Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
File:                     tFBrzj9-GuOn4sua0gXEzfsC3bU.mft (raw, json)
Hash identifier:          g+UdD/U4GLYAP4c90VACkEO35/nhG+u+cmtO8foAqYc=
Subject key identifier:   2F:D0:C6:4E:48:53:73:C9:BA:8A:76:9A:05:A4:3D:58:D7:A4:B8:CA
Authority key identifier: B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
Certificate issuer:       /CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Certificate serial:       019FD986552073C8297776739A4F22AA3516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
Manifest number:          18FB
Signing time:             Fri 07 Aug 2026 00:01:27 +0000
Manifest this update:     Fri 07 Aug 2026 00:01:27 +0000
Manifest next update:     Sat 08 Aug 2026 00:01:27 +0000
Files and hashes:         1: 8w5O_aWA-iC3XSFytQzyWAwkxBU.roa (hash: Q/iVM9hXeiPLXmIvOeOkM8vWEHG4S+hzrZyqZ+mibGo=)
                          2: tFBrzj9-GuOn4sua0gXEzfsC3bU.crl (hash: 4Caqkbl5zzmn1YRTHwFYBeGISw+4ylYLD6e5v1eymM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Aug 2026 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d9:86:55:20:73:c8:29:77:76:73:9a:4f:22:aa:35:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
        Validity
            Not Before: Aug  7 00:01:27 2026 GMT
            Not After : Aug  8 00:01:27 2026 GMT
        Subject: CN=2fd0c64e485373c9ba8a769a05a43d58d7a4b8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:14:c5:84:6b:0a:12:da:2a:d2:02:f8:08:
                    b0:db:e8:41:5a:b2:f3:8c:36:55:f5:ca:a3:d9:cb:
                    8d:5d:3d:78:97:e4:6f:9b:2b:6d:54:d1:94:0c:82:
                    dd:c6:02:5b:77:4d:42:1f:5e:53:99:fc:db:2a:51:
                    56:24:07:2b:70:f2:37:30:c6:a2:31:d8:dc:c0:1f:
                    16:d0:41:15:62:df:21:a6:9e:fe:35:7d:52:c3:f4:
                    94:42:a3:d1:b8:d6:52:7f:16:6d:3d:bc:df:f6:00:
                    44:c4:97:08:a6:23:fe:22:a6:19:13:8f:b1:9d:ca:
                    95:e8:4b:c0:09:18:62:3e:86:f5:f4:9e:bb:df:f4:
                    49:9c:b6:55:43:84:fc:a9:58:07:9b:ff:47:92:30:
                    80:9b:cc:0b:5a:13:d5:ef:9e:06:40:6f:10:a1:55:
                    7f:b2:30:6d:42:42:6b:f2:5e:65:9e:90:49:3d:3b:
                    dd:d1:8b:4c:71:6b:ec:a5:e9:d6:cb:6c:a2:f0:81:
                    83:9e:81:95:96:6a:d3:9b:87:4c:f9:5c:99:85:40:
                    f7:09:b5:7d:fd:86:f4:ca:19:4f:d0:2f:bf:e4:68:
                    e6:f7:69:b4:ce:02:e6:05:15:0a:f4:fb:d9:eb:89:
                    5e:d1:a6:f9:91:4a:47:2f:35:e7:82:56:df:b2:79:
                    a4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D0:C6:4E:48:53:73:C9:BA:8A:76:9A:05:A4:3D:58:D7:A4:B8:CA
            X509v3 Authority Key Identifier:
                keyid:B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:24:05:f3:8c:f4:b5:c2:ce:23:a7:7b:a0:06:2f:89:d5:1f:
         36:66:0e:9a:f2:24:fb:9f:ef:bb:e6:11:d1:12:bb:18:50:d9:
         1e:39:73:e3:c0:87:8e:e4:5f:90:78:82:f9:89:54:28:4d:df:
         f7:01:64:79:69:8c:f9:c4:a0:f4:75:50:ec:9a:a0:1e:05:02:
         32:9f:67:41:f7:a0:e1:a8:41:e6:11:0e:22:12:27:7c:c6:f5:
         80:aa:e8:59:04:36:a5:21:96:2a:ad:40:8d:2f:da:9a:26:78:
         32:f0:85:21:00:53:0c:f1:f9:c5:c3:cc:9e:39:77:76:72:2c:
         1b:75:7c:38:71:a9:fc:e9:82:23:51:60:6b:84:68:20:9e:28:
         a8:4a:b2:d7:af:b4:15:8e:00:13:d0:b4:40:b4:0d:d4:bd:f8:
         36:66:67:49:dd:3f:44:29:09:dd:66:5a:46:a4:94:5f:16:ad:
         f3:4c:8c:fe:fa:28:ff:34:15:73:a9:37:15:ba:33:da:61:7c:
         71:fb:b5:c3:92:38:90:1a:4a:cd:d4:6e:03:99:6d:bd:90:6a:
         e4:87:85:87:05:8b:92:0d:88:b2:91:e7:27:af:6f:8b:c6:bb:
         70:65:49:8e:db:d8:df:79:cf:2b:ff:c6:9e:26:88:f8:28:69:
         2a:1d:5c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 01:59:39 2026 by rpki-client