Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
File:                     fEn63vQJ71hdX0o1su85SbWZxUc.mft (raw, json)
Hash identifier:          Pja+widpUK5OFTEElN20fY4/x+1wwG9nabuLk+58SLI=
Subject key identifier:   F3:54:3F:D5:7F:4E:1E:5F:18:A8:CA:B2:3B:C1:88:E7:4B:66:68:EF
Authority key identifier: 7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47
Certificate issuer:       /CN=7c49fadef409ef585d5f4a35b2ef3949b599c547
Certificate serial:       01A089431C9DD79C7AE95A8994C5E78D3EB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
Manifest number:          019C
Signing time:             Thu 10 Sep 2026 03:01:11 +0000
Manifest this update:     Thu 10 Sep 2026 03:01:11 +0000
Manifest next update:     Fri 11 Sep 2026 03:01:11 +0000
Files and hashes:         1: Kfv8pSzvP6yGqpNKWB0u9MATNiE.asa (hash: K8Z32NZvPzbYmVaeeJNzMlZvkbrlXgcqv646vOrcs/Y=)
                          2: fEn63vQJ71hdX0o1su85SbWZxUc.crl (hash: DeShio+HIuwx+vUh5HkFg+6OeOzc9o6XxA6wB9mBzHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:43:1c:9d:d7:9c:7a:e9:5a:89:94:c5:e7:8d:3e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c49fadef409ef585d5f4a35b2ef3949b599c547
        Validity
            Not Before: Sep 10 03:01:11 2026 GMT
            Not After : Sep 11 03:01:11 2026 GMT
        Subject: CN=f3543fd57f4e1e5f18a8cab23bc188e74b6668ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:8f:56:18:20:26:34:08:35:4e:4b:ea:2d:
                    bb:38:b8:3d:11:62:0c:63:ce:12:13:75:e1:50:7f:
                    da:9b:b2:ca:2d:29:6e:0f:27:ff:75:7b:4b:48:89:
                    c5:0a:c4:d2:11:8d:ef:14:fa:37:91:c4:9d:9a:e0:
                    d8:81:6f:a1:53:86:db:7e:94:85:48:6f:f2:05:7a:
                    4a:4b:ba:86:ee:25:70:b5:36:e1:6b:c8:dc:a8:0c:
                    d3:da:76:11:78:ed:61:0f:c3:8c:4b:2f:e7:c2:de:
                    48:6e:67:0c:0a:04:4f:47:16:0a:b8:1a:2b:22:43:
                    23:51:45:b9:14:9a:47:83:27:45:e6:d9:89:77:0e:
                    86:7d:21:46:7f:88:ac:86:bf:54:88:ed:68:a6:61:
                    6a:c7:2f:75:98:ab:af:bc:89:e1:8a:c7:86:20:6c:
                    15:6c:21:aa:1a:ea:a7:17:35:15:84:cb:48:a7:ec:
                    6e:4d:d8:27:04:c7:1e:8b:29:e5:85:f4:2a:40:40:
                    62:59:09:d1:f9:01:cd:7e:88:1a:14:94:6d:3a:5e:
                    23:a8:cb:c3:c3:e2:10:bd:61:48:dc:8d:13:b6:35:
                    92:da:40:7e:6c:d9:81:14:b4:7e:89:9d:f9:44:85:
                    22:2c:2a:e0:fb:1e:92:b9:ba:a1:bd:dd:86:bc:ed:
                    39:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:54:3F:D5:7F:4E:1E:5F:18:A8:CA:B2:3B:C1:88:E7:4B:66:68:EF
            X509v3 Authority Key Identifier:
                keyid:7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:13:29:58:08:fa:f1:24:d1:b8:3b:1a:ce:b9:3d:e8:90:d7:
         6d:a3:cf:44:cd:26:bb:fa:db:3b:05:90:ca:18:a6:ef:ff:fb:
         b7:83:3e:07:46:33:4e:b5:91:13:ae:bb:ae:c2:c0:94:ba:50:
         b8:5e:a9:b2:0f:ad:42:0d:19:da:4d:37:27:ad:b6:93:0a:48:
         4f:94:23:82:16:eb:c0:e4:30:fc:b7:19:31:8d:31:76:ba:d5:
         7b:23:ea:d0:a7:24:65:10:5c:a8:29:0a:fc:78:06:85:6a:c6:
         a6:04:9c:4f:a7:4b:9a:19:a7:79:c3:d6:13:8b:07:bc:c0:62:
         f3:49:8b:6c:9e:b6:7d:bd:f3:57:e1:2c:91:a5:14:b3:01:35:
         af:0e:1a:58:69:cc:e7:99:b2:84:34:cf:97:30:9d:7f:53:dc:
         5f:9c:80:ff:f0:39:7c:1c:9f:40:08:70:4d:c6:1e:87:0c:e2:
         6a:f0:d3:03:09:19:a7:2e:1b:b0:ba:b5:99:af:74:e1:1c:6e:
         b3:b7:7c:85:bb:bc:07:35:09:5b:2a:98:9f:99:2e:36:44:97:
         d6:9d:ee:54:91:2e:aa:f9:0e:38:7f:64:57:52:bc:3a:58:2e:
         0f:d9:68:a4:f7:12:22:4e:81:22:71:5c:13:b4:16:12:db:be:
         69:d6:ed:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:56:00 2026 by rpki-client