Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.mft
File:                     FcYXfT3cgV334SIF-LaCqvS3GTU.mft (raw, json)
Hash identifier:          JTAbFeckeawE1TFHnSSF2U+VekkPPrAAVWBtAwhajSU=
Subject key identifier:   0B:5E:CB:4B:AB:6E:48:45:28:2B:15:70:AA:B0:5F:32:59:4D:A9:30
Authority key identifier: 15:C6:17:7D:3D:DC:81:5D:F7:E1:22:05:F8:B6:82:AA:F4:B7:19:35
Certificate issuer:       /CN=15c6177d3ddc815df7e12205f8b682aaf4b71935
Certificate serial:       01A0889ED6499EC1D35BE9A98FD55F8BC66D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcYXfT3cgV334SIF-LaCqvS3GTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.mft
Manifest number:          C0
Signing time:             Thu 10 Sep 2026 00:01:45 +0000
Manifest this update:     Thu 10 Sep 2026 00:01:45 +0000
Manifest next update:     Fri 11 Sep 2026 00:01:45 +0000
Files and hashes:         1: 24oyFCZ82CeeIceGWeut2w2WwuM.roa (hash: HrBB+WmjLXbJwhb8253Qsk+ZcaUjm9aaPB5tcu3NZh8=)
                          2: FcYXfT3cgV334SIF-LaCqvS3GTU.crl (hash: vhk+pevvHKy0uA5FtqDTj3rnkMXBeIkX0YTFoCATBLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcYXfT3cgV334SIF-LaCqvS3GTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:88:9e:d6:49:9e:c1:d3:5b:e9:a9:8f:d5:5f:8b:c6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c6177d3ddc815df7e12205f8b682aaf4b71935
        Validity
            Not Before: Sep 10 00:01:45 2026 GMT
            Not After : Sep 11 00:01:45 2026 GMT
        Subject: CN=0b5ecb4bab6e4845282b1570aab05f32594da930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:af:f9:81:b3:34:33:0b:38:63:31:44:33:
                    7b:cd:28:9a:88:24:29:55:7e:0e:3c:8b:5d:e4:c0:
                    98:73:0c:7e:79:b5:5d:22:c0:0c:46:72:db:92:f8:
                    48:30:06:41:33:76:fc:3b:34:49:bf:ed:61:ac:0e:
                    07:0e:53:a3:85:cc:0e:2d:54:5f:eb:62:26:66:eb:
                    01:74:5b:85:bc:5f:f9:a3:df:1a:de:34:14:21:16:
                    11:dd:a1:a7:0c:f7:c4:e5:64:16:23:a3:71:09:02:
                    a3:57:56:18:b3:08:d0:52:77:b1:e8:38:4d:b3:e6:
                    84:b9:f3:63:bb:b0:83:f7:5b:78:ff:50:30:77:e4:
                    1e:82:7b:95:47:d8:05:8d:28:fd:9e:6f:80:45:db:
                    bc:89:d5:0b:c3:c5:8d:be:90:8e:bf:15:1e:7c:02:
                    3b:fd:61:74:ba:f8:dd:5a:ca:a7:70:50:a4:d2:2f:
                    b3:71:c6:c0:33:0f:59:be:7f:32:82:3c:34:14:6f:
                    b2:f3:f5:88:69:83:e8:24:b9:89:ed:e7:cd:99:97:
                    00:3c:ce:f8:1e:8f:dc:81:58:e2:de:a8:ca:b8:b7:
                    89:2a:4a:d2:1b:3c:4f:b0:24:3d:14:93:92:a8:44:
                    b9:9d:38:c6:20:3f:09:41:cf:52:74:09:24:f0:d3:
                    58:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5E:CB:4B:AB:6E:48:45:28:2B:15:70:AA:B0:5F:32:59:4D:A9:30
            X509v3 Authority Key Identifier:
                keyid:15:C6:17:7D:3D:DC:81:5D:F7:E1:22:05:F8:B6:82:AA:F4:B7:19:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcYXfT3cgV334SIF-LaCqvS3GTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:28:5b:e0:d7:0f:86:55:a6:1a:48:e2:3f:f3:a9:f0:b9:f9:
         29:e2:1e:7f:05:5d:c1:4f:f5:e3:f0:95:5f:9d:3a:19:b0:b8:
         8f:e0:fc:8b:81:4f:0b:d8:fa:93:32:ee:d0:21:7b:82:92:ac:
         00:b2:e3:d7:27:c4:ee:5b:2a:09:66:a3:e1:90:b8:b6:d1:ef:
         d2:5f:91:be:d4:7c:c6:d6:20:fb:6d:9b:d2:c6:06:a5:c2:c8:
         72:73:d9:18:c3:f3:65:b5:29:86:d8:bd:42:c2:08:ea:e8:b8:
         38:dd:90:2a:9c:bf:4c:94:a8:1b:b9:eb:3f:a6:3c:82:14:2d:
         77:16:a9:12:4e:89:b8:ba:93:a1:29:3a:72:f4:40:4e:b3:50:
         c0:b9:35:a4:7a:d6:e9:a8:ca:e8:5d:76:71:26:f4:4e:f7:f7:
         37:24:96:81:36:95:89:7d:eb:88:c0:f3:af:fa:21:1e:9c:56:
         30:00:c4:7a:96:36:2c:83:97:d1:38:aa:bb:92:ca:ed:88:83:
         12:0c:6e:70:17:86:96:cd:f3:bf:74:09:13:06:19:a0:f0:f2:
         18:c0:8d:89:08:36:99:34:70:e2:2e:25:c4:8f:98:c0:63:7a:
         e1:4e:a3:d0:2c:a9:1f:34:cb:ac:f9:76:b3:c3:00:36:d2:3d:
         e9:d9:3d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:13:56 2026 by rpki-client