Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
File:                     v5gt73eibXzBlHOzpAZNzFIX5HE.mft (raw, json)
Hash identifier:          6XFXRz3euUVuRf5Pu+Eds8H3SD8IVUwu2xAXGofJ2Sg=
Subject key identifier:   75:79:22:6E:44:A6:D5:B2:7F:86:EE:49:BC:6B:D6:24:86:4E:E4:B8
Authority key identifier: BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71
Certificate issuer:       /CN=bf982def77a26d7cc19473b3a4064dcc5217e471
Certificate serial:       01A0D5A6BD562D174A5A6A23EB79CCA24B46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
Manifest number:          1A6F
Signing time:             Thu 24 Sep 2026 23:01:09 +0000
Manifest this update:     Thu 24 Sep 2026 23:01:09 +0000
Manifest next update:     Fri 25 Sep 2026 23:01:09 +0000
Files and hashes:         1: MavdUwtL9hXRYTucFdVXRHkrrIo.roa (hash: yraXNEacytf4HbmMAZg6e64667WxeEaDmWzKdMpCXxk=)
                          2: v5gt73eibXzBlHOzpAZNzFIX5HE.crl (hash: gDwSdfKid+tJmw1XurkC5fw8S/2xkZoe0TxUizZDdYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:a6:bd:56:2d:17:4a:5a:6a:23:eb:79:cc:a2:4b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf982def77a26d7cc19473b3a4064dcc5217e471
        Validity
            Not Before: Sep 24 23:01:09 2026 GMT
            Not After : Sep 25 23:01:09 2026 GMT
        Subject: CN=7579226e44a6d5b27f86ee49bc6bd624864ee4b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2f:bc:68:47:23:8e:4a:6f:bf:d2:90:2f:59:
                    e1:01:0e:83:8d:fd:0f:8b:b6:65:58:14:21:f1:11:
                    74:63:94:fb:5f:a8:83:34:ae:71:7f:78:2d:43:b9:
                    17:95:ad:32:45:33:da:2b:3a:fa:f1:b0:b7:eb:6b:
                    ae:65:5b:96:c7:6f:17:e7:cc:de:89:bc:eb:3e:f8:
                    94:af:f1:b2:b3:34:34:d3:dd:ac:3d:19:b7:3b:1f:
                    4e:03:c7:80:e0:13:ca:85:e1:2d:3a:13:05:fd:3c:
                    a4:03:c6:2e:07:2e:3f:8b:9f:15:74:15:a4:16:3b:
                    b9:e1:98:6e:f4:63:75:99:85:f6:a4:1d:81:07:47:
                    25:ec:e3:67:6a:04:fd:66:2a:5c:90:7c:cf:1f:9a:
                    92:6c:ca:a0:0b:a3:ad:df:ea:70:ae:c0:a0:f9:31:
                    b3:19:e7:36:fb:0f:68:6c:83:e2:c3:4e:90:a2:0f:
                    3a:fc:32:e7:95:65:6e:57:dc:63:2c:9e:b1:47:ab:
                    b2:3d:fc:c5:16:b3:f7:b4:99:4e:17:e8:d6:51:c2:
                    15:74:65:44:0a:19:d7:24:33:bd:58:34:fc:91:dc:
                    b6:08:2b:9b:f2:0f:aa:dc:cf:38:10:20:8e:05:22:
                    be:d5:ae:89:67:d1:74:a9:36:b2:b2:b9:d1:bb:7c:
                    17:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:79:22:6E:44:A6:D5:B2:7F:86:EE:49:BC:6B:D6:24:86:4E:E4:B8
            X509v3 Authority Key Identifier:
                keyid:BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:64:99:82:18:95:99:45:53:58:63:59:3f:a4:0a:89:ab:bc:
         39:4f:e5:06:b1:9b:5b:ae:35:7c:df:74:0e:bb:2d:f9:c8:7d:
         7b:f8:0a:92:ff:bb:78:38:a4:e2:a5:0f:c6:41:17:69:4f:59:
         fa:e3:04:ae:5f:72:57:e1:4a:93:fe:01:78:7a:0e:a0:b2:f9:
         3d:f5:74:9c:3b:33:3a:db:13:c8:4f:6f:bf:8e:84:11:7f:2a:
         af:05:ce:5a:25:b6:75:93:0b:38:df:b7:05:fa:32:fa:64:0a:
         91:67:41:51:8b:33:12:29:de:61:0f:aa:1f:74:87:14:bf:c6:
         40:00:ed:88:5e:ae:f0:58:a5:4d:0a:b6:7c:b9:e4:77:b1:e6:
         a0:b7:5e:3c:04:b6:ae:b6:4d:93:f5:e2:99:e5:cd:52:12:2b:
         7c:dc:31:27:c3:b5:3f:d7:94:e5:58:48:ca:1a:6b:35:fe:fa:
         80:24:4c:a9:7d:d1:1a:a0:66:98:fc:bb:d9:45:9a:32:4a:59:
         91:a5:32:16:17:e3:8f:70:71:6c:e3:b6:fc:1e:57:f7:b0:b4:
         76:34:2e:4a:81:0c:92:00:46:d4:e3:e5:fd:f3:1d:89:18:87:
         27:5c:cf:fd:00:dd:31:24:9a:c1:19:de:75:3e:65:79:41:90:
         41:0a:9b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:13:10 2026 by rpki-client