Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File:                     PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier:          qtim9AIyTSBiTYSvs8Bx4ZwOH9jeboRrmptUmUTDTF4=
Subject key identifier:   46:28:08:57:90:BF:AA:74:59:2A:F7:86:F0:24:1F:0F:3D:26:F4:68
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer:       /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial:       01A0867899411F56D7976C53D4968C9B85A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number:          1486
Signing time:             Wed 09 Sep 2026 14:00:45 +0000
Manifest this update:     Wed 09 Sep 2026 14:00:45 +0000
Manifest next update:     Thu 10 Sep 2026 14:00:45 +0000
Files and hashes:         1: Owu-o7JvEybmXtpQNjtKXjhH9ug.roa (hash: 89sGeUxvhpVypElkHwSDvmrZnRJHBtaKeL9yMz7nC6U=)
                          2: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: FKtJuNeMqLIUVaZmydy8gYsjspARf0OYH24qWci9ZOI=)
                          3: _b_jh41DtvYlyJbVt2vmUxy_03c.roa (hash: Y4f7kKKKelGhsZykUm6x2Et6p6M+4yMQNJ8fkfC21Wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 14:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:86:78:99:41:1f:56:d7:97:6c:53:d4:96:8c:9b:85:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
        Validity
            Not Before: Sep  9 14:00:45 2026 GMT
            Not After : Sep 10 14:00:45 2026 GMT
        Subject: CN=4628085790bfaa74592af786f0241f0f3d26f468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:16:65:b2:ac:f4:52:9b:0a:b3:03:bf:c4:
                    50:4d:aa:d2:61:63:1a:91:8e:13:36:c3:81:e7:e9:
                    3c:db:1a:07:d0:3d:f1:25:38:02:c3:46:11:5f:2c:
                    8a:16:2b:f8:ff:10:db:0a:6f:47:39:82:cf:dc:d6:
                    ec:c8:35:a0:fd:c0:41:40:8f:5d:38:31:63:aa:7a:
                    79:71:3e:06:b4:00:9f:3c:fb:a4:88:7a:71:e8:bc:
                    93:0e:c8:2c:30:7e:20:e2:67:73:09:33:be:31:79:
                    62:70:db:68:05:ba:d6:70:e3:e9:57:59:e0:db:35:
                    25:45:dc:a3:b5:bb:4a:cd:2f:a0:9d:08:16:28:bd:
                    ac:ad:d2:2a:9b:ab:9c:eb:38:9c:46:72:8f:fe:f4:
                    62:7c:84:71:5a:0b:07:1f:08:33:06:56:95:eb:ec:
                    c8:ee:40:06:47:a1:56:48:ea:93:5a:90:91:cc:90:
                    f3:32:79:ff:41:15:70:fa:d7:ce:8d:fe:d9:66:2e:
                    3b:3b:7f:c5:48:15:df:15:c3:92:1a:9c:c4:87:c1:
                    e6:5b:c0:f6:5b:eb:82:15:5a:ce:12:14:ad:02:42:
                    97:7f:43:15:ac:de:0f:02:96:e8:9f:66:0d:9f:ae:
                    7f:73:1e:f6:b6:c6:28:5c:55:05:c4:ce:46:c2:63:
                    e8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:28:08:57:90:BF:AA:74:59:2A:F7:86:F0:24:1F:0F:3D:26:F4:68
            X509v3 Authority Key Identifier:
                keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ea:77:10:94:9d:0a:b6:51:da:c5:90:1e:52:bf:34:e2:d6:
         b7:9c:6f:d3:49:5d:6d:23:4d:11:52:96:54:58:d2:21:88:72:
         9b:7c:b5:d1:0d:08:dc:ce:c9:04:1d:a5:ee:a4:7e:aa:8f:85:
         d1:45:09:75:0a:cd:95:07:59:5a:f2:73:e6:cc:70:1c:28:e5:
         f1:74:fe:85:a7:dc:1b:39:da:99:2e:b6:c9:42:72:e5:d9:94:
         b6:01:c6:41:c0:61:7b:f9:b8:05:e2:13:0b:7d:03:ca:5c:4b:
         3a:f5:33:2f:dc:8d:84:d2:23:f9:3e:ab:07:fa:21:92:a9:8c:
         7b:44:21:dd:8a:e2:57:b0:55:ae:10:45:6e:1d:b3:14:ae:ed:
         4e:48:df:77:8c:b8:aa:f5:d3:7a:cd:0b:e4:1b:d0:b6:fc:bb:
         a9:fc:ca:30:e4:f3:cd:77:d2:f0:31:f0:cd:85:72:34:35:d4:
         09:2e:0a:86:d2:06:bd:59:16:bc:03:35:94:f2:dd:3f:f9:d8:
         4d:93:fe:24:50:dd:dd:15:5e:dd:17:0d:06:49:09:56:18:2c:
         54:75:21:f3:9a:aa:d1:ff:42:65:66:89:ba:83:e5:48:35:19:
         03:6c:5b:70:21:47:66:54:03:ea:ea:12:ca:83:56:ff:0f:19:
         82:6d:f8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 17:22:38 2026 by rpki-client