Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
File:                     _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft (raw, json)
Hash identifier:          e2b6y0IqvFCDMtkExcsMIGa+aqYLCVwMQYi8AV/0J98=
Subject key identifier:   98:C8:72:15:4C:5A:28:DB:4C:06:62:38:ED:4E:D1:81:AE:D8:3A:B7
Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
Certificate issuer:       /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Certificate serial:       01A03D4D9C7A1073E95669BF9991F69ED81A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
Manifest number:          0742
Signing time:             Wed 26 Aug 2026 09:01:31 +0000
Manifest this update:     Wed 26 Aug 2026 09:01:31 +0000
Manifest next update:     Thu 27 Aug 2026 09:01:31 +0000
Files and hashes:         1: PK0CRUNKPydp1F9sRstNCMcVwis.roa (hash: n+n/sPwhuGlwhn4Gy6p0W0/UiHGQEt+/uBb6OJWsN1E=)
                          2: Z31MissZ7yHyJsx_dTK4RFd8-rY.asa (hash: nIwJfm6qlYIi6/sdM1uVq+e1tR35aqGsM85M/JuSXJc=)
                          3: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl (hash: 7Vj1CRzdp/q+8U5E/F7ElY+IwKQLu+4sR0FfvuRFKFM=)
                          4: i0sj2OlRMgevoHUz4ryR_Oma4I4.asa (hash: adtzyb9u4Fbn/ZPKqrDMufHnnCkRcWugW8Vy0F2nkqI=)
                          5: l3v9mZTPVTxPe5Kh1-GOSK6w8Zw.roa (hash: 51EMra3zFohpnXCIeOY4jhtjtvE+0ZKY/ys2ekben48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 09:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3d:4d:9c:7a:10:73:e9:56:69:bf:99:91:f6:9e:d8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
        Validity
            Not Before: Aug 26 09:01:31 2026 GMT
            Not After : Aug 27 09:01:31 2026 GMT
        Subject: CN=98c872154c5a28db4c066238ed4ed181aed83ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:43:fb:75:46:56:a4:30:ab:45:50:14:2b:
                    81:b8:62:a3:3a:2a:b4:ba:99:a5:c8:9c:9a:4b:29:
                    9b:34:cb:63:d2:6c:99:26:dd:84:bc:b2:aa:93:74:
                    c6:b8:54:d8:3b:76:a3:60:57:97:ce:8e:1e:53:28:
                    72:f9:1f:0d:00:2a:65:f5:91:e9:0e:8c:c7:07:d6:
                    74:5d:c3:69:8b:a0:61:24:03:d1:2d:0f:83:42:f7:
                    26:b3:42:bc:99:7e:73:51:7a:3d:57:49:15:58:08:
                    39:b8:f0:d3:69:4c:58:b0:d1:ef:c3:00:26:fa:68:
                    97:5f:3e:37:e3:ff:ae:2e:6b:da:a8:13:92:d5:2b:
                    c8:27:3c:74:af:d5:aa:3e:cd:a0:0c:8e:f4:77:bb:
                    0e:aa:c3:53:83:a2:a2:ff:4a:99:fb:52:e3:fc:59:
                    84:ac:5f:47:35:98:dc:cd:66:d4:ea:f4:00:11:9b:
                    8c:b8:75:57:f6:69:e7:06:5d:30:9c:e6:62:49:57:
                    a9:0a:ff:d6:1f:e9:0b:a7:5b:77:f5:00:8c:c2:d5:
                    49:c6:64:48:4b:e2:55:25:37:b7:44:24:c1:e1:38:
                    07:d1:51:be:04:1a:16:18:8c:a9:2b:dc:c7:60:41:
                    f0:f0:a0:8a:01:0e:4f:ed:4a:9c:1f:60:28:e7:de:
                    e2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C8:72:15:4C:5A:28:DB:4C:06:62:38:ED:4E:D1:81:AE:D8:3A:B7
            X509v3 Authority Key Identifier:
                keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:67:30:d6:20:e4:4d:37:9c:31:25:ee:ab:d1:60:86:93:66:
         a9:ec:04:02:e0:7d:1c:2a:fc:76:cd:f1:a8:9f:c4:9a:2f:18:
         e2:85:eb:d0:98:d6:05:76:55:9c:ce:c8:80:26:62:e9:91:cb:
         91:db:76:c4:88:60:f4:7e:99:af:67:0b:a5:19:6b:97:96:e3:
         bf:66:34:e4:f3:81:7c:3d:ed:5e:d6:bc:54:2b:e2:47:d7:24:
         bf:03:79:5f:49:ea:46:5e:7e:62:78:96:85:90:15:64:13:ef:
         8f:75:b3:df:5e:03:d8:f1:99:82:c2:90:d0:9c:86:df:13:75:
         f0:af:45:ba:f8:78:90:8f:cb:35:39:ed:04:72:71:c7:54:f5:
         e4:03:62:7d:4d:61:ec:8c:08:95:19:ee:54:01:9a:43:66:52:
         8d:bc:04:bf:23:d7:b2:28:eb:70:0f:0e:f9:8e:53:be:43:71:
         1a:b7:34:2b:a4:46:c4:ae:08:a8:56:13:46:b3:67:ca:71:12:
         d6:62:0b:c2:e0:eb:0b:50:6d:f2:c5:23:78:05:02:cf:cc:55:
         0b:06:3a:91:39:9f:9f:ad:03:ce:09:e2:35:72:86:42:80:e8:
         01:07:31:68:0a:8b:6a:10:a3:9e:0e:09:9d:d6:dc:88:a6:af:
         74:8e:47:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 15:13:47 2026 by rpki-client