Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
File:                     _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json)
Hash identifier:          cSaC97j6vD2vlN3p3JpsPiTzJdBd1GFgAhGUw54irZk=
Subject key identifier:   20:4B:0A:71:FD:50:C7:75:9A:E5:B0:CF:46:72:5B:9F:33:9D:45:76
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Certificate issuer:       /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial:       01A0D50242B797F31A2454AA014894526858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
Manifest number:          0BE1
Signing time:             Thu 24 Sep 2026 20:01:30 +0000
Manifest this update:     Thu 24 Sep 2026 20:01:30 +0000
Manifest next update:     Fri 25 Sep 2026 20:01:30 +0000
Files and hashes:         1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: 7L3WUR0aJC4i1ZgfCiexsFNicU8di9H7Lc8i72BzxKI=)
                          2: jON8jV9Q2GLdoq1oYbTtzWvSeAw.roa (hash: CpfaNm7QCE9dRH1Z5uGSs1NzanRsXUOVz00UoK4+1jY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:02:42:b7:97:f3:1a:24:54:aa:01:48:94:52:68:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
        Validity
            Not Before: Sep 24 20:01:30 2026 GMT
            Not After : Sep 25 20:01:30 2026 GMT
        Subject: CN=204b0a71fd50c7759ae5b0cf46725b9f339d4576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:8e:cd:0f:e0:fc:ae:1e:b9:35:98:32:71:
                    5e:ae:4f:53:e9:66:9f:6d:ec:36:b2:31:0f:3f:7c:
                    5e:d9:ed:b3:36:da:46:87:dc:90:91:11:a5:06:da:
                    35:81:c3:9b:dd:4e:3e:7f:61:06:d6:57:93:9d:18:
                    a5:f6:25:16:1b:f0:a8:86:0f:6f:c1:76:c2:70:14:
                    6f:ab:5e:fd:4b:b5:f9:c0:a3:4c:de:fa:f1:07:94:
                    72:d0:52:df:0b:e4:9b:3d:d4:08:cb:a4:97:8f:1f:
                    f2:f7:34:f7:5e:70:5f:59:6d:8f:dc:94:25:33:72:
                    43:1a:bb:bd:a1:d3:f6:db:53:c8:67:e7:e9:7c:26:
                    8d:76:3d:2a:83:4d:b7:f5:13:e6:91:52:64:29:2c:
                    e0:29:46:85:70:8f:4f:ae:34:71:57:51:3d:49:d5:
                    fc:48:0d:d3:a6:75:b7:d9:b4:82:15:83:b7:10:cb:
                    5d:6c:ff:f4:ce:9d:4e:f3:ff:5e:f0:42:d0:4c:5e:
                    79:48:a7:60:1d:95:6b:cd:4d:53:7b:72:46:d5:44:
                    17:17:59:77:54:1a:d2:15:51:0b:d8:8e:c3:40:98:
                    14:40:0e:0c:64:9f:66:cc:91:0c:e3:1d:9b:f8:c7:
                    6b:3b:f9:cb:d7:d9:c2:e9:d2:d3:04:3b:df:51:52:
                    ae:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4B:0A:71:FD:50:C7:75:9A:E5:B0:CF:46:72:5B:9F:33:9D:45:76
            X509v3 Authority Key Identifier:
                keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:2d:61:87:0b:83:c2:71:2b:15:df:fa:01:96:fe:67:c7:86:
         9d:28:16:ef:2e:90:26:7a:74:e5:58:de:22:b5:33:a8:a5:86:
         b4:64:a8:5a:00:40:26:fd:ef:25:b9:42:79:e7:5f:29:11:5c:
         e9:f9:f6:77:24:c8:5a:47:fc:1a:f7:1f:9f:42:ee:f9:5e:51:
         5d:5b:69:38:ed:73:96:47:9f:f4:06:b3:9e:8e:0a:ce:1a:bd:
         8e:81:9d:48:c7:8a:9c:3a:e6:70:5b:ca:39:22:f7:dc:ef:33:
         4b:73:98:c6:d0:13:1a:8e:2a:56:46:ce:c3:87:f2:fc:4c:75:
         38:6e:93:fd:9e:e3:f7:29:ca:b5:42:19:02:ff:a6:b1:3b:fb:
         00:41:33:92:d5:29:45:31:8c:64:33:9b:67:68:90:0a:e6:1b:
         43:fe:22:91:39:32:6d:2d:53:b0:ae:4d:fc:48:84:ac:44:e0:
         fa:3e:ca:ff:e2:c9:86:d4:5d:91:a8:78:46:e1:56:db:d8:5b:
         f7:2a:9f:91:b2:e8:d9:47:a4:15:ad:ba:bb:d2:c6:a1:77:31:
         b8:fd:ea:a0:e1:ca:50:5a:f1:67:94:7f:bd:05:29:96:e1:e0:
         80:36:07:2e:ff:42:16:80:95:7f:40:50:c9:15:64:32:a7:83:
         df:78:68:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:45:28 2026 by rpki-client