Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File:                     acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier:          6YmN4mqqZxq2SrBGgGbCPibFWhtDb2LYjH/9E4O9Yz0=
Subject key identifier:   46:5B:D2:9D:DD:D5:0E:EF:45:C1:0F:7F:BB:80:72:13:A2:A8:24:15
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer:       /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial:       01A06EA75F00058FC0A0659B408A82AA4FE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number:          1A3C
Signing time:             Fri 04 Sep 2026 23:00:57 +0000
Manifest this update:     Fri 04 Sep 2026 23:00:57 +0000
Manifest next update:     Sat 05 Sep 2026 23:00:57 +0000
Files and hashes:         1: 8yAZGDwl6Q5NdW6_5msXiHDy6v0.roa (hash: hTQqJteeaF5ZjxlYrkjPbZjafNKCCRD7RpYTaq51+Q4=)
                          2: WHR6l1Q5Ar0v18AKFt90RxwkrKo.roa (hash: WNLKDaJxOe6Uz6jgAOWxAF+kTRgHf8gZjh0RxUla/9E=)
                          3: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: 4zGPGyLl9JaZrIZ8q2lGDPicoCkejYCXNx8EQ0n8xdM=)
                          4: gKFSZ12cdmISn4h5sbRx_f8ayV0.roa (hash: EtpOpvk7x1JOKFPhiQBQKjgaBtJnr2gJBSccIdWGROA=)
                          5: yNU-ToeAL7NXOOz9_-FlFzYfpBA.roa (hash: TjYy4/mDVjYziy+CeletARV0PQ6H5KzIho/639xxwbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a7:5f:00:05:8f:c0:a0:65:9b:40:8a:82:aa:4f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
        Validity
            Not Before: Sep  4 23:00:57 2026 GMT
            Not After : Sep  5 23:00:57 2026 GMT
        Subject: CN=465bd29dddd50eef45c10f7fbb807213a2a82415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0d:4b:21:4d:2d:f6:0d:34:0f:47:eb:6c:bc:
                    fa:f0:90:c3:7e:d3:21:d9:98:fa:c1:7c:26:55:92:
                    7c:02:02:ca:08:bf:cb:e5:bf:17:0f:e3:3e:cb:df:
                    f5:ee:77:68:03:91:84:11:78:22:a1:b2:9a:85:8e:
                    61:e3:ce:b1:6b:e4:e2:a7:56:03:e8:1f:85:55:85:
                    18:96:19:3a:39:98:e0:6e:bc:8b:84:ce:0b:21:e1:
                    85:df:17:03:9b:9a:a3:74:7d:c1:38:19:96:9c:dc:
                    c7:35:c0:74:a0:9a:3c:87:c0:22:b8:f4:3b:a6:b3:
                    f3:bc:b4:a2:e3:dd:74:5c:e8:93:3b:3e:ad:72:b2:
                    dd:4f:96:fd:ea:f2:4d:64:c0:8e:a3:a7:a9:7f:0e:
                    a1:d1:82:82:b9:cc:71:57:55:9f:69:2a:28:78:4b:
                    5f:cc:74:e2:f1:05:ea:c2:87:87:16:1c:00:e0:d1:
                    0c:de:7f:d5:93:d6:65:6f:5c:36:8a:5d:e0:69:e2:
                    86:d6:b8:76:63:78:ff:d0:d5:2d:92:27:72:fb:56:
                    97:29:ef:e8:50:55:ee:fb:21:f4:1c:21:94:55:ef:
                    d8:b2:54:79:a4:ed:3c:19:8c:03:7f:dc:42:f9:08:
                    7a:1a:91:02:82:ba:17:69:12:26:66:f4:27:df:8b:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5B:D2:9D:DD:D5:0E:EF:45:C1:0F:7F:BB:80:72:13:A2:A8:24:15
            X509v3 Authority Key Identifier:
                keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d3:bc:fb:1a:09:f3:e3:34:89:4d:c5:48:80:60:1b:c8:c7:
         ce:8c:b5:ff:61:3d:45:f2:33:bc:84:f9:50:4d:5e:d9:f5:51:
         43:1f:c2:8b:51:be:35:31:51:5c:a9:cc:d1:f7:35:f9:8e:c8:
         44:8f:4b:b8:df:46:8c:d9:52:77:1a:15:40:2a:b8:47:d4:b0:
         2c:35:5c:5c:42:06:17:a2:b2:00:5a:e4:37:94:e8:4a:bf:ac:
         cc:48:0a:00:95:44:52:70:12:ac:0b:12:04:ee:84:8a:1b:64:
         81:b1:99:58:f1:6f:cd:9a:a0:69:89:74:ad:4d:06:0c:dd:26:
         2d:8b:a8:f1:c8:6c:bf:02:ff:72:f3:ca:90:0c:f1:fc:0e:28:
         c8:04:c0:2a:59:ec:51:e4:35:b8:10:dd:94:46:4f:a6:54:16:
         11:9f:0f:50:38:aa:d9:12:da:2d:27:c2:5c:45:36:64:23:5e:
         7c:36:97:b5:9b:88:9d:30:62:df:50:04:59:4b:99:d6:22:1b:
         40:b1:82:31:a8:a7:40:63:4a:30:16:4b:59:61:08:87:66:cd:
         e6:ed:a2:f3:d1:ee:3d:99:de:d5:aa:ee:f5:99:59:de:2a:b2:
         93:ce:6f:f4:38:9f:e9:bf:69:c8:b1:43:d4:55:5b:4b:72:24:
         c0:ce:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:11:49 2026 by rpki-client