3:cd:dc:c1:06:87:b4:53:ba:16:
         6e:6e:d6:8a:21:2a:cc:c5:f7:49:70:1c:2d:79:2c:cd:9e:2f:
         a0:ed:ef:f8:ac:c4:ec:ac:20:72:db:9f:94:61:ca:a5:61:da:
         1e:76:d7:23:86:27:5c:ce:9c:b5:f2:5b:4e:8c:bd:7e:56:d7:
         17:f9:76:29:25:ad:a0:75:a0:ff:f2:5e:10:e4:f2:5e:00:86:
         7b:32:99:c6:4b:2d:b8:32:69:86:df:92:75:95:15:da:1c:b2:
         83:f1:fd:d8:e4:2b:59:bb:b3:18:dd:b8:fc:da:ac:da:89:26:
         2a:03:14:d8:25:dd:83:e3:65:40:5b:1b:25:77:13:f2:bd:b5:
         ee:49:f8:73:21:e1:0c:9b:9d:ec:86:12:c0:2c:dd:5d:3f:ac:
         40:02:83:63:41:65:19:42:d1:bf:30:52:1e:dc:b3:84:0f:07:
         31:1e:c5:95:ed:aa:5f:2a:be:3d:fd:3e:2e:84:b3:94:9c:fe:
         4c:09:6f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:41:26 2026 by rpki-client