Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
File:                     fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft (raw, json)
Hash identifier:          QDXwt28UaM1H4H6C6oRP1h9DI88Ho/vDOdyh0g6q4Ck=
Subject key identifier:   FA:5D:CF:5F:F0:68:12:59:23:87:D7:5C:7C:FD:5A:B0:F9:2F:65:A5
Authority key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
Certificate issuer:       /CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Certificate serial:       01A0E7AF5933C9140C02E8FC91C820F7BAD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
Manifest number:          13A3
Signing time:             Mon 28 Sep 2026 11:03:43 +0000
Manifest this update:     Mon 28 Sep 2026 11:03:43 +0000
Manifest next update:     Tue 29 Sep 2026 11:03:43 +0000
Files and hashes:         1: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl (hash: DEmkgQMIpBOGqNI3jY3Vk+UMwVzPhkEpxGMeanRtLoU=)
                          2: qoI8F0lbOVIzl_Chk1fw1atLi5k.asa (hash: N3/9TZTJb11e6EEEvsOn0LqdBXjtO+tXCNFld50vBf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 11:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:af:59:33:c9:14:0c:02:e8:fc:91:c8:20:f7:ba:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
        Validity
            Not Before: Sep 28 11:03:43 2026 GMT
            Not After : Sep 29 11:03:43 2026 GMT
        Subject: CN=fa5dcf5ff06812592387d75c7cfd5ab0f92f65a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:46:6e:e2:aa:83:f5:b7:46:ab:b5:54:89:
                    cf:cf:f9:53:d9:0a:51:72:87:a5:f3:80:34:52:dd:
                    ca:c5:41:3d:8b:66:8a:20:8c:6e:45:ec:a9:5b:2b:
                    5b:18:fd:d8:da:06:4a:aa:8a:5e:ef:3a:d8:fc:61:
                    62:34:c9:b1:99:0c:57:25:3e:85:22:a1:5e:34:6a:
                    78:e3:a1:2c:57:9d:e3:f0:de:16:6a:77:13:ea:f8:
                    8f:b3:94:46:bf:35:6e:31:e2:db:30:14:f1:a0:a4:
                    8a:0c:64:2b:03:e3:d5:f7:07:7b:53:be:eb:e6:b7:
                    df:7e:bc:52:cd:04:75:93:63:03:aa:95:c1:e4:3c:
                    32:0f:10:7c:16:47:ed:4d:42:4e:ce:91:90:6c:64:
                    9a:32:08:aa:53:11:98:7d:6f:54:5a:00:ee:05:f3:
                    52:be:55:e2:bf:42:35:75:2b:d9:17:b8:b6:7e:29:
                    20:68:d1:6d:00:d4:d7:d9:a4:aa:db:64:d1:7b:cf:
                    63:8d:c2:3e:67:fb:16:4d:f7:f3:61:a4:3e:8c:81:
                    f9:a0:24:fe:ed:10:b4:0f:8f:3d:e8:f6:cf:82:41:
                    4e:85:43:c4:79:3d:e5:f5:b9:2f:c1:c7:40:b7:d9:
                    34:b4:c8:bb:f1:d1:a0:87:66:40:34:9a:9c:bc:a3:
                    58:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5D:CF:5F:F0:68:12:59:23:87:D7:5C:7C:FD:5A:B0:F9:2F:65:A5
            X509v3 Authority Key Identifier:
                keyid:7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:84:8b:87:01:1b:3a:31:3e:28:81:64:da:0b:ad:d0:bf:9a:
         b4:0a:6f:bf:d4:a7:b5:4d:25:40:f0:dc:50:eb:c8:d9:e8:19:
         6c:e4:34:d6:ba:63:85:26:05:38:83:12:9c:fc:01:6c:5c:ff:
         b8:fe:10:d6:4f:38:51:db:55:9f:0e:67:38:d7:5c:38:4d:15:
         50:42:12:cc:ba:93:01:0f:73:e8:39:ba:f2:08:48:a0:11:b0:
         8e:ac:20:e6:5c:f0:f2:ed:58:39:e7:cc:fd:50:c5:01:03:29:
         fb:a0:72:f0:54:52:73:7b:d0:14:42:14:64:ba:47:58:b6:a6:
         c8:48:bd:c8:48:8d:05:4f:c2:ba:07:ad:66:87:10:e2:83:b4:
         bb:24:78:29:af:8c:aa:1e:56:64:d6:96:08:0b:41:9d:0b:11:
         7c:b6:1f:aa:f9:05:f2:b1:3a:ac:5c:37:e2:75:6c:c6:92:3e:
         e1:ab:b6:d9:2b:db:4f:97:d6:9c:d3:73:6e:7f:8b:5c:17:89:
         f8:e7:ae:8d:72:39:6f:9b:22:af:df:cd:5c:54:e4:3a:f6:ff:
         06:bb:36:b3:84:aa:4c:29:d4:b6:8c:e4:18:9c:e0:78:b7:8b:
         03:cc:14:4b:e8:a3:3a:c3:8e:0a:59:c5:8f:81:d8:4f:3f:8d:
         87:b8:23:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:32:47 2026 by rpki-client