Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File:                     l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier:          31x4KXdKvPrGsYW3BvGOb9xIK+NzyaQEnOmW+F4Wvzs=
Subject key identifier:   74:84:5B:84:36:BD:9C:2B:23:2F:83:18:02:50:75:EB:29:94:6F:04
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer:       /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial:       01A06E395BA954D88D24FAF18612C01834FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number:          17FA
Signing time:             Fri 04 Sep 2026 21:00:47 +0000
Manifest this update:     Fri 04 Sep 2026 21:00:47 +0000
Manifest next update:     Sat 05 Sep 2026 21:00:47 +0000
Files and hashes:         1: iTTifgK67L5ZMjUhnnWGGJHPaoc.roa (hash: dCrZAwxoBbmIZG/t8Yw3CUG+PJaqExvpsXDtPA11ABs=)
                          2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: QqOgPqnB5quVQqsBqRrEny74rJB5mjKe+ZGnpr08zSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:5b:a9:54:d8:8d:24:fa:f1:86:12:c0:18:34:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
        Validity
            Not Before: Sep  4 21:00:47 2026 GMT
            Not After : Sep  5 21:00:47 2026 GMT
        Subject: CN=74845b8436bd9c2b232f8318025075eb29946f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:e3:d0:f7:63:d8:03:4f:4b:39:e8:68:64:
                    e8:ed:10:b8:55:77:af:7f:cd:04:91:33:47:31:e1:
                    83:ef:cf:58:db:98:de:51:14:7e:0d:1f:dd:a0:65:
                    75:fb:2a:a8:80:ff:05:9d:b9:a5:ff:62:88:39:20:
                    b9:d7:cf:b3:3d:ac:37:0a:c5:69:81:1c:bd:0d:03:
                    29:11:b2:d1:71:da:ea:ed:fa:0c:b3:68:37:ab:f2:
                    d0:cf:6e:6e:3e:fe:77:a7:c5:b9:f1:e0:d4:9a:ac:
                    10:38:da:b2:8f:b2:0f:ba:b0:31:ab:5f:4d:c2:10:
                    5c:98:48:19:4f:07:20:54:52:c5:45:58:7d:8b:7c:
                    74:0d:59:f6:b4:d9:7c:76:b4:7f:3f:fc:d9:c1:9f:
                    c6:ca:27:48:27:48:23:32:c9:b9:49:2c:1d:51:3d:
                    8c:55:98:87:49:41:f2:7b:d9:66:4c:ea:76:51:4b:
                    dd:f4:a6:af:43:c2:8c:38:dc:ec:59:ff:d9:96:06:
                    30:c4:d8:7f:c2:ca:9b:38:b2:44:2e:b4:43:02:d6:
                    1c:22:40:08:a0:d9:9d:ec:3e:02:54:cf:b7:70:bd:
                    7c:94:6e:46:6a:97:7c:2e:cc:a0:25:6c:8d:7e:b0:
                    ec:19:49:3b:60:a6:2c:e5:ee:22:ab:8a:0a:9a:ce:
                    17:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:84:5B:84:36:BD:9C:2B:23:2F:83:18:02:50:75:EB:29:94:6F:04
            X509v3 Authority Key Identifier:
                keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:43:25:d7:2d:1d:65:95:de:91:92:54:3b:66:49:df:ba:bb:
         94:cd:98:8f:22:d6:ce:85:8d:35:30:aa:d2:1f:8d:5b:d1:0d:
         85:a1:2f:26:10:a6:c5:99:24:10:1f:c1:db:85:a1:6b:03:07:
         6d:5e:41:37:87:8e:d2:48:3b:7b:85:6b:55:ac:cb:2a:31:8c:
         e3:87:5c:78:e5:f1:32:f3:e5:1a:ad:5b:19:2f:60:70:99:78:
         c6:3b:7b:53:d8:89:c5:81:c1:3e:3e:36:73:0e:b3:97:0f:9f:
         78:b7:de:ff:5f:fa:8e:9a:56:c3:2a:2d:52:63:b9:d9:97:b8:
         6d:90:a1:ec:0c:0d:08:21:c8:d5:61:82:60:b0:85:4c:67:7d:
         c8:18:58:f5:7d:94:94:93:d0:5e:62:53:1e:cb:fc:2f:9e:0b:
         54:7b:97:36:5e:ea:69:26:88:42:1b:28:29:dc:f6:77:1a:c3:
         a7:b2:1a:f7:15:de:6c:44:58:e0:1a:0c:17:2b:55:23:20:01:
         b8:2e:81:a7:4e:cd:7b:13:e7:16:d7:1d:8c:9e:9e:e9:f1:18:
         8d:5e:4c:f9:03:a3:e8:89:91:1b:42:9d:0d:cf:dc:4d:05:2f:
         b8:06:a7:25:f1:31:cb:e7:4a:b7:0f:f9:2e:15:e1:2b:2f:e5:
         94:89:6b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:26:31 2026 by rpki-client