Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
File:                     FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft (raw, json)
Hash identifier:          JwEzk57pJUTNI5BJFV0L1/L/ZerG27gekBpW6jkNgr8=
Subject key identifier:   8F:17:33:85:A5:5F:F7:83:71:5D:6B:7F:8C:F8:52:4E:7B:74:99:1A
Authority key identifier: 16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16
Certificate issuer:       /CN=16992f451372c7a20b624bcfaa3d9753926c5c16
Certificate serial:       01A08C0CB1FE3573CD9BDD374CA2673D4895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
Manifest number:          0260
Signing time:             Thu 10 Sep 2026 16:00:37 +0000
Manifest this update:     Thu 10 Sep 2026 16:00:37 +0000
Manifest next update:     Fri 11 Sep 2026 16:00:37 +0000
Files and hashes:         1: EYbnkdsGi0cWbkFU3UiOzuHllwM.roa (hash: FBbq4acRcJHICFhiug0/npiuCo5RqLFSogoLF21zVfA=)
                          2: FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl (hash: ++mVwKwact1Aj0yoxIjMsBU5DjY+xrm2Y9TeIjyZmss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0c:b1:fe:35:73:cd:9b:dd:37:4c:a2:67:3d:48:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16992f451372c7a20b624bcfaa3d9753926c5c16
        Validity
            Not Before: Sep 10 16:00:37 2026 GMT
            Not After : Sep 11 16:00:37 2026 GMT
        Subject: CN=8f173385a55ff783715d6b7f8cf8524e7b74991a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:07:cf:eb:c9:cf:fc:d0:ed:cf:b8:28:f2:38:
                    1a:b6:f0:ba:a7:06:62:b5:03:b4:97:36:21:6a:bd:
                    54:10:09:df:ea:ee:8d:dc:63:c6:d0:40:c9:7a:5d:
                    a0:a6:d2:19:65:a5:6a:1e:07:e3:5a:14:db:09:1a:
                    57:f8:1a:b2:92:75:64:0b:d6:e6:1a:a9:1c:27:b2:
                    c6:08:ea:67:31:5b:7c:db:9b:4b:dd:c2:f4:27:15:
                    70:f9:4a:d4:8a:50:a9:1c:a8:4e:4e:d2:49:db:2b:
                    6c:c6:28:4d:fa:6c:fb:46:89:dd:d1:88:2b:88:46:
                    a8:fd:b2:c8:3e:7b:92:db:72:77:df:07:07:75:7a:
                    f4:da:f9:53:b4:d7:f9:16:8e:44:5e:30:bd:9e:6a:
                    cd:5d:2e:f6:0e:ad:24:8b:ee:7a:96:2e:96:9c:7f:
                    21:62:ea:fe:5e:59:8e:91:52:31:37:df:9d:3f:62:
                    9b:1e:e3:1d:82:a5:db:63:20:0f:43:67:16:c9:dc:
                    e0:10:41:9a:71:67:1b:48:b6:39:f1:da:eb:eb:2f:
                    09:7c:a3:f4:d3:07:1b:05:ae:00:4d:52:7d:2a:0d:
                    75:be:8c:b0:ef:5a:a1:e3:02:50:b3:46:28:cc:d2:
                    9e:18:4b:ec:ab:67:78:12:47:d6:44:b7:fa:4f:97:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:17:33:85:A5:5F:F7:83:71:5D:6B:7F:8C:F8:52:4E:7B:74:99:1A
            X509v3 Authority Key Identifier:
                keyid:16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a7:52:05:72:5f:a7:b5:9e:ca:92:60:7a:96:87:88:f0:91:
         06:91:13:34:32:da:bf:78:4f:04:40:6b:90:a5:59:7b:41:ae:
         8d:9f:8f:54:11:96:e9:ad:eb:6c:8e:24:6b:34:03:fb:f3:36:
         12:4e:ba:95:ca:0b:21:ad:9e:f9:94:eb:fe:49:c9:64:5b:a2:
         1e:dd:12:47:55:07:e1:25:ff:a0:eb:96:f4:c6:d5:66:3f:9d:
         0f:7a:61:61:b9:6a:48:e4:54:80:a5:02:81:fb:c7:0b:2e:db:
         37:99:e1:57:ae:67:4d:ad:78:32:a0:8d:26:73:fa:e1:90:d2:
         8c:2e:71:6a:92:ab:74:e1:b7:f4:b4:25:e4:c3:45:97:75:0f:
         54:05:e8:b7:da:dc:b8:c5:e1:d1:11:de:62:c8:39:20:c4:55:
         a6:19:a1:11:1b:40:a1:60:5d:fd:bd:3c:4c:6f:c6:8e:ff:65:
         50:6c:f2:bc:04:50:16:60:33:3c:ac:58:86:21:95:04:35:3e:
         10:a9:6a:40:32:a8:8c:0e:bb:21:9e:27:d4:fd:34:bd:a3:c1:
         ef:0a:39:90:68:a7:41:99:bb:0d:3d:36:d6:a1:7e:36:4f:5d:
         e3:e5:7d:51:29:96:55:36:99:5a:f6:29:41:a4:f7:b8:6f:2b:
         30:68:01:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:38:34 2026 by rpki-client