Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File:                     invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier:          O1GCjcA4FAkZIO4siTuyKyakDgCH2xpLJSi4q2EY65s=
Subject key identifier:   05:C0:4E:E6:01:82:93:D9:BD:AA:C6:F9:D1:78:91:3F:F4:69:31:DB
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer:       /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial:       01A08AFA93F6526B9E56AD6988DF46A96B3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number:          07D9
Signing time:             Thu 10 Sep 2026 11:01:12 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:12 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:12 +0000
Files and hashes:         1: 13bg8sr321aaC-jFOX86O1_lBzU.roa (hash: bU7Oi7TbB7FOIxER/ptIdZra1cEI8qAD1Nz/78F0Vtg=)
                          2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: eClQvc9ZokcuTy36zH2nXdvPm9dr5uGXmr/5Ny9w27g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:93:f6:52:6b:9e:56:ad:69:88:df:46:a9:6b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
        Validity
            Not Before: Sep 10 11:01:12 2026 GMT
            Not After : Sep 11 11:01:12 2026 GMT
        Subject: CN=05c04ee6018293d9bdaac6f9d178913ff46931db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f1:72:04:ca:42:5b:3c:52:ff:d3:d8:05:d9:
                    61:da:16:ce:a0:86:07:b6:0f:52:d5:5c:f3:5b:f5:
                    92:d1:54:ba:00:90:b4:b4:65:3c:2c:9c:31:44:50:
                    1f:50:ae:7b:50:11:31:40:7a:d2:5d:b9:ac:80:6d:
                    bb:69:69:5c:7e:ff:8d:5c:5e:3e:e9:35:a8:20:cc:
                    5d:f9:56:03:7d:52:0a:f3:9d:4c:db:33:b0:df:12:
                    93:ac:cc:80:a7:18:f3:50:da:cf:26:7c:51:89:c9:
                    0f:15:79:3f:a1:b7:2a:15:be:94:57:1a:51:c0:be:
                    c0:fd:ec:cc:52:b2:98:08:84:0f:73:94:80:c8:e2:
                    39:27:b1:b9:c2:c8:f6:46:b9:94:ea:d0:be:41:6f:
                    97:83:fd:bd:83:17:5d:d2:31:bb:34:3a:82:c5:c6:
                    b4:4f:0f:26:7a:44:bf:b4:72:bb:0e:12:c2:30:09:
                    d6:9a:4d:8f:c6:6e:ee:36:ec:ac:42:2d:6b:40:41:
                    65:1a:26:31:2d:a7:b2:4b:33:98:71:bd:0e:62:47:
                    f2:24:48:51:46:15:d5:ba:fb:fb:f4:c3:bf:a4:c8:
                    39:04:82:ed:17:bf:07:61:6a:c2:31:9d:94:71:54:
                    23:72:54:ba:a0:00:26:9d:fd:74:2b:fd:a3:ae:0f:
                    d6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C0:4E:E6:01:82:93:D9:BD:AA:C6:F9:D1:78:91:3F:F4:69:31:DB
            X509v3 Authority Key Identifier:
                keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7f:89:84:2f:95:1c:ac:09:1f:58:3e:63:b0:5a:ab:a8:04:
         5f:02:5e:0d:ac:e5:31:52:9b:60:31:60:e0:a1:09:98:b9:1c:
         37:5e:3f:a7:92:be:42:f4:f9:b7:69:bd:2b:28:3b:5f:71:4e:
         ff:74:a3:f3:61:23:dd:6b:a8:50:a7:aa:36:6a:23:d5:91:60:
         9e:e1:44:a5:47:ad:75:51:04:be:5e:6e:71:c9:14:e5:2e:6b:
         f1:0a:64:73:a2:87:88:79:7d:97:ec:9b:8d:e2:7a:8b:47:50:
         e4:1e:7b:b7:bb:62:83:6c:2e:ee:06:6e:97:0b:08:c6:d1:b7:
         c2:bd:4b:70:ab:94:12:8d:2b:e7:d6:6e:e1:b6:f4:3a:89:2a:
         ca:1e:05:24:da:bd:7c:95:c0:06:37:37:9e:26:fa:cb:83:32:
         13:91:a3:80:10:07:5b:27:e0:44:ec:11:89:dc:98:98:a6:46:
         a8:45:5f:48:4f:7c:7a:50:0b:89:a0:0b:23:1c:c5:96:0f:cd:
         47:f0:13:ba:0b:b9:1d:47:b0:81:cd:17:4a:f4:7b:35:79:20:
         b2:9f:22:ae:6d:4e:95:c9:55:1b:92:72:ed:d0:92:c4:5d:54:
         70:6b:a6:28:a5:31:fc:e7:68:3b:f1:79:b5:66:7c:fe:cf:36:
         df:f3:17:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:17:24 2026 by rpki-client