Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File:                     F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier:          +RE5N4IvF4ggznVPl2v29XRykEv8HfXMb+79+zWT2GM=
Subject key identifier:   C9:E1:8D:3C:E0:91:1B:FF:44:AF:3B:06:D5:95:E5:C9:39:EB:FB:85
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer:       /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial:       01A06DCB93E775032B618ACD328A134EE895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number:          1A3A
Signing time:             Fri 04 Sep 2026 19:00:53 +0000
Manifest this update:     Fri 04 Sep 2026 19:00:53 +0000
Manifest next update:     Sat 05 Sep 2026 19:00:53 +0000
Files and hashes:         1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: vKDZ+PRiOx8iis4tWLDegcvnVGcRZ+2dDGoYNgyXIZg=)
                          2: HNvn93VZrqPUOzKw1H1YD2pyedA.roa (hash: a/aHC9NlvJNBqxvVRL9BkgXA6OzhMYDmNsk13btgq+A=)
                          3: RyTo54Gn4GlIatASiJIGEZImFMs.roa (hash: f8+0VDhHPJqJ9ImqYRQ61bWQ1EOJmhQHqA1aWAVq45E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:cb:93:e7:75:03:2b:61:8a:cd:32:8a:13:4e:e8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
        Validity
            Not Before: Sep  4 19:00:53 2026 GMT
            Not After : Sep  5 19:00:53 2026 GMT
        Subject: CN=c9e18d3ce0911bff44af3b06d595e5c939ebfb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cb:35:be:1f:46:2d:8f:e4:2c:6e:0e:1c:30:
                    77:25:ee:bf:22:62:bd:00:e7:b3:82:21:2b:4b:20:
                    bd:26:d3:d9:76:08:da:8a:f5:d8:42:48:d0:29:b1:
                    f9:1a:b6:14:20:57:95:42:ea:31:56:0d:25:9d:bb:
                    5d:de:4f:ff:b5:21:e2:f3:35:6e:e2:79:33:eb:2b:
                    14:d0:4b:9c:0e:34:c0:95:82:d3:8b:a2:3c:a3:13:
                    02:15:5a:b5:cb:56:ba:e3:5e:25:fa:20:e3:15:42:
                    30:e2:65:e7:37:5f:b7:99:2d:88:7d:a4:d9:0e:ce:
                    bf:63:3f:90:14:5a:1a:97:24:0a:fc:21:fd:67:34:
                    e0:cb:45:63:e3:ed:83:da:50:51:ef:71:58:41:3f:
                    9c:64:cb:ba:57:7f:ef:1a:41:a3:5b:9e:cc:07:54:
                    10:a4:b3:1c:0c:f0:fd:93:19:fa:ca:08:02:13:76:
                    2e:c6:4d:4c:63:a4:d7:b3:17:2b:3e:b9:bd:bc:2d:
                    b9:5b:f9:d0:b4:a6:f7:c1:89:d3:24:49:59:e1:fb:
                    6a:85:fc:71:c0:af:2c:fa:e8:59:ea:4b:a0:67:75:
                    8b:8f:05:b6:23:ef:5f:32:79:99:f2:c4:f3:da:26:
                    4c:44:a8:dc:69:2c:31:de:ce:fd:b7:36:b3:63:88:
                    c7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E1:8D:3C:E0:91:1B:FF:44:AF:3B:06:D5:95:E5:C9:39:EB:FB:85
            X509v3 Authority Key Identifier:
                keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:2a:a7:0b:8e:8f:24:61:e4:55:64:e8:26:30:27:9a:08:a4:
         d3:fe:2d:f1:f2:95:9b:e6:6f:99:1f:06:89:f9:b9:9f:5e:7f:
         f1:26:99:f2:cd:12:6b:2a:8a:7f:d3:4a:e9:d0:a0:0e:aa:fb:
         1b:d0:34:f1:7a:5f:70:58:8e:3b:18:8c:08:c4:76:da:09:b5:
         e7:a2:d9:a2:62:d9:fe:13:59:3c:98:53:d9:8d:25:8f:14:d8:
         7d:0f:b8:a5:82:61:31:f9:1a:98:b7:a5:12:be:d1:29:8d:7f:
         cc:08:f3:04:e5:3f:a5:8e:a0:26:bd:35:1f:bb:29:23:9c:12:
         95:95:d3:1e:5b:3e:b1:f2:bf:f7:2c:77:06:88:fc:41:4a:ff:
         5c:5d:ea:e0:df:41:4a:95:da:ae:f2:48:a0:f8:30:aa:20:6e:
         1f:84:10:be:04:e5:97:fc:2b:8b:b5:7b:7a:45:89:82:ba:fa:
         47:1a:d2:83:f6:a7:17:44:a6:5a:bf:49:7c:33:1b:23:fa:f5:
         7b:3f:4e:b0:ef:26:da:2e:b5:39:26:b2:4f:16:06:d6:8a:e4:
         90:16:be:d5:c4:2e:4e:9f:9f:33:c3:a8:1d:36:ee:b5:0f:d6:
         b0:e7:2d:e7:c2:1a:9f:65:6e:21:df:f2:63:d5:ba:08:27:9d:
         25:8c:db:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:43:41 2026 by rpki-client