Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
File:                     _X5IAbAS8bGZsv0RqqxS13VjRzk.mft (raw, json)
Hash identifier:          pr3vlAWEbqtPPJxqpAt2wZD8XZ42t36Z+vDwFnfr1k4=
Subject key identifier:   67:17:51:C3:F5:B6:AF:B5:DC:47:AD:9F:CC:C0:2B:C1:4F:00:26:E8
Authority key identifier: FD:7E:48:01:B0:12:F1:B1:99:B2:FD:11:AA:AC:52:D7:75:63:47:39
Certificate issuer:       /CN=fd7e4801b012f1b199b2fd11aaac52d775634739
Certificate serial:       01A06D95C4BFC915B740E058657C95DD8131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
Manifest number:          B2
Signing time:             Fri 04 Sep 2026 18:02:06 +0000
Manifest this update:     Fri 04 Sep 2026 18:02:06 +0000
Manifest next update:     Sat 05 Sep 2026 18:02:06 +0000
Files and hashes:         1: YDVKQbfRYIpm7hR70cFm_r3Bozk.roa (hash: aF7PQA8hwmlUZMld6dK9hesrrO56Rkyyowsvq4iO504=)
                          2: _X5IAbAS8bGZsv0RqqxS13VjRzk.crl (hash: oAAUzsi1NoDttrlFmHF+VWYtif+FR9VYreto8yOSRHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:95:c4:bf:c9:15:b7:40:e0:58:65:7c:95:dd:81:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd7e4801b012f1b199b2fd11aaac52d775634739
        Validity
            Not Before: Sep  4 18:02:06 2026 GMT
            Not After : Sep  5 18:02:06 2026 GMT
        Subject: CN=671751c3f5b6afb5dc47ad9fccc02bc14f0026e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1e:a1:34:bd:b3:c6:f5:5c:e0:67:91:dd:80:
                    6d:a8:34:f2:36:cd:1c:db:f5:3e:6b:eb:04:7e:df:
                    dc:72:1c:06:eb:c9:46:21:26:5b:a4:ac:dc:1a:7b:
                    0d:43:bd:3f:e2:51:19:e1:ac:1a:85:c4:44:1f:38:
                    f9:47:c4:4b:26:a7:37:5f:fe:4f:ae:2c:81:cd:97:
                    46:4c:ff:be:46:0d:f7:43:0d:39:a9:8b:72:00:56:
                    62:2f:34:41:db:0b:68:9e:15:91:55:e6:1e:79:e1:
                    67:97:e9:60:dc:cd:46:11:32:fe:ba:ee:16:c9:96:
                    c9:31:9d:91:4a:79:0e:84:c1:1b:1b:73:13:d6:4e:
                    56:ba:fb:06:bb:fe:d2:2c:29:cd:81:e3:44:0f:6f:
                    92:bd:62:cd:ef:75:05:d2:63:95:e6:e3:da:20:7e:
                    94:fa:c3:0d:60:fe:3b:f8:cf:5b:3a:80:9f:a2:2d:
                    af:38:2d:8c:07:1a:0b:d7:bc:4a:cb:7f:ab:5e:05:
                    16:f8:f1:d6:b2:e9:ad:eb:b9:fc:7b:b3:1f:bb:d7:
                    64:bd:2f:33:74:ac:1c:7e:2e:c1:50:16:01:38:0f:
                    2c:9d:43:be:4d:2b:8b:ba:11:fe:93:fa:6b:a8:d3:
                    cb:5f:57:85:ef:09:94:04:fa:18:5b:26:21:fb:e0:
                    1e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:17:51:C3:F5:B6:AF:B5:DC:47:AD:9F:CC:C0:2B:C1:4F:00:26:E8
            X509v3 Authority Key Identifier:
                keyid:FD:7E:48:01:B0:12:F1:B1:99:B2:FD:11:AA:AC:52:D7:75:63:47:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:03:dc:6f:76:27:d9:da:90:29:1c:1c:79:74:bf:9d:66:f9:
         84:de:c0:86:62:6b:11:23:fe:36:6e:4a:56:bd:b4:8b:23:f8:
         83:ab:f5:ed:da:4d:05:3c:12:cc:d6:c6:13:0e:17:98:3d:1a:
         c9:8c:ec:c1:09:f9:a3:46:a4:88:1f:a0:57:43:45:5b:0e:d7:
         85:70:83:71:49:76:2e:e0:33:3e:06:bf:1e:dc:70:a0:6f:88:
         e5:73:4c:df:15:f6:5b:a9:b5:eb:8e:44:69:66:75:33:26:56:
         52:d3:09:65:0f:9e:44:55:da:40:8c:8f:bf:94:ce:5f:bd:6e:
         ed:ef:66:b8:f2:d1:28:49:9e:97:c5:5a:f5:0b:72:5b:09:4d:
         2d:34:ed:e3:cc:3c:f5:1b:73:c4:94:6c:cd:3d:3b:e0:77:54:
         7c:75:9c:de:c2:96:23:f8:79:da:bb:ae:19:0d:c2:01:84:aa:
         39:f0:21:b0:56:cd:99:5f:e7:9a:bf:8d:ba:dd:d6:a7:ba:08:
         19:c8:66:21:19:db:3d:50:b3:26:ed:80:87:ef:93:30:27:58:
         2d:08:f4:e9:5e:e2:c3:c9:74:d1:f0:2b:73:5c:4a:2f:f9:89:
         85:8b:5a:7c:39:8d:ca:cb:c3:c1:be:45:88:77:8b:63:c2:b8:
         a3:dc:dd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:18:34 2026 by rpki-client