Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
File:                     L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json)
Hash identifier:          iJmxltIFg+BLJmQrSeGqOqaV0lPzwm1/Vg7d2YwmKL0=
Subject key identifier:   DB:A7:E0:BE:4C:F5:7E:08:31:61:1B:5A:A6:8D:73:FA:97:73:E5:92
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Certificate issuer:       /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial:       01A08A8CE6BE1E6BE319BE0E43D45E199D5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
Manifest number:          1A86
Signing time:             Thu 10 Sep 2026 09:01:24 +0000
Manifest this update:     Thu 10 Sep 2026 09:01:24 +0000
Manifest next update:     Fri 11 Sep 2026 09:01:24 +0000
Files and hashes:         1: Fs9aAyK9lTsbVm0NOu0XxmRrYvM.roa (hash: RzyHKDUe729UgBjp7Kobbrat8Gaw2JQ/Zg4A7HvcVdI=)
                          2: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: L/7eqnx5J4j5gj75xnlttJES/m3GrxWLSuWF0UKOzhE=)
                          3: MrkTSTOQnAaGRm2DjkE4wDAii6I.roa (hash: IemK3qnTPE/e8MsNSBvQ7f7MgzptN5jWR7/rlu58qzM=)
                          4: RPfAXv-f8uBkkH0WybryVHOTpQU.roa (hash: C6w//enAOUR/TI2OpJYps6HovP/3vBWM2Hbve1rPMiI=)
                          5: gF4iUNMjCX6YP857V9CNjLm-AIg.roa (hash: FhDwHm21Q6QTRo/sfldBISr1alr6N55dx1Ou14/lEJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 09:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8c:e6:be:1e:6b:e3:19:be:0e:43:d4:5e:19:9d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
        Validity
            Not Before: Sep 10 09:01:24 2026 GMT
            Not After : Sep 11 09:01:24 2026 GMT
        Subject: CN=dba7e0be4cf57e0831611b5aa68d73fa9773e592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d4:a9:c3:16:9b:04:83:ad:e6:6d:8f:33:05:
                    db:55:14:9a:46:e7:ad:db:ac:89:26:34:c4:ec:c9:
                    07:e6:97:8a:0a:cc:6c:9d:16:72:59:b5:ff:59:30:
                    df:a8:e1:09:22:ae:a4:f8:26:e2:dd:90:f3:19:28:
                    42:35:23:a8:1f:da:d9:fd:28:e7:2b:cd:30:73:00:
                    eb:56:4e:06:c5:a4:a1:15:b3:01:7b:29:3a:a8:19:
                    22:66:10:a7:89:46:6c:f6:1e:e7:f3:f0:bd:58:43:
                    2c:c4:7f:90:ce:fc:1d:29:08:8a:f1:df:12:ee:fc:
                    ee:e1:ef:70:4b:9d:da:84:2f:83:74:be:b9:69:a2:
                    d9:e7:6a:0a:53:71:dc:c4:68:3b:cc:a1:52:f7:ef:
                    3b:87:5f:8f:ab:fe:2c:a5:5b:5e:f3:2d:e3:75:26:
                    9a:fa:5a:23:fb:8a:07:12:83:79:c1:6a:3f:e9:80:
                    3e:1c:92:cb:f6:0c:93:d7:ff:be:ab:03:83:bd:00:
                    56:f7:38:d2:75:dd:82:f9:ba:a2:21:6e:f1:cc:08:
                    c6:39:d2:61:24:e5:f6:51:da:3c:e2:63:be:3d:c6:
                    91:46:42:50:ab:61:1c:34:3c:c1:09:0f:99:97:26:
                    9b:73:13:df:e8:36:b1:d4:a9:b8:b5:13:2c:20:55:
                    e6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A7:E0:BE:4C:F5:7E:08:31:61:1B:5A:A6:8D:73:FA:97:73:E5:92
            X509v3 Authority Key Identifier:
                keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:72:38:d7:a3:96:f5:97:4e:3a:27:2f:1c:ff:6e:30:fe:dc:
         02:73:6f:96:5b:ee:71:02:ba:ba:4c:cf:28:50:0f:46:56:b4:
         55:51:6a:cc:b3:ac:e6:89:66:53:39:96:01:fc:8a:4b:69:0f:
         9d:ca:35:df:24:86:81:85:50:8a:34:75:b8:55:c9:ef:cf:26:
         40:05:e0:a3:7b:df:0b:2f:b0:e5:24:a4:37:91:82:bb:ff:61:
         6f:0a:78:22:4a:c1:d7:ad:8f:f1:9a:f1:1d:18:77:f3:d4:00:
         fd:4e:cf:de:ce:5b:e5:52:a5:64:08:93:6b:53:1e:5c:fc:f2:
         a9:1e:ec:e4:74:bc:ac:47:ec:95:5c:ba:e6:89:f8:92:d2:bc:
         7a:c4:18:76:3c:81:76:86:19:68:fe:c5:89:fc:7a:e8:78:c7:
         f8:09:6d:d1:8a:4e:12:76:4a:03:8f:29:82:ff:33:97:51:22:
         d8:25:d0:13:96:5e:b3:1d:fe:11:f8:d0:c4:6c:d8:f4:58:b0:
         f7:92:ea:4b:da:2f:4b:05:71:00:cb:a3:8a:01:f6:e7:5a:02:
         26:cc:8c:fc:51:1d:c9:28:69:b3:b4:46:02:0c:5b:f0:c2:6b:
         68:46:4d:20:89:d2:36:cf:60:d7:28:5f:f2:70:e1:c8:d3:60:
         cd:22:4a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:24:47 2026 by rpki-client